Java WebUtils._isSessionCreationEnabled方法代码示例

import org.apache.shiro.web.util.WebUtils; //导入方法依赖的package包/类
/**
 * Returns {@code true} if session storage is generally available (as determined by the super class's global
 * configuration property {@link #isSessionStorageEnabled()} and no request-specific override has turned off
 * session storage, {@code false} otherwise.
 * <p/>
 * This means session storage is disabled if the {@link #isSessionStorageEnabled()} property is {@code false} or if
 * a request attribute is discovered that turns off session storage for the current request.
 *
 * @param subject the {@code Subject} for which session state persistence may be enabled
 * @return {@code true} if session storage is generally available (as determined by the super class's global
 *         configuration property {@link #isSessionStorageEnabled()} and no request-specific override has turned off
 *         session storage, {@code false} otherwise.
 */
@SuppressWarnings({"SimplifiableIfStatement"})
@Override
public boolean isSessionStorageEnabled(Subject subject) {
    if (subject.getSession(false) != null) {
        //use what already exists
        return true;
    }

    if (!isSessionStorageEnabled()) {
        //honor global setting:
        return false;
    }

    //SHIRO-350: non-web subject instances can't be saved to web-only session managers:
    //since 1.2.1:
    if (!(subject instanceof WebSubject) && (this.sessionManager != null && !(this.sessionManager instanceof NativeSessionManager))) {
        return false;
    }

    return WebUtils._isSessionCreationEnabled(subject);
}
 

import org.apache.shiro.web.util.WebUtils; //导入方法依赖的package包/类
/**
 * Returns {@code true} if session storage is generally available (as
 * determined by the super class's global configuration property
 * {@link #isSessionStorageEnabled()} and no request-specific override has
 * turned off session storage, {@code false} otherwise.
 * <p/>
 * This means session storage is disabled if the
 * {@link #isSessionStorageEnabled()} property is {@code false} or if a
 * request attribute is discovered that turns off session storage for the
 * current request.
 *
 * @param subject
 *            the {@code Subject} for which session state persistence may be
 *            enabled
 * @return {@code true} if session storage is generally available (as
 *         determined by the super class's global configuration property
 *         {@link #isSessionStorageEnabled()} and no request-specific
 *         override has turned off session storage, {@code false} otherwise.
 */
@SuppressWarnings({ "SimplifiableIfStatement" })
@Override
public boolean isSessionStorageEnabled(Subject subject) {
	if (subject.getSession(false) != null) {
		// use what already exists
		return true;
	}

	if (!isSessionStorageEnabled()) {
		// honor global setting:
		return false;
	}

	// SHIRO-350: non-web subject instances can't be saved to web-only
	// session managers:
	// since 1.2.1:
	if (!(subject instanceof WebSubject)
			&& (this.sessionManager != null && !(this.sessionManager instanceof NativeSessionManager))) {
		return false;
	}

	return WebUtils._isSessionCreationEnabled(subject);
}
 

import org.apache.shiro.web.util.WebUtils; //导入方法依赖的package包/类
public HttpSession getSession(boolean create) {

        HttpSession httpSession;

        if (isHttpSessions()) {
            httpSession = super.getSession(false);
            if (httpSession == null && create) {
                //Shiro 1.2: assert that creation is enabled (SHIRO-266):
                if (WebUtils._isSessionCreationEnabled(this)) {
                    httpSession = super.getSession(create);
                } else {
                    throw newNoSessionCreationException();
                }
            }
        } else {
            if (this.session == null) {

                boolean existing = getSubject().getSession(false) != null;

                Session shiroSession = getSubject().getSession(create);
                if (shiroSession != null) {
                    this.session = new ShiroHttpSession(shiroSession, this, this.servletContext);
                    if (!existing) {
                        setAttribute(REFERENCED_SESSION_IS_NEW, Boolean.TRUE);
                    }
                }
            }
            httpSession = this.session;
        }

        return httpSession;
    }
 

import org.apache.shiro.web.util.WebUtils; //导入方法依赖的package包/类
/**
 * Returns {@code true} if session creation is allowed  (as determined by the super class's
 * {@link super#isSessionCreationEnabled()} value and no request-specific override has disabled sessions for this subject,
 * {@code false} otherwise.
 * <p/>
 * This means session creation is disabled if the super {@link super#isSessionCreationEnabled()} property is {@code false}
 * or if a request attribute is discovered that turns off sessions for the current request.
 *
 * @return {@code true} if session creation is allowed  (as determined by the super class's
 *         {@link super#isSessionCreationEnabled()} value and no request-specific override has disabled sessions for this
 *         subject, {@code false} otherwise.
 * @since 1.2
 */
@Override
protected boolean isSessionCreationEnabled() {
    boolean enabled = super.isSessionCreationEnabled();
    return enabled && WebUtils._isSessionCreationEnabled(this);
}