in my project, the user only can login once, and when any user want to login with the same userid, the attempt to login will be rejected. and the user that login first will give a notice that any attempt to login with their user id.
how to configure spring security to apply this behavior? is there any build in configuration in spring security context can handle this behavior?
thanks for the answer
There is a build in Feature from Spring Security Called the ConcurrentSessionFilter or Controller. Have a look at that.
Once configured it should provide you the functionality you’re looking for
UPDATE:
Configuration