From 52b39dde31736b213f91036ebd9a45e9549bc78d Mon Sep 17 00:00:00 2001
From: winLsy <18332763730@163.com>
Date: Thu, 18 Jan 2018 20:39:51 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0session=E7=AE=A1=E7=90=86?=
 =?UTF-8?q?=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../security/browser/config/BrowserSecurityBeanConfig.java  | 2 +-
 .../security/browser/session/MsExpiredSessionStrategy.java  | 3 +--
 .../security/browser/session/MsInvalidSessionStrategy.java  | 2 +-
 .../boot-starter-security-core/README.md                    | 6 +++++-
 4 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java
index aa5d40e..96f852b 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java
+++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityBeanConfig.java
@@ -15,7 +15,7 @@ import org.springframework.security.web.session.SessionInformationExpiredStrateg
 
 
 /**
- *
+ * session过期处理类
  * @author lsy
  */
 @Configuration
diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java
index 54219e8..bdbffcd 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java
+++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsExpiredSessionStrategy.java
@@ -11,8 +11,7 @@ import org.springframework.security.web.session.SessionInformationExpiredEvent;
 import org.springframework.security.web.session.SessionInformationExpiredStrategy;
 
 /**
- * @author zhailiang
- *
+ * @author lsy
  */
 public class MsExpiredSessionStrategy extends AbstractSessionStrategy implements SessionInformationExpiredStrategy {
 
diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java
index df75a9d..15caf49 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java
+++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/session/MsInvalidSessionStrategy.java
@@ -12,8 +12,8 @@ import javax.servlet.http.HttpServletResponse;
 import org.springframework.security.web.session.InvalidSessionStrategy;
 
 /**
- * @author zhailiang
  *
+ * @author lsy
  */
 public class MsInvalidSessionStrategy extends AbstractSessionStrategy implements InvalidSessionStrategy {
 
diff --git a/boot-starter/boot-starter-security/boot-starter-security-core/README.md b/boot-starter/boot-starter-security/boot-starter-security-core/README.md
index 09a206c..b14ec19 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-core/README.md
+++ b/boot-starter/boot-starter-security/boot-starter-security-core/README.md
@@ -38,4 +38,8 @@ weChat 第三方登录
 - 查询已绑定的用户，请求`/connect`接口即可，要求当前登录的用户放入session中的是SocialUser的对象，能获取到getId
 - 绑定用户就是发起post请求`/connect/providerId`即可.可以使用自定义名称为`qqConnectedView`或`weChatConnectedView`的bean来自定义视图
 - 解除绑定的时候，发送delete请求`/connect/providerId`删除社交登录的信息即可。返回的视图和绑定的时候使用相同的视图，在视图里面做逻辑判断
-
+### seesion管理
+- `ms.security.session.maximumSessions`同一个系统中的最大session数，默认1
+- `ms.security.session.maxSessionPreventsLogin`达到最大session时，是否阻止新的登录请求，默认为false,不阻止，新的登录将老的登
+录失效掉
+- `ms.security.session.sessionInvalidUrl`session失效的时候跳转的地址