更新shiro

guns-admin/pom.xml

@@ -81,6 +81,10 @@
                 </exclusion>
             </exclusions>
         </dependency>
+        <dependency>
+            <groupId>org.ehcache</groupId>
+            <artifactId>ehcache</artifactId>
+        </dependency>
 
         <!--   需要分布式session的话需要放开注释
         <dependency>
@@ -96,10 +100,6 @@
             <groupId>com.github.penggle</groupId>
             <artifactId>kaptcha</artifactId>
         </dependency>
-        <dependency>
-            <groupId>org.ehcache</groupId>
-            <artifactId>ehcache</artifactId>
-        </dependency>
         <dependency>
             <groupId>com.google.zxing</groupId>
             <artifactId>core</artifactId>

guns-admin/src/main/java/com/stylefeng/guns/config/web/ShiroConfig.java

@@ -142,6 +142,10 @@ public class ShiroConfig {
          * authc 需要认证
          * user  验证通过或RememberMe登录的都可以
          *
+         * 当应用开启了rememberMe时,用户下次访问时可以是一个user,但不会是authc,因为authc是需要重新认证的
+         *
+         * 顺序从上到下,优先级依次降低
+         *
          */
         Map<String, String> hashMap = new LinkedHashMap<>();
         hashMap.put("/static/**", "anon");