diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java
index 36fa5de..61034fa 100644
--- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java
+++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java
@@ -19,6 +19,13 @@ import org.springframework.security.web.authentication.AuthenticationSuccessHand
  * UsernamePasswordAuthenticationFiler（可配置）-> BasicAuthenticationFilter(可配置) ->ExceptionTranslationFilter（不可配置）
  * (负责处理FilterSecurityInterceptor抛出的异常)->最后一个过滤器是FilterSecurityInterceptor（不可配置）这个过滤器是根据配置判断这个
  * 请求能不能访问这个资源的
+ * spring security 如何保证多个多个线程访问相同的授权信息？
+ * 在当有一个请求进入的时候，会从session中尝试获取Authentication对象，如果有的话就会将这个对象存入线中。当请求的线程返回的时候会将
+ * Authentication对象放入session中
+ * 如何获取Authentication对象？
+ * 在请求的方法中填写Authentication authentication参数。或者使用SecurityContextHolder.getContext().getAuthentication()获取。
+ * 如何获取userDetails对对象?
+ * 在请求的方法中添加如下参数@AuthenticationPrincipal UserDetails userDetails
  */
 @Configuration
 public class BrowserSecurityConfig extends WebSecurityConfigurerAdapter {
diff --git a/boot-starter/boot-starter-security/boot-starter-security-core/src/main/java/com/micro/fast/security/core/validate/code/ImageCode.java b/boot-starter/boot-starter-security/boot-starter-security-core/src/main/java/com/micro/fast/security/core/validate/code/ImageCode.java
new file mode 100644
index 0000000..8601f8f
--- /dev/null
+++ b/boot-starter/boot-starter-security/boot-starter-security-core/src/main/java/com/micro/fast/security/core/validate/code/ImageCode.java
@@ -0,0 +1,7 @@
+package com.micro.fast.security.core.validate.code;
+
+/**
+ *
+ */
+public class ImageCode {
+}