import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Override
protected void configureShiroWeb() {
  bindRealm().to(EmptyRealm.class); // not used in practice, just here to keep Shiro module happy

  bindSingleton(SessionFactory.class, NexusSessionFactory.class);
  bindSingleton(SessionStorageEvaluator.class, NexusSessionStorageEvaluator.class);
  bindSingleton(SubjectDAO.class, NexusSubjectDAO.class);

  // configure our preferred security components
  bindSingleton(SessionDAO.class, NexusSessionDAO.class);
  bindSingleton(Authenticator.class, FirstSuccessfulModularRealmAuthenticator.class);
  bindSingleton(Authorizer.class, ExceptionCatchingModularRealmAuthorizer.class);
  bindSingleton(FilterChainManager.class, DynamicFilterChainManager.class);

  // path matching resolver has several constructors so we need to point Guice to the appropriate one
  bind(FilterChainResolver.class).toConstructor(ctor(PathMatchingFilterChainResolver.class)).asEagerSingleton();

  // bindings used by external modules
  expose(FilterChainResolver.class);
  expose(FilterChainManager.class);
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Test
public void testBasicOperations() throws Exception {
    final SessionDAO dao = new FileBasedSessionDAO(rootDir.getRoot().toPath());
    final Session initial = new SimpleSession();

    // A new session ID would be issued.
    final Serializable sessionId = dao.create(initial);
    assertThat(sessionId).isEqualTo(initial.getId());
    assertThat(countSessions(dao)).isOne();

    final Session session = dao.readSession(sessionId);
    assertThat(session).isEqualTo(initial);

    // Change session's last accessed time locally.
    Thread.sleep(10);
    session.touch();
    assertThat(dao.readSession(sessionId).getLastAccessTime())
            .isNotEqualTo(session.getLastAccessTime());

    // Update the session.
    dao.update(session);
    assertThat(dao.readSession(sessionId).getLastAccessTime())
            .isEqualTo(session.getLastAccessTime());

    // Delete the session.
    dao.delete(session);

    // No session exists with the specified session ID.
    assertThatThrownBy(() -> dao.readSession(sessionId))
            .isInstanceOf(UnknownSessionException.class);

    assertThat(countSessions(dao)).isZero();
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
private static int countSessions(SessionDAO dao) {
    int count = 0;
    for (Session ignored : dao.getActiveSessions()) {
        count++;
    }
    return count;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Bean
@ConditionalOnMissingBean
public SessionDAO sessionDAO(CacheManager cacheManager) {
    EnterpriseCacheSessionDAO dao = new EnterpriseCacheSessionDAO();
    dao.setActiveSessionsCacheName(shiroSessionProperties.getActiveSessionsCacheName());
    Class<? extends SessionIdGenerator> idGenerator = shiroSessionProperties.getIdGenerator();
    if (idGenerator != null) {
        SessionIdGenerator sessionIdGenerator = BeanUtils.instantiate(idGenerator);
        dao.setSessionIdGenerator(sessionIdGenerator);
    }
    dao.setCacheManager(cacheManager);

    return dao;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Override
public Session readSession(Serializable sessionId) throws UnknownSessionException {
    final SessionDAO sessionDAO = getSessionDAO();
    if(sessionDAO != null) {
        sessionDAO.readSession(sessionId);
    }
    
    return null;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Override
public void update(Session session) throws UnknownSessionException {
    final SessionDAO sessionDAO = getSessionDAO();
    if(sessionDAO != null) {
        sessionDAO.update(session);
    }
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Override
public void delete(Session session) {
    final SessionDAO sessionDAO = getSessionDAO();
    if(sessionDAO != null) {
        sessionDAO.delete(session);
    }
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
protected SessionDAO getSessionDAO() {
    final SecurityManager securityManager = SecurityUtils.getSecurityManager();
    if(securityManager instanceof SessionsSecurityManager) {
        final SessionManager sessionManager = ((SessionsSecurityManager) securityManager).getSessionManager();
        if(sessionManager instanceof DefaultSessionManager) {
            return ((DefaultSessionManager) sessionManager).getSessionDAO();
        }
    }
    
    return null;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
CentralDogmaSessionManager(SessionDAO sessionDao) {
    setSessionDAO(sessionDao);
    setSessionValidationInterval(Duration.ofHours(1).toMillis());
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
public SessionDAO getSessionDAO() {
	return sessionDAO;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Autowired
public void setSessionDAO(SessionDAO sessionDAO) {
	this.sessionDAO = sessionDAO;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
public void setSessionDAO(SessionDAO sessionDAO) {
    this.sessionDAO = sessionDAO;
    applyCacheManagerToSessionDAO();
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
public SessionDAO getSessionDAO() {
    return this.sessionDAO;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
public void setSessionDAO(SessionDAO sessionDAO) {
	this.sessionDAO = sessionDAO;
	applyCacheManagerToSessionDAO();
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
public SessionDAO getSessionDAO() {
	return this.sessionDAO;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
public void setSessionDao(SessionDAO sessionDao) {
	this.sessionDao = sessionDao;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
public SessionDAO getSessionDAO() {
	if(sessionDAO == null)
		sessionDAO = ((DefaultSessionManager) ((DefaultSecurityManager) SecurityUtils.getSecurityManager()).getSessionManager()).getSessionDAO();
	
	return sessionDAO;
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Bean
public SessionDAO sessionDao() {
    return new HazelcastSessionDao();
}
 

import org.apache.shiro.session.mgt.eis.SessionDAO; //导入依赖的package包/类
@Bean
public SessionDAO sessionDAO() {
    return new EnterpriseCacheSessionDAO();
}