timperrett/lift-shiro — Issue #7: Keep getting logged out
Author: patelh
Created: 2011-10-25 03:35:54+00:00
State: open

Hi Tim, I am trying to use lift-shiro and I keep having the issue of consistently being redirected to login page every few navigation clicks.

I am thinking it may be related to shiro SecurityUtils.getSubject() call since that is thread context based. I haven't looked at the code too deeply but I think I keep having to re-login since the subject changes as the thread handling the request changes and causing the subject to be unauthenticated.

At least that is my guess.

Would it not make sense to put a session var with login info after authentication within lift and check it instead of the thread localized subject.

Any thoughts?

Thanks,
Hiral