sessionManagement

@Configuration
@EnableWebSecurity
class SecurityConfig {

    @Bean
    fun securityFilterChain(http: HttpSecurity): SecurityFilterChain {
        http {
            sessionManagement {
                invalidSessionUrl = "/invalid-session"
                sessionConcurrency {
                    maximumSessions = 1
                }
            }
        }
        return http.build()
    }
}