[SHIRO-456] A way to limit the numer of current sessons with the same credentials

• Type: New Feature
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.2.1
• Component/s: Authentication (log-in)
• Labels: features
• Assignee: Unassigned
• Reporter: JD Evora
• Created: 10/Sep/13 16:50
• Updated: 13/Sep/13 19:18

Description

A usual requirement is to limit the number of users that can be simultaneously logged in using the same credentials (or invalidate previous sessions)

Even you can find a possible implementation in https://kenai.com/projects/shirospring I think that it is important to add it as standard

As a reference, spring security implements it with the max-sessions="1" attribute

<security:concurrent-session-control
max-sessions="1" exception-if-maximum-exceeded="true" expired-url="/login" />