Returns
true if sessions should be automatically deleted after they are discovered to be invalid,
false if invalid sessions will be manually deleted by some process external to Shiro's control. The
default is
true to ensure no orphans exist in the underlying data store.
Usage
It is ok to set this to
false
ONLY if you have some other process that you manage yourself
that periodically deletes invalid sessions from the backing data store over time, such as via a Quartz or Cron
job. If you do not do this, the invalid sessions will become 'orphans' and fill up the data store over time.
This property is provided because some systems need the ability to perform querying/reporting against sessions in
the data store, even after they have stopped or expired. Setting this attribute to
false will allow
such querying, but with the caveat that the application developer/configurer deletes the sessions themselves by
some other means (cron, quartz, etc).