disable apache shiro remember me function

This commit is contained in:
Sebastian Sdorra
2015-03-21 17:03:23 +01:00
parent 63fb1f23e9
commit fd683dd6b4
5 changed files with 136 additions and 32 deletions

View File

@@ -53,6 +53,8 @@ import static org.apache.shiro.guice.web.ShiroWebModule.ROLES;
//~--- JDK imports ------------------------------------------------------------
import javax.servlet.ServletContext;
import org.apache.shiro.mgt.RememberMeManager;
import sonia.scm.security.DisabledRememberMeManager;
/**
*
@@ -100,6 +102,9 @@ public class ScmSecurityModule extends ShiroWebModule
// expose password service to global injector
expose(PasswordService.class);
// disable remember me cookie generation
bind(RememberMeManager.class).to(DisabledRememberMeManager.class);
// bind realm
for (Class<? extends Realm> realm : extensionProcessor.byExtensionPoint(Realm.class))