异常总结： Springboot+shiro 调用接口出现无权限

第一次不会报错，等几分钟再调用不是超时，会报错

org.apache.shiro.authz.UnauthenticatedException: This subject is anonymous - it does not have any identifying principals and authorization operations require an identity to check against.  A Subject instance will acquire these identifying principals automatically after a successful login is performed be executing 

org.apache.shiro.subject.Subject.login(AuthenticationToken) or when 'Remember Me' functionality is enabled by the SecurityManager.  This exception can also occur when a previously logged-in Subject has logged out which makes it anonymous again.  Because an identity is currently not known due to any of these conditions, authorization is denied.

原因：因为idea热部署，tomcat重新启动，导致登陆信息丢失

 

解决方法：

yml配置：

server:
  session:
    store-dir: ./session #session序列化存储数据的目录
    persistent: true  #重新启动之间持续会话数据

xml配置：

<Manager className="org.apache.catalina.session.PersistentManager" saveOnRestart="true">
    <Store className="org.apache.catalina.session.FileStore" directory="E:\tomcat\tomcat1\conf\aa"/>
</Manager>