Apache Shiro源码(SessionStorageEvaluator)

上一篇SubjectDAO中说到了,是否启用session用于subject状态的存储取决于SessionStorageEvaluator,那这一节分析一下SessionStorageEvaluator的作用。

源码注释

Evaluates whether or not Shiro may use a {@code Subject}'s {@link org.apache.shiro.session.Session Session} to persist that {@code Subject}'s internal state.
It is a common Shiro implementation strategy to use a Subject's session to persist the Subject's identity and authentication state (e.g. after login) so that information does not need to be passed around for any further requests/invocations.  This effectively allows a session id to be used for any request or invocation as the only 'pointer' that Shiro needs, and from that, Shiro can re-create the Subject instance based on the referenced Session.
However, in purely stateless applications, such as some REST applications or those where every request is authenticated, it is usually not needed or desirable to use Sessions to store this state (since it is in fact re-created on every request).  In these applications, sessions would never be used.
This interface allows implementations to determine exactly when a Session might be used or not to store {@code Subject} state on a per-Subject basis.
If you simply wish to enable or disable session usage at a global level for all {@code S
  • 0
    点赞
  • 3
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值