spring,shiro,redis實現session共享
阿新 • • 發佈：2019-01-06
用到的redis jar如下
<dependency> <groupId>redis.clients</groupId> <artifactId>jedis</artifactId> <version>2.6.2</version> </dependency> <dependency> <groupId>org.springframework.data</groupId> <artifactId>spring-data-redis</artifactId> <version>1.4.1.RELEASE</version> </dependency> <dependency> <groupId>org.apache.commons</groupId> <artifactId>commons-pool2</artifactId> <version>2.2</version> </dependency>
想要實現使用redis管理session 需要在shiro 的sessionmanager新增sessionDAO屬性 如下
redis配置如下<bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager"> <property name="sessionDAO" ref="sessionDao"></property> <property name="globalSessionTimeout" value="60000" /> <!-- 刪除失效session --> <property name="sessionValidationSchedulerEnabled" value="true" /> <property name="sessionListeners" ref="myShiroSessionListener"></property> </bean> <bean id="myShiroSessionListener" class="com.zyc.listener.MyShiroSessionListener"></bean> <bean id="sessionDao" class="com.zyc.security.SessionDao"> <property name="redisUtil" ref="redisUtil"></property> </bean>
<bean id="poolConfig" class="redis.clients.jedis.JedisPoolConfig"> <property name="maxIdle" value="100" /> <property name="maxWaitMillis" value="10000" /> <property name="testOnBorrow" value="true" /> </bean> <!-- redis伺服器中心 --> <bean id="connectionFactory" class="org.springframework.data.redis.connection.jedis.JedisConnectionFactory"> <property name="poolConfig" ref="poolConfig" /> <property name="port" value="63791" /> <property name="hostName" value="127.0.0.1" /> <!-- <property name="password" value="${redis.password}" /> --> <property name="timeout" value="10000"></property> </bean> <bean id="redisTemplate" class="org.springframework.data.redis.core.RedisTemplate"> <property name="connectionFactory" ref="connectionFactory" /> <property name="keySerializer"> <bean class="org.springframework.data.redis.serializer.StringRedisSerializer" /> </property> <property name="valueSerializer"> <bean class="org.springframework.data.redis.serializer.JdkSerializationRedisSerializer" /> </property> </bean>
sessionDao需要實現EnterpriseCacheSessionDAO類或者CachingSessionDAO類，咱們這裡以EnterpriseCacheSessionDAO類為例如下：
package com.zyc.security;
import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.ObjectInputStream;
import java.io.ObjectOutput;
import java.io.ObjectOutputStream;
import java.io.Serializable;
import org.apache.shiro.session.Session;
import org.apache.shiro.session.mgt.SimpleSession;
import org.apache.shiro.session.mgt.eis.EnterpriseCacheSessionDAO;
public class SessionDao extends EnterpriseCacheSessionDAO {
private RedisUtil redisUtil;
public RedisUtil getRedisUtil() {
return redisUtil;
}
public void setRedisUtil(RedisUtil redisUtil) {
this.redisUtil = redisUtil;
}
// 建立session，儲存到資料庫
@Override
protected Serializable doCreate(Session session) {
Serializable sessionId = super.doCreate(session);
redisUtil.set(sessionId.toString(), sessionToByte(session),1*60L);
return sessionId;
}
// 獲取session
@Override
protected Session doReadSession(Serializable sessionId) {
// 先從快取中獲取session，如果沒有再去資料庫中獲取
Session session = super.doReadSession(sessionId);
if(session == null){
byte[] bytes = (byte[]) redisUtil.get(sessionId.toString());
if(bytes != null && bytes.length > 0){
session = byteToSession(bytes);
}
}
return session;
}
// 更新session的最後一次訪問時間
@Override
protected void doUpdate(Session session) {
super.doUpdate(session);
redisUtil.set(session.getId().toString(), sessionToByte(session),1*60L);
}
// 刪除session
@Override
protected void doDelete(Session session) {
super.doDelete(session);
redisUtil.remove(session.getId().toString());
}
// 把session物件轉化為byte儲存到redis中
public byte[] sessionToByte(Session session){
ByteArrayOutputStream bo = new ByteArrayOutputStream();
byte[] bytes = null;
try {
ObjectOutput oo = new ObjectOutputStream(bo);
oo.writeObject(session);
bytes = bo.toByteArray();
} catch (IOException e) {
e.printStackTrace();
}
return bytes;
}
// 把byte還原為session
public Session byteToSession(byte[] bytes){
