Spring security: concurrent requests with PersistentTokenBasedRememberMeServices

I have a Spring REST web application and I am currently using the Spring Security mechanism PersistentTokenBasedRememberMeServices

to authenticate users.

I also need to make multiple requests to the server from the same user at the same time, so it cannot be used for this purpose PersistentTokenBasedRememberMeServices

because the user's token is updated every time after any requested user request.

What would be a safe way to make multiple requests to the server at the same time in my situation?

I understand that this is an option not to update the user's token after every request, but keep it unchanged for some time, but this is not that secure, so I am looking for other options.

+3
spring spring-security


source to share


No one has answered this question yet

Check out similar questions:

1873
What's the difference between @Component, @Repository and @Service annotations in Spring?
249
RESTful Authentication over Spring
54
Disable Spring Security for Http OPTIONS method
46
How to secure REST API with Spring Boot and Spring Security?
41
Spring Security - token based authentication and token based user / password authentication
32
How Spring Security Filter Chaining Works
2
Integrating Token Based Security into an Existing Spring Security Web Application
0
Secure Spring Security Application with Custom User Authentication
0
Spring Safety: Sporadic NullPointerException
0
Spring Rest api and Spring Basic Security



All Articles
Loading...
X
Show
Funny
Dev
Pics