SecurityManager
Subject createSubject(context);
RealmSecurityManager
Authenticator的唯一接口方法authenticate()委托给authenticator. 在这里authenticator用到了上面的realm.
SubjectDAO subjectDAO;
encryptionCipherKey
DefaultWebSecurityManager
getRememberedPrincipals()
单纯的增加了cache和事件总线功能.
SessionManager
AbstractRememberMeManager
Authenticator
SubjectFactory subjectFactory;
Shiro: SecurityManager
serializer
...
SessionManager sessionManager;
Authorizer authorizer;
EventBus eventBus;
SessionManager的核心功能.
单纯的增加了realm集合; 每个realm被添加进来后也会把上面的cache和总线赋值给realm. 并没有基于realm提供新的功能.
SessionsSecurityManager
CachingSecurityManager
WebSecurityManager
Authorizer
AuthenticatingSecurityManager
RememberMeManager
AuthorizingSecurityManager
decryptionCipherKey
Collection<Realm> realms;
CacheManager cacheManager;
DefaultSecurityManager
boolean isHttpSessionMode();
Authenticator authenticator
RememberMeManager rememberMeManager;
CookieRememberMeManager
void logout(Subject subject);
cipherService
![Mpush系列[3]之限流过程分析1](https://www.processon.com/chart_image/template/thumb/5d3e5963e4b0fe2602d4caf8.png?tid=5d39b2bfe4b0d11c8911075a)
