bboss session自定义session id生成机制介绍

bboss session自定义session id生成机制介绍

[b]1.bboss session自定义session id生成接口[/b]

package org.frameworkset.security.session;

public interface SessionIDGenerator {
	String generateID();

}

[b]2.实现（以默认实现为示例）[/b]
实现（以默认实现为示例）
org.frameworkset.security.session.impl.UUIDSessionIDGenerator

package org.frameworkset.security.session.impl;

import java.util.UUID;

import org.frameworkset.security.session.SessionIDGenerator;

public class UUIDSessionIDGenerator implements SessionIDGenerator {

	@Override
	public String generateID() {
		String sessionid= UUID.randomUUID().toString();
		return sessionid;
	}

}

[b]3.在sessionconf.xml中配置SessionIDGenerator[/b]

<property name="sessionManager" class="org.frameworkset.security.session.impl.SessionManager"
		init-method="init" destroy-method="destroy">					
			<property name="sessionIDGenerator" class="org.frameworkset.security.session.impl.UUIDSessionIDGenerator"/> 
			<property name="sessionTimeout" value="3600000"/>
			<property name="sessionstore" refid="attr:sessionstore"/> 
			<property name="cookiename" value="JSESSIONID"/>			
			<property name="httpOnly" value="true"/>
			<property name="secure" value="false"/>
			<property name="lazystore" value="true"/>
			<property name="monitorAttributes" ><![CDATA[
			[
				{"name":"userAccount","cname":"账号","type":"String","like":true,"enableEmptyValue":false},				
				{"name":"worknumber","cname":"工号","type":"String","like":false,"enableEmptyValue":true}
			]			
			]]></property>

	</property>

	<property name="sessionStaticManager"
	    f:monitorScope="all" class="org.frameworkset.security.session.statics.MongoSessionStaticManagerImpl"

	    />	

	<property name="sessionstore" class="org.frameworkset.security.session.impl.MongDBSessionStore"/>
</properties>