Tomcat Manager 的Sessions Administration之Guessed User name来源

Might be easiest for you to look at the code yourself. In 6.0.18, the file=
of interest is:
org/apache/catalina/manager/util/SessionUtils.java
and the methods are guessUserFromSession() and guessLocaleFromSession().
For the user name, the manager uses the Session.getPrincipal() if available=
; if not, it tries the following Session attribute names:
Login
User
userName
UserName
Utilisateur
using the given case, lower case, and upper case. Failing that, it searche=
s for attributes that are instances of java.security.Principal or javax.sec=
urity.auth.Subject.
For locale, the manager tries the following attribute names:
org.apache.struts.action.LOCALE
org.springframework.web.servlet.i18n.SessionLocaleResolver.LOCALE
javax.servlet.jsp.jstl.fmt.locale
Locale
java.util.Locale
again using the given case, lower case, and upper case. Additional checks =
are made for an attribute name containing both "tapestry" and "engine", and=
instances of java.util.Locale.