diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java
index aa5d40e..96f852b 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java
+++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java
@@ -15,7 +15,7 @@ import org.springframework.security.web.session.SessionInformationExpiredStrateg
 
 
 /**
- *
+ * session过期处理类
  * @author lsy
  */
 @Configuration
diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java
index 54219e8..bdbffcd 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java
+++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java
@@ -11,8 +11,7 @@ import org.springframework.security.web.session.SessionInformationExpiredEvent;
 import org.springframework.security.web.session.SessionInformationExpiredStrategy;
 
 /**
- * @author zhailiang
- *
+ * @author lsy
  */
 public class MsExpiredSessionStrategy extends AbstractSessionStrategy implements SessionInformationExpiredStrategy {
 
diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java
index df75a9d..15caf49 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java
+++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java
@@ -12,8 +12,8 @@ import javax.servlet.http.HttpServletResponse;
 import org.springframework.security.web.session.InvalidSessionStrategy;
 
 /**
- * @author zhailiang
  *
+ * @author lsy
  */
 public class MsInvalidSessionStrategy extends AbstractSessionStrategy implements InvalidSessionStrategy {
 
diff --git a/boot-starter/boot-starter-security/boot-starter-security-core/README.md b/boot-starter/boot-starter-security/boot-starter-security-core/README.md
index 09a206c..b14ec19 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-core/README.md
+++ b/boot-starter/boot-starter-security/boot-starter-security-core/README.md
@@ -38,4 +38,8 @@ weChat 第三方登录
 - 查询已绑定的用户，请求`/connect`接口即可，要求当前登录的用户放入session中的是SocialUser的对象，能获取到getId
 - 绑定用户就是发起post请求`/connect/providerId`即可.可以使用自定义名称为`qqConnectedView`或`weChatConnectedView`的bean来自定义视图
 - 解除绑定的时候，发送delete请求`/connect/providerId`删除社交登录的信息即可。返回的视图和绑定的时候使用相同的视图，在视图里面做逻辑判断
-
+### seesion管理
+- `ms.security.session.maximumSessions`同一个系统中的最大session数，默认1
+- `ms.security.session.maxSessionPreventsLogin`达到最大session时，是否阻止新的登录请求，默认为false,不阻止，新的登录将老的登
+录失效掉
+- `ms.security.session.sessionInvalidUrl`session失效的时候跳转的地址