title: Session management using spring security
body: <p>I have created a basic spring security authentication using UserDetailsService and now I am able to validate user. However, I don't understand how to achieve below things: </p>
  
  <ol>
  <li>Once a user is logged in, when next request comes how and where do I check if the request is coming from the same logged in user or other logged in user?</li>
  </ol>
  
  <p>I know the concept of Spring interceptors where I can intercept all incoming request. But is there something in spring security that does this?</p>
  
  <ol start="2">
  <li>How can I start a session after logging in  and store values in session for that user?</li>
  </ol>
  
  <p>I browsed through existing answers but most of examples are for logging in. </p>
  
  <p>I would appreciate if someone can give me examples.</p>
  
  <p>EDIT:
  I think I should use session scoped beans in order to maintain user's session contents rather than manipulating httpsession directly.</p>