Spring Security2的COOKIE的保存时间设置

1. <http auto-config="true" access-denied-page="/common/403.htm">  
2.         <intercept-url pattern="/login.**" access="IS_AUTHENTICATED_ANONYMOUSLY"/>  
3.         <form-login login-page="/login.jsp" default-target-url="/demo/success.action" authentication-failure-url="/login.jsp?error=1" />  
4.         <logout logout-success-url="/login.jsp" invalidate-session="true"/>  
5.         <remember-me key="e37f4b31-0c45-11dd-bd0b-0800200c9a66" services-ref="rememberMeServices"/>  
6.         <concurrent-session-control max-sessions="1" exception-if-maximum-exceeded="false" expired-url="/login.jsp?error=3"/>  
7.     </http>  
8.        
9.     <!-- cookie认证过滤器 -->  
10.     <beans:bean id="rememberMeProcessingFilter"  
11.         class="org.springframework.security.ui.rememberme.RememberMeProcessingFilter">  
12.         <beans:property name="authenticationManager"  
13.             ref="authenticationManager">  
14.         </beans:property>  
15.         <beans:property name="rememberMeServices"  
16.             ref="rememberMeServices">  
17.         </beans:property>  
18.     </beans:bean>  
19.     <beans:bean id="rememberMeServices"  
20.         class="org.springframework.security.ui.rememberme.TokenBasedRememberMeServices">  
21.         <beans:property name="userDetailsService" ref="userDetailsService"></beans:property>  
22.         <!-- cookie中的键值, 防止保存到客户端的cookie中的加密串被恶意篡改 -->  
23.         <beans:property name="key" value="e37f4b31-0c45-11dd-bd0b-0800200c9a66"></beans:property>  
24.         <!-- cookie有效时间, 单位为秒, 这里设定为5天内不用再登陆 -->  
25.         <beans:property name="tokenValiditySeconds" value="432000"></beans:property>  
26.     </beans:bean>