java - Does Spring Security require the use of Spring Session? -


we looking externalize our sessions in memcached, various reasons specific our architecture, spring session not choice us. do, however, want utilize spring security secure application.

do security-related features in spring security require spring session? features concurrent session control or csrf protection come mind features might require spring session. or, spring session not required @ all?

no, spring security not depend on spring session library. have used spring security in several projects , never seen requirement of spring session.

per default spring security uses standard httpsession in servlet api. framework highly customizable say, without have tested it, part switched out custom code stores state.


Comments

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

jquery - Responsive Navbar with Sub Navbar -