Spring security logout invalidates session scope object which is not required

0
votes

I have a Spring MVC, Data, Security application. When a user logs out I lose some client's data which is stored in Session Scope object ( /login?logout )

@Scope(value = WebApplicationContext.SCOPE_SESSION, proxyMode = ScopedProxyMode.TARGET_CLASS)

Does anybody know how to prevent spring security not to remove data stored in some particular session scope object?

1
javaspring-mvcspring-security

1 Answers

1
votes

Java config:

.logout()
  .invalidateHttpSession(false);

XML:

<logout invalidateHttpSession="false">