try { UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username, encrptPassword); authRequest.setDetails(new WebAuthenticationDetails(request)); SecurityContext securityContext = SecurityContextHolder.getContext(); Authentication auth = this.authenticationManager.authenticate(authRequest); securityContext.setAuthentication(auth); this.sessionStrategy.onAuthentication(auth, request, response); }catch (AuthenticationException e){ System.out.println(e.getMessage()); return; } 怎么重写onAuthentication 方法，实现当同一个账号在其他地方登录后强制退出其他浏览器

要实现当同一个账号在其他地方登录后强制退出其他浏览器，你可以重写`SessionAuthenticationStrategy`接口的`onAuthentication`方法。以下是一个示例代码：

import org.springframework.security.core.Authentication;
import org.springframework.security.core.session.SessionInformation;
import org.springframework.security.core.session.SessionRegistry;
import org.springframework.security.web.authentication.session.SessionAuthenticationStrategy;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.util.List;

public class CustomSessionAuthenticationStrategy implements SessionAuthenticationStrategy {

    private final SessionRegistry sessionRegistry;

    public CustomSessionAuthenticationStrategy(SessionRegistry sessionRegistry) {
        this.sessionRegistry = sessionRegistry;
    }

    @Override
    public void onAuthentication(Authentication authentication, HttpServletRequest request, HttpServletResponse response) {
        // 获取已登录用户的用户名
        String username = authentication.getName();

        // 获取当前用户的所有会话信息
        List<SessionInformation> sessions = sessionRegistry.getAllSessions(username, true);

        // 遍历所有会话，将除当前会话外的其他会话都标记为过期
        for (SessionInformation session : sessions) {
            if (!session.getSessionId().equals(request.getSession().getId())) {
                session.expireNow();
            }
        }
    }
}

然后，在你的配置类中使用自定义的`CustomSessionAuthenticationStrategy`替代默认的`ConcurrentSessionControlAuthenticationStrategy`，例如：

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private SessionRegistry sessionRegistry;

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            // 其他配置...
            .sessionManagement()
                .maximumSessions(1) // 设置最大并发会话数为1
                .sessionRegistry(sessionRegistry)
                .sessionAuthenticationStrategy(sessionAuthenticationStrategy()) // 使用自定义的SessionAuthenticationStrategy
                .and();
    }

    @Bean
    public SessionAuthenticationStrategy sessionAuthenticationStrategy() {
        return new CustomSessionAuthenticationStrategy(sessionRegistry);
    }
}

这样，在同一个账号在其他地方登录后，之前的会话将被标记为过期，用户将被强制退出其他浏览器。