I suggest you wrapper the userId and userName to new Class like UserInfo
and  put it in SimpleAuthenticationInfo. see
org.apache.shenyu.admin.shiro.config.ShiroRealm#doGetAuthenticationInfo

[image: 微信图片_20210602180348.png]

XiaoYu <[email protected]> 于2021年6月2日周三 上午11:30写道:

> Hi
>
> this is bug.  can you fix it?
>
> nuoyan <[email protected]> 于2021年6月1日周二 下午8:08写道:
>
> > Hi
> >
> > Did not consider the admin multi-user online, store the user id only
> using
> > a String, causing multi-threaded security problems!
> >
> > Solutions
> >
> > Use concurrentHashMap and  SecurityUtils.getSubject().getPrincipal() for
> > storage!
> >
>

Reply via email to