| Called by any class that wishes to know whether the current authentication request should be permitted.
Generally callers will be AuthenticationManagers before they authenticate, but could equally
include Filters or other interceptors that wish to confirm the ongoing validity of a previously
authenticated Authentication.The implementation should throw a suitable exception if the
user has exceeded their maximum allowed concurrent sessions.
Parameters:
request - the authentication request (never null)
throws:
AuthenticationException - if the user has exceeded their maximum allowed current sessions |