<http auto-config="true" use-expressions="true">
<!-- Uncomment to limit the number of sessions a user can have -->
<session-management invalid-session-url="/index.do">
<concurrency-control max-sessions="1"
error-if-maximum-exceeded="false"/>
</session-management>
</http> <listener>
<listener-class>
org.springframework.web.context.ContextLoaderListener
</listener-class>
</listener>
<listener>
<listener-class>
org.springframework.security.web.session.HttpSessionEventPublisher
</listener-class>
</listener>讓我們在BaseController中添加一個簡單的方法以及bean自動織入。@Autowired
@Autowired
SessionRegistry sessionRegistry;
@ModelAttribute("numUsers")
public int getNumberOfUsers() {
return sessionRegistry.getAllPrincipals().size();
}最後，我們可以添加一個頁腳footer.jsp到JBCP Pets站點中並使用這個屬性。
<body>
<div id="footer">
${numUsers} user(s) are logged in!
</div>
</body>
參考資料：《Spring Security3》第六章第三部分翻譯（Session的管理和併發）
http://lengyun3566.iteye.com/blog/1198836