我的安全性不是很好，所以我希望找到帮助。 我正在开发一个Android应用程序，它将连接到Apache Shiro以确保安全（身份验证和授权）。 第一次，您很容易要求用户名和密码并注册用户。 我这里有2个问题：
1- once the user register I don't want him to re login again.
so what exactly I should save on android App to authenticate the user
automatically next time he opens the Application.
2- If the user don't want to register he still can work on the
application, but I still want to remember this user with some of his
choices. In this case What i should save and what I should send to my
server to remember (may be deviceID? phone No. etc...)