Affects: \
The SessionRegistryImpl , has a memory leak in this.sessionIds = new ConcurrentHashMap<>(); because SessionInformation class hasn´t a equal I solve creating my own RegisterSessionAuthenticationStrategy(new SessionAuthentication())
Comment From: jhoeller
I suppose you meant to report against Spring Security instead since these are not core Spring Framework classes: https://github.com/spring-projects/spring-security/issues