Package org.apache.shiro.session

Examples of org.apache.shiro.session.Session

37
38
39
40
41
42
43
44
45
46
47
48
  }

  public static void setSessionAttribute(String name, Object value) {
    Subject currentUser = SecurityUtils.getSubject();
    if (value != null) {
      Session session = currentUser.getSession();
      session.setAttribute(name, value);
    } else {
      Session session = currentUser.getSession(false);
      session.removeAttribute(name);
    }
  }
View Full Code Here
160
161
162
163
164
165
166
167
168
169
170
   * 创建一个shiro的session,如果存在session就用现有的session，否则创建一个新的session
   *
   * @return {@link Session}
   */
  public static Session createSessionIfNull() {
    Session session = getSession();
   
    if (session == null) {
      session = getSession(true);
    }
   
View Full Code Here
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
     * 重写父类方法，在shiro执行登录时先对比验证码，正确后在登录，否则直接登录失败
     */
  @Override
  protected boolean executeLogin(ServletRequest request,ServletResponse response) throws Exception {
   
    Session session = SystemVariableUtils.createSessionIfNull();
    //获取登录错误次数
    Integer number = (Integer) session.getAttribute(getLoginIncorrectNumberKeyAttribute());
   
    //首次登录，将该数量记录在session中
    if (number == null) {
      number = new Integer(1);
      session.setAttribute(getLoginIncorrectNumberKeyAttribute(), number);
    }
   
    //如果登录次数大于allowIncorrectNumber，需要判断验证码是否一致
    if (number > getAllowIncorrectNumber()) {
      //获取当前验证码
      String currentCaptcha = (String) session.getAttribute(getSessionCaptchaKeyAttribute());
      //获取用户输入的验证码
      String submitCaptcha = getCaptcha(request);
      //如果验证码不匹配，登录失败
      if (StringUtils.isEmpty(submitCaptcha) || !StringUtils.equals(currentCaptcha,submitCaptcha.toLowerCase())) {
        return onLoginFailure(this.createToken(request, response), new AccountException("验证码不正确"), request, response);
View Full Code Here
93
94
95
96
97
98
99
100
101
102
103
   * 重写父类方法，当登录失败后，将allowIncorrectNumber（允许登错误录次） + 1
   */
  @Override
  protected boolean onLoginFailure(AuthenticationToken token,AuthenticationException e, ServletRequest request,ServletResponse response) {
   
    Session session = SystemVariableUtils.getSession();
    Integer number = (Integer) session.getAttribute(getLoginIncorrectNumberKeyAttribute());
    session.setAttribute(getLoginIncorrectNumberKeyAttribute(),++number);
   
    return super.onLoginFailure(token, e, request, response);
  }
View Full Code Here
106
107
108
109
110
111
112
113
114
115
116
   * 重写父类方法，当登录成功后，将allowIncorrectNumber（允许登错误录次）设置为0，重置下一次登录的状态
   */
  @Override
  protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, ServletResponse response) throws Exception {
   
    Session session = SystemVariableUtils.getSession();
    session.removeAttribute(getLoginIncorrectNumberKeyAttribute());
    session.setAttribute("sv", subject.getPrincipal());
   
    return super.onLoginSuccess(token, subject, request, response);
  }
View Full Code Here
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
        String value = "testValue";
        DefaultSecurityManager sm = new DefaultSecurityManager();

        DelegatingSubject subject = new DelegatingSubject(sm);

        Session session = subject.getSession();
        session.setAttribute(key, value);
        assertTrue(session.getAttribute(key).equals(value));
        Serializable firstSessionId = session.getId();
        assertNotNull(firstSessionId);

        session.stop();

        session = subject.getSession();
        assertNotNull(session);
        assertNull(session.getAttribute(key));
        Serializable secondSessionId = session.getId();
        assertNotNull(secondSessionId);
        assertFalse(firstSessionId.equals(secondSessionId));

        subject.logout();
View Full Code Here
65
66
67
68
69
70
71
72
73
74
    @Test
    public void testGlobalTimeout() {
        long timeout = 1000;
        sm.setGlobalSessionTimeout(timeout);
        Session session = sm.start(null);
        assertNotNull(session);
        assertNotNull(session.getId());
        assertEquals(session.getTimeout(), timeout);
    }
View Full Code Here
93
94
95
96
97
98
99
100
101
            public void onStop(Session session) {
                stopped[0] = true;
            }
        };
        sm.getSessionListeners().add(listener);
        Session session = sm.start(null);
        sm.stop(new DefaultSessionKey(session.getId()));
        assertTrue(stopped[0]);
    }
View Full Code Here
112
113
114
115
116
117
118
119
120
121
122
123
124
                stopped[0] = true;
                value[0] = (String)session.getAttribute("foo");
            }
        };
        sm.getSessionListeners().add(listener);
        Session session = sm.start(null);
        session.setAttribute("foo", "bar");

        sm.stop(new DefaultSessionKey(session.getId()));

        assertTrue(stopped[0]);
        assertEquals("bar", value[0]);
    }
View Full Code Here
131
132
133
134
135
136
137
138
139
140
141
142
143
144
                expired[0] = true;
            }
        };
        sm.getSessionListeners().add(listener);
        sm.setGlobalSessionTimeout(100);
        Session session = sm.start(null);
        sleep(150);
        try {
            sm.checkValid(new DefaultSessionKey(session.getId()));
            fail("check should have thrown an exception.");
        } catch (InvalidSessionException expected) {
            //do nothing - expected.
        }
        assertTrue(expired[0]);
View Full Code Here
TOP

Related Classes of org.apache.shiro.session.Session

  • cn.dreampie.common.plugin.patchca.PatchcaRender
  • cn.dreampie.common.plugin.shiro.freemarker.IsLoginFailureTag
  • cn.dreampie.common.plugin.shiro.freemarker.LoginExceptionTag
  • cn.dreampie.common.plugin.shiro.freemarker.LoginUsernameTag
  • cn.dreampie.common.plugin.shiro.MyAuthenticatingFilter
  • cn.dreampie.common.plugin.shiro.MyFormAuthenticationFilter
  • cn.dreampie.common.plugin.shiro.plugin.ShiroInterceptor
  • cn.dreampie.common.util.SubjectUtils
  • cn.dreampie.shiro.core.SubjectKit
  • cn.dreampie.shiro.freemarker.IsLoginFailureTag
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.