If I am using Spring Session, is it necessary to set up sessionManagement in HttpSecurity?

edit

Yes, it is necessary to configure session management in HttpSecurity when using Spring Session. Spring Session provides a way to manage user sessions by storing session data outside of the application's own memory. However, to fully utilize Spring Session's capabilities, session management needs to be configured in the application's security configuration (HttpSecurity) to enable the handling of session expiration, invalidation, and creation. This ensures that user sessions are properly managed and secured.