如何在Spring安全设置登录到期时间

Question

嗨，我已经在springboot中实现了Spring Security性。现在我希望登录到期时间为10分钟，以便到期后页面将重定向到页面`@Configuration@EnableWebSecurity公共类ApplicationSecurityConfiguration extends websecurityconfigureradicater{

@Autowired
private UserDetailsService userDetailsService;

@Autowired
private LoginSuccessHandler loginSuccessHandler;

@Bean
AuthenticationProvider authenticationProvider(){
    DaoAuthenticationProvider authenticationProvider=new DaoAuthenticationProvider();
    authenticationProvider.setUserDetailsService(userDetailsService);
    authenticationProvider.setPasswordEncoder(new BCryptPasswordEncoder());
    return authenticationProvider;
}



@Override
protected void configure(HttpSecurity http) throws Exception {
    
    http
    .csrf().disable()
    .authorizeRequests()
    .antMatchers("/js/**","/webjars/**","/images/**","/css/**").permitAll()
    .anyRequest().authenticated()
    .and()
    .formLogin().loginPage("/login").successHandler(loginSuccessHandler).permitAll()
    .and()
    .logout().invalidateHttpSession(true).permitAll();
    
    http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.ALWAYS)
    .maximumSessions(1).expiredUrl("/sessionExpired");
    /*http.authorizeRequests()
    .antMatchers("/")
        .permitAll()*/
        
    /*.and()
        .formLogin()
        .loginPage("/login")
        .defaultSuccessUrl("/home")
        .loginProcessingUrl("/checkLogin")
        .failureUrl("/login")
        .permitAll()
    .and()
        .logout()
        .logoutSuccessUrl("/login")
        .invalidateHttpSession(true)
        .permitAll()*/
    /*.and()
        .csrf()
        .disable()
        ;*/
        
    
}

} `

Answer 1

对于Springboot应用程序，您需要在application.property中设置属性server.servlet.session.timeout=15m。如果默认情况下没有指定时间单位，则需要秒