这样返回的 Subject 表明了认证用户的身份，可以用于登录和/或数据级的授权等。
The Subject thus returned reveals the identity of the authenticated user that can be used for logging and/or data-level authorization purposes, etc.
controlflag属性指明该登录模块用于为要认证的用户返回有效结果。
The controlFlag attribute states that this login module is required to return a valid result for the user to be authenticated.
当进入到查询/返回结果的阶段再认证新连接就太晚了。
When we enter the query/result stage it is too late to authenticate new connections.
应用推荐