apache / apache/grails-core

Feature Request: Automatically configure "concurrent sessions" support

Open
#15,876 1 comment 0 reactions 0 assignees View on GitHub
relates-to:spring-security
Dominant language
Groovy
Stars
2.9k
Forks
975
Avg merge
1d 22h
Merged PRs (30d)
92

Description

See https://docs.spring.io/spring-security/site/docs/current/reference/html5/#concurrent-sessions

I've implemented this in our Grails application using a combination of `resources.groovy` and `BootStrap.groovy` using `clientRegisterFilter`, but it seems like it would fit right in with this plugin as a configuration option.

I'm thinking something like `grails.plugin.springsecurity.trackConcurrentSessions: true|false`. It can be false by default.

I'm happy to contribute this feature as a PR if you think it's worthwhile.

Contributor guide

Open the contributing guide

Research direction

Start with the Spring Security concurrent-sessions documentation linked in the issue, then inspect the resources.groovy and BootStrap.groovy integration using clientRegisterFilter. The feature should expose the proposed grails.plugin.springsecurity.trackConcurrentSessions option, default it to false, and enable the support when set to true without manual setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
groovy, spring
Domain
authentication
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.