Sample of Impersonating User

[rwinch]

Demonstrate how one can use the multiple session support to impersonate a user to see what a particular type of user experiences. For example, admin is troubleshooting an issue, previewing permissions, etc.

[chrylis]

So basically Spring Sudo?

[rwinch]

Not really. It is pretty much the same idea as the users sample but instead of authenticating with multiple users (via some external mechanism) impersonation is done. The reason it is different is that the sudo is external of Spring Session (it does not care about how the user is authenticated).

[ptahchiev]

Any updates on this one - I'd really love to see this documented to give it a try :) Is it possible to this now? Is it just the documentation that is missing, or does it need extra development?

[rwinch]

Look at the multi session example, but instead of requiring authentication just create a user and set it in the session

[ptahchiev]

Hey @rwinch I can't seem to find the multi session example. Also the multi-session functionality seems to be missing. Was it dropped from the code base? Previously it was in the CookieHttpSessionStrategy but now it isn't any more. Regarding your comment Creating a UserDetails object is easy, but what does set it in the session mean? Do i set the user as an attribute of the session? Under what name?

[vpavic]

@ptahchiev See #906 and #917.