You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@shiro.apache.org by Arthur Fonseca <ar...@aig-express.com> on 2016/01/29 17:24:11 UTC
Fwd: Help setting SessionsSecurityManager
Subject: Help setting SessionsSecurityManager
Hi, i'm working with shiro integrated in spring-boot.
Since i'm using microservices i want to be able to use clustered sessions.
In the persistence layer i'm using memcached shared between microservices.
On a single service i was using 'DefaultWebSecurityManager', but now i
wanto to go to SessionsSecurityManager.
Anyone can provide me an example using this SessionsSecurityManager?
Thanks
Re: Help setting SessionsSecurityManager
Posted by Lenny Primak <lp...@hope.nyc.ny.us>.
Are you looking for a single sign-on?
If yes, take a look at this:
https://github.com/bujiio/buji-pac4j
Stormpath has SAML support (used for SSO as well), so you can take a look at Stormpath.
> On Jan 29, 2016, at 10:24 AM, Arthur Fonseca <ar...@aig-express.com> wrote:
>
>
>
>
> Subject: Help setting SessionsSecurityManager
>
>
>
> Hi, i'm working with shiro integrated in spring-boot.
> Since i'm using microservices i want to be able to use clustered sessions.
> In the persistence layer i'm using memcached shared between microservices.
> On a single service i was using 'DefaultWebSecurityManager', but now i wanto to go to SessionsSecurityManager.
> Anyone can provide me an example using this SessionsSecurityManager?
> Thanks
>
>
Re: Help setting SessionsSecurityManager
Posted by Brian Demers <br...@gmail.com>.
Take a look at:
http://shiro.apache.org/session-management.html#SessionManagement-SessionStorage
Also, Les Hazlewood, has a few blogs/videos/etc floating around the
internet on related topics (shiro cluster session management, and related
performance).
On Fri, Jan 29, 2016 at 12:13 PM, Arthur Fonseca <
arthur.portas@aig-express.com> wrote:
> Ths for helping!
> Is there a way i can share sessions between separate application instances
> running on different JVMs? I have different running webapps and i want to
> be able to so a login with a subject (again with memcached shared ), and
> then recognize that subject using SessionController in another application
> instance.
> From what i understand 'WebSecurityManager' is isolating applications
> from each other. Any hint how can i overcome this.
> Thanks.
>
> On Fri, Jan 29, 2016 at 4:52 PM, Brian Demers <br...@gmail.com>
> wrote:
>
>> The DefaultWebSecurityManager is a SessionsSecurityManager (which is an
>> abstract class)
>>
>> https://shiro.apache.org/static/1.2.2/apidocs/org/apache/shiro/web/mgt/DefaultWebSecurityManager.html
>>
>>
>>
>> On Fri, Jan 29, 2016 at 11:24 AM, Arthur Fonseca <
>> arthur.portas@aig-express.com> wrote:
>>
>>>
>>>
>>>
>>> Subject: Help setting SessionsSecurityManager
>>>
>>>
>>>
>>> Hi, i'm working with shiro integrated in spring-boot.
>>> Since i'm using microservices i want to be able to use clustered
>>> sessions.
>>> In the persistence layer i'm using memcached shared between
>>> microservices.
>>> On a single service i was using 'DefaultWebSecurityManager', but now i
>>> wanto to go to SessionsSecurityManager.
>>> Anyone can provide me an example using this SessionsSecurityManager?
>>> Thanks
>>>
>>>
>>>
>>
>
Re: Help setting SessionsSecurityManager
Posted by Arthur Fonseca <ar...@aig-express.com>.
Ths for helping!
Is there a way i can share sessions between separate application instances
running on different JVMs? I have different running webapps and i want to
be able to so a login with a subject (again with memcached shared ), and
then recognize that subject using SessionController in another application
instance.
>From what i understand 'WebSecurityManager' is isolating applications from
each other. Any hint how can i overcome this.
Thanks.
On Fri, Jan 29, 2016 at 4:52 PM, Brian Demers <br...@gmail.com>
wrote:
> The DefaultWebSecurityManager is a SessionsSecurityManager (which is an
> abstract class)
>
> https://shiro.apache.org/static/1.2.2/apidocs/org/apache/shiro/web/mgt/DefaultWebSecurityManager.html
>
>
>
> On Fri, Jan 29, 2016 at 11:24 AM, Arthur Fonseca <
> arthur.portas@aig-express.com> wrote:
>
>>
>>
>>
>> Subject: Help setting SessionsSecurityManager
>>
>>
>>
>> Hi, i'm working with shiro integrated in spring-boot.
>> Since i'm using microservices i want to be able to use clustered sessions.
>> In the persistence layer i'm using memcached shared between microservices.
>> On a single service i was using 'DefaultWebSecurityManager', but now i
>> wanto to go to SessionsSecurityManager.
>> Anyone can provide me an example using this SessionsSecurityManager?
>> Thanks
>>
>>
>>
>
Re: Help setting SessionsSecurityManager
Posted by Brian Demers <br...@gmail.com>.
The DefaultWebSecurityManager is a SessionsSecurityManager (which is an
abstract class)
https://shiro.apache.org/static/1.2.2/apidocs/org/apache/shiro/web/mgt/DefaultWebSecurityManager.html
On Fri, Jan 29, 2016 at 11:24 AM, Arthur Fonseca <
arthur.portas@aig-express.com> wrote:
>
>
>
> Subject: Help setting SessionsSecurityManager
>
>
>
> Hi, i'm working with shiro integrated in spring-boot.
> Since i'm using microservices i want to be able to use clustered sessions.
> In the persistence layer i'm using memcached shared between microservices.
> On a single service i was using 'DefaultWebSecurityManager', but now i
> wanto to go to SessionsSecurityManager.
> Anyone can provide me an example using this SessionsSecurityManager?
> Thanks
>
>
>