SHIRO-361 Added property to support disabling of JSESSIONID in URL

This can be turned off by setting: `sessionManager.sessionIdUrlRewritingEnabled` to false (recommended)
in the shiro.ini (or equivalent configuration)

This is a stop gap on the way to SHIRO-360
5 files changed
tree: 53a62b3a1045dfb03bd5ab043dd0958d213057e3
  1. all/
  2. cache/
  3. config/
  4. core/
  5. crypto/
  6. event/
  7. lang/
  8. samples/
  9. src/
  10. support/
  11. tools/
  12. web/
  13. .gitignore
  14. CONTRIBUTING.md
  15. LICENSE
  16. NOTICE
  17. pom.xml
  18. README
  19. README.md
  20. RELEASE-NOTES
  21. shiro.doap.rdf
README.md

Build Status

Apache Shiro

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the largest web and enterprise applications.

Documentation and Examples

http://shiro.apache.org

Tutorials

License

Apache License, Version 2.0