本文介绍如何配置Session超时设置，通常情况下，30分钟后Session将过期，这等同于调用了session.invalidate()方法。在HttpSessionContextIntegrationFilter中会创建一个新的无认证的安全上下文，因此对于受保护的URL无法查看。
[code] <session-config>
<session-timeout>30</session-timeout>
</session-config>[/code]
after 30 minus the session will time out ,the sime as u invoking
session.invalidate();so when in HttpSessionContextIntegrationFilter,
it will create new security context with no auth.so for the proteced
url u can't see it.
the session time out has a defaut time if u didn't set it explicitly.
<session-timeout>30</session-timeout>
</session-config>[/code]
after 30 minus the session will time out ,the sime as u invoking
session.invalidate();so when in HttpSessionContextIntegrationFilter,
it will create new security context with no auth.so for the proteced
url u can't see it.
the session time out has a defaut time if u didn't set it explicitly.
扫一扫
900
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
