org.apache.shiro.web.mgt.DefaultWebSecurityManager.java

    /**
     * @since 1.0
     */
    public boolean isHttpSessionMode() {
        return this.sessionMode == null ||
this.sessionMode.equals(HTTP_SESSION_MODE);
    }
---------------------------------------------------------------------------------------
may be error,and i think this method should as bellow:


  public boolean isHttpSessionMode() {
        String sm = getSessionMode();
        return (sm!= null && sm.equals(HTTP_SESSION_MODE));
    }


--
View this message in context: 
http://shiro-developer.582600.n2.nabble.com/DefaultWebSecurityManager-isHttpSessionMode-may-be-error-tp6457753p6457753.html
Sent from the Shiro Developer mailing list archive at Nabble.com.

Reply via email to