0 votes
1 view
in AWS by (19.2k points)

I am building a web application with Spring Security that will live on Amazon EC2 and use Amazon's Elastic Load Balancers. Unfortunately, ELB does not support sticky sessions, so I need to ensure my application works properly without sessions.

So far, I have setup RememberMeServices to assign a token via a cookie, and this works fine, but I want the cookie to expire with the browser session (e.g. when the browser closes).

I have to imagine I'm not the first one to want to use Spring Security without sessions... any suggestions?

 

1 Answer

0 votes
by (44.6k points)

In Spring Security 3 Java Configuration, HttpSecurity.sessionManagement() can be used:

@Override

protected void configure(final HttpSecurity http) throws Exception {

    http

        .sessionManagement()

            .sessionCreationPolicy(SessionCreationPolicy.STATELESS);

}

Welcome to Intellipaat Community. Get your technical queries answered by top developers !


Categories

...