Spring not restoring tomcat persistent sessions to session registry after restart?

Question

I\'m using Tomcat 6.2 and Spring MVC 2.5. I\'ve noticed that, whilst a user is logged in I can restart Tomcat and the user is able to continue browsing without re-authentica

Answer 1

Are the objects, you want persisted and then restored from the session, serializable?

Answer 2

Try this configuration:

<bean id="filterInvocationInterceptor" class="org.acegisecurity.intercept.web.FilterSecurityInterceptor">
    ...
    <property name="alwaysReauthenticate" value="true"/>
</bean>