shiro踢用户下线

后会无期77

于 2025-06-25 15:45:10 发布

阅读量245

点赞数 8

CC 4.0 BY-SA版权

分类专栏： Java日记文章标签： java

本文链接：https://blog.csdn.net/u011628753/article/details/148900703

Java日记专栏收录该内容

129 篇文章

订阅专栏

shiro 踢用户下线


import com.developtools.jasypt.myjaspyt.pojo.OAUser;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.mgt.DefaultSecurityManager;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.session.Session;
import org.apache.shiro.session.mgt.DefaultSessionKey;
import org.apache.shiro.session.mgt.DefaultSessionManager;
import org.apache.shiro.session.mgt.SessionKey;
import org.apache.shiro.session.mgt.SessionManager;
import org.apache.shiro.session.mgt.eis.EnterpriseCacheSessionDAO;
import org.apache.shiro.session.mgt.eis.SessionDAO;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.util.CollectionUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import java.util.Collection;

/**
 * shiro踢出用户下线
 */
public class KickoutUtil {

    private static final Logger logger = LoggerFactory.getLogger(KickoutUtil.class);

    /**
     * 强制下綫
     *
     * @param username
     */
    public static void kickout(String username) {
        // 假设你已经配置了SecurityManager，这里仅为示例如何获取它和会话信息。
        SecurityManager securityManager = SecurityUtils.getSecurityManager(); // 确保已经配置了SecurityManager
        if (securityManager instanceof DefaultSecurityManager) {
            DefaultSecurityManager defaultSecurityManager = (DefaultSecurityManager) securityManager;
            SessionManager sessionManager = defaultSecurityManager.getSessionManager(); // 获取SessionManager
            if (sessionManager instanceof DefaultSessionManager) {
                DefaultSessionManager defaultSessionManager = (DefaultSessionManager) sessionManager;
                SessionDAO sessionDAO = defaultSessionManager.getSessionDAO(); // 获取SessionDAO
                if (sessionDAO instanceof EnterpriseCacheSessionDAO) { // 确保是EnterpriseCacheSessionDAO或类似实现，以便使用getActiveSessions()方法
                    Collection<Session> activeSessions = sessionDAO.getActiveSessions(); // 获取所有活动会话
                    if (!CollectionUtils.isEmpty(activeSessions)) {
                        for (Session session : activeSessions) {
                            OAUser oaUser = (OAUser) session.getAttribute("OA_USER_INFO");
                            if (null != oaUser && oaUser.getUserName().equals(username)) {
                                logger.info("用户 {} 被下线,session Id={}", username, session.getId());
                                SessionKey sessionKey = new DefaultSessionKey(session.getId());
                                defaultSessionManager.stop(sessionKey);
                            }
                        }
                    } else {
                        logger.warn("No active sessions found.");
                    }
                } else {
                    logger.warn("The SessionDAO is not an instance of EnterpriseCacheSessionDAO.");
                }
            } else {
                logger.warn("The SessionManager is not an instance of DefaultSessionManager.");
            }
        } else {
            logger.warn("The SecurityManager is not an instance of DefaultSecurityManager.");
        }
    }

    /**
     * 自己下綫
     */
    public static void logout() {
        Subject subject = SecurityUtils.getSubject();
        subject.logout();
    }

}