解决shiro升级1.6后url拼接；jsession引发400问题

在shiro.xml文件中添加配置

配置解析

• 1、添加 sessionManager bean

<bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">                         <!-- 去掉url ;jsessionid= -->                         <property name="sessionIdUrlRewritingEnabled" value="false" />                         <!-- 解决no session -->                         <property name="sessionIdCookie" ref="sessionIdCookie"/>                         <!-- 设置 session时效 -->                         <property name="globalSessionTimeout" value="3600000"/>                 </bean>

 

• 2、把新增sessionManager注入securityManager

<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">                         <property name="realm" ref="ShiroRealm" />                         <!—这句必须加，不然白扯 -->                         <property name="sessionManager" ref="sessionManager"/>                 </bean>

 

• 3、新增 sessionIdCookie， 解决no session问题

<bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie">                         <constructor-arg value="sid"/>                         <!--设置Cookie名字，默认为JSESSIONID-->                         <property name="name" value="SDMSID" />                 </bean>