Shiro already uses the default JSESSIONID cookie to automatically associate a user with a request. As long as you use the IniShiroFilter (or any subclass of AbstractShiroFilter, depending on your configuration mechanism), you don't need to do anything else.
Does that help? Les On Mon, Aug 23, 2010 at 2:48 PM, Mike K <[email protected]> wrote: > > Les, any thoughts on the best way to have Shiro get/store session in a > cookie. > -- > View this message in context: > http://shiro-user.582556.n2.nabble.com/Permission-checking-on-client-side-tp5450587p5454437.html > Sent from the Shiro User mailing list archive at Nabble.com. >
