Spring security: concurrent requests with PersistentTokenBasedRememberMeServices

I have a Spring REST web application and I am currently using the Spring Security mechanism PersistentTokenBasedRememberMeServices

to authenticate users.

I also need to make multiple requests to the server from the same user at the same time, so it cannot be used for this purpose PersistentTokenBasedRememberMeServices

because the user's token is updated every time after any requested user request.

What would be a safe way to make multiple requests to the server at the same time in my situation?

I understand that this is an option not to update the user's token after every request, but keep it unchanged for some time, but this is not that secure, so I am looking for other options.

+3


source to share





All Articles