import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
@Bean("securityManager")
public DefaultWebSecurityManager getManager(Realm realm) {
    DefaultWebSecurityManager  manager = new DefaultWebSecurityManager();
    manager.setRealm(realm);

    DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO();
    DefaultSessionStorageEvaluator evaluator = new DefaultSessionStorageEvaluator();
    evaluator.setSessionStorageEnabled(false);
    subjectDAO.setSessionStorageEvaluator(evaluator);

    manager.setSubjectDAO(subjectDAO);
    return manager;
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
@Bean(name = "securityManager")
	@ConditionalOnMissingBean
	public DefaultSecurityManager securityManager(CacheManager shiroCacheManager) {
        DefaultWebSecurityManager dwsm = new DefaultWebSecurityManager();

        // 用自己的Factory实现替换默认
        // 用于关闭session功能
        dwsm.setSubjectFactory(new StatelessSubjectFactory());
        dwsm.setSessionManager(defaultSessionManager());
        // 关闭session存储
        ((DefaultSessionStorageEvaluator) ((DefaultSubjectDAO)dwsm.getSubjectDAO()).getSessionStorageEvaluator()).setSessionStorageEnabled(false);

//      <!-- 用户授权/认证信息Cache, 采用EhCache 缓存 -->
        dwsm.setCacheManager(shiroCacheManager);

        SecurityUtils.setSecurityManager(dwsm);
        return dwsm;
	}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
public DefaultWebSecurityManager() {
    super();
    ((DefaultSubjectDAO) this.subjectDAO).setSessionStorageEvaluator(new DefaultWebSessionStorageEvaluator());
    this.sessionMode = HTTP_SESSION_MODE;
    setSubjectFactory(new DefaultWebSubjectFactory());
    setRememberMeManