Open
Description
Expected Behavior
The SessionManagementFilter
features should be separated into different components so users can use lazy session access while still using some of its features.
Current Behavior
The SessionManagementFilter
is not used by default in Spring Security 6. If someone wants to use it, that means that they won't have the benefit of lazy session access because right now any feature of SessionManagementFilter
means that lazy session access is gone.
Context
This would allow us to deprecate the SessionManagementFilter
and simplify the configuration. It also can simplify the documentation #12601