diff --git a/docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc b/docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc index 276ce6ba20..480c269381 100644 --- a/docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc +++ b/docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc @@ -202,13 +202,13 @@ Java:: [source,java,role="primary"] ---- @Bean -SecurityWebFilterChain filterChain(ServerHttpSecurity http, DefaultWebSessionManager webSessionManager) { +SecurityWebFilterChain filterChain(ServerHttpSecurity http) { http // ... .sessionManagement((sessions) -> sessions .concurrentSessions((concurrency) -> concurrency .maximumSessions(SessionLimit.of(1)) - .maximumSessionsExceededHandler(new PreventLoginMaximumSessionsExceededHandler(webSessionManager.getSessionStore())) + .maximumSessionsExceededHandler(new PreventLoginMaximumSessionsExceededHandler()) ) ); return http.build(); @@ -225,13 +225,13 @@ Kotlin:: [source,kotlin,role="secondary"] ---- @Bean -open fun springSecurity(http: ServerHttpSecurity, webSessionManager: DefaultWebSessionManager): SecurityWebFilterChain { +open fun springSecurity(http: ServerHttpSecurity): SecurityWebFilterChain { return http { // ... sessionManagement { sessionConcurrency { maximumSessions = SessionLimit.of(1) - maximumSessionsExceededHandler = PreventLoginMaximumSessionsExceededHandler(webSessionManager.sessionStore) + maximumSessionsExceededHandler = PreventLoginMaximumSessionsExceededHandler() } } } @@ -380,11 +380,6 @@ public class SessionControl { ---- ====== -[NOTE] -==== -If you are not using the `WebSessionStoreReactiveSessionRegistry` as the implementation, and you want the `WebSession` to be invalidated as well, you will need to use the `WebSessionStore` to retrieve and invalidate the `WebSession`. -==== - [[disabling-for-authentication-filters]] == Disabling It for Some Authentication Filters