From aabc261708324d72a9295ccf4564f022b6b2225b Mon Sep 17 00:00:00 2001
From: linlinjava <linlinjavaer@gmail.com>
Date: Sun, 1 Nov 2020 17:14:39 +0800
Subject: [PATCH] =?UTF-8?q?chore:=20shiro=E5=8D=87=E7=BA=A7=E7=89=88?=
 =?UTF-8?q?=E6=9C=AC1.6.0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../litemall/admin/shiro/AdminWebSessionManager.java      | 8 ++++++++
 pom.xml                                                   | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/shiro/AdminWebSessionManager.java b/litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/shiro/AdminWebSessionManager.java
index e2795bbb..d9c784d9 100644
--- a/litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/shiro/AdminWebSessionManager.java
+++ b/litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/shiro/AdminWebSessionManager.java
@@ -14,6 +14,14 @@ public class AdminWebSessionManager extends DefaultWebSessionManager {
     public static final String LOGIN_TOKEN_KEY = "X-Litemall-Admin-Token";
     private static final String REFERENCED_SESSION_ID_SOURCE = "Stateless request";
 
+
+    public AdminWebSessionManager() {
+        super();
+        setGlobalSessionTimeout(MILLIS_PER_HOUR * 6);
+        setSessionIdCookieEnabled(false);
+        setSessionIdUrlRewritingEnabled(false);
+    }
+
     @Override
     protected Serializable getSessionId(ServletRequest request, ServletResponse response) {
         String id = WebUtils.toHttp(request).getHeader(LOGIN_TOKEN_KEY);
diff --git a/pom.xml b/pom.xml
index c1ca1d4e..a11ad039 100644
--- a/pom.xml
+++ b/pom.xml
@@ -73,7 +73,7 @@
             <dependency>
                 <groupId>org.apache.shiro</groupId>
                 <artifactId>shiro-spring-boot-web-starter</artifactId>
-                <version>1.4.0</version>
+                <version>1.6.0</version>
             </dependency>
 
             <dependency>