Spring session and Spring Security integration

Background:

I'm going to do the system before placing Zuul. Use the single sign-on service provided by your company. The subsequent business application is also the rest service supported by spring BOOT.

After the user request is scheduled to come up. Single Sign-on is implemented in Zuul with a custom filter. The user's information, including accounts and privileges, is deposited into session.

The spring session is enabled for both Zuul and rest applications. Requests from Zuul to rest are automatically recognized as logged in, and access information is obtained from the session. The business is based on permission control.

Still in the study.

Spring session and Spring Security integration