ByteArrayInputStream bi = new ByteArrayInputStream(bytes);
ObjectInputStream in;
SimpleSession session = null;
try {
in = new ObjectInputStream(bi);
session = (SimpleSession) in.readObject();
} catch (ClassNotFoundException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
}
return session;
}
}
package com.zyc.security;
import java.io.Serializable;
import java.util.Set;
import java.util.concurrent.TimeUnit;
import javax.annotation.Resource;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.data.redis.core.ValueOperations;
import org.springframework.stereotype.Service;
/**
* @author: zyc
* @date:2017年10月24日 上午9:26:55
* @description:
* @version :
*
*/
@Service("redisUtil")
public class RedisUtil {
private Logger logger = LoggerFactory.getLogger(RedisUtil.class);
@Resource(name = "redisTemplate")
private RedisTemplate<Serializable, Object> redisTemplate;
/**
* 批量刪除對應的value
*
* @param keys
*/
public void remove(final String... keys) {
for (String key : keys) {
remove(key);
}
}
/**
* 批量刪除key
*
* @param pattern
*/
public void removePattern(final String pattern) {
Set<Serializable> keys = redisTemplate.keys(pattern);
if (keys.size() > 0)
redisTemplate.delete(keys);
}
/**
* 刪除對應的value
*
* @param key
*/
public void remove(final String key) {
if (exists(key)) {
redisTemplate.delete(key);
}
}
/**
* 判斷快取中是否有對應的value
*
* @param key
* @return
*/
public boolean exists(final String key) {
return redisTemplate.hasKey(key);
}
/**
* 獲取所有的key
*
* @return
*/
public Set<Serializable> keys() {
return redisTemplate.keys("*");
}
/**
* 讀取快取
*
* @param key
* @return
*/
public Object get(final String key) {
Object result = null;
ValueOperations<Serializable, Object> operations = redisTemplate
.opsForValue();
result = operations.get(key);
return result;
}
/**
* 寫入快取
*
* @param key
* @param value
* @return
*/
public boolean set(final String key, Object value) {
boolean result = false;
try {
ValueOperations<Serializable, Object> operations = redisTemplate
.opsForValue();
operations.set(key, value);
result = true;
} catch (Exception e) {
e.printStackTrace();
}
return result;
}
/**
* 寫入快取
*
* @param key
* @param value
* @return
*/
public boolean set(final String key, Object value, Long expireTime) {
boolean result = false;
try {
ValueOperations<Serializable, Object> operations = redisTemplate
.opsForValue();
operations.set(key, value);
redisTemplate.expire(key, expireTime, TimeUnit.SECONDS);
result = true;
} catch (Exception e) {
e.printStackTrace();
}
return result;
}
public void setRedisTemplate(
RedisTemplate<Serializable, Object> redisTemplate) {
this.redisTemplate = redisTemplate;
}
}
session監聽類如下（可寫可不寫，不寫需要在配置中將監聽器給去掉）：
package com.zyc.listener;
import org.apache.shiro.session.Session;
import org.apache.shiro.session.SessionListener;
import com.zyc.security.RedisUtil;
import com.zyc.security.SpringContext;
public class MyShiroSessionListener implements SessionListener {
@Override
public void onStart(Session session) {
}
@Override
public void onStop(Session session) {
// TODO Auto-generated method stub
System.out.println("onStop==="+session.getId());
RedisUtil redisUtil=(RedisUtil) SpringContext.getBean("redisUtil");
redisUtil.remove(session.getId().toString());
}
@Override
public void onExpiration(Session session) {
System.out.println("onExpiration==="+session.getId());
RedisUtil redisUtil=(RedisUtil) SpringContext.getBean("redisUtil");
redisUtil.remove(session.getId().toString());
}
}
package com.zyc.security;
import org.springframework.beans.BeansException;
import org.springframework.context.ApplicationContext;
import org.springframework.context.ApplicationContextAware;
import org.springframework.stereotype.Component;
@Component
public class SpringContext implements ApplicationContextAware{
private static ApplicationContext applicationContext;
@Override
public void setApplicationContext(ApplicationContext arg0)
throws BeansException {
// TODO Auto-generated method stub
applicationContext=arg0;
}
public static Object getBean(String name){
if(applicationContext!=null){
return applicationContext.getBean(name);
}
return null;
}
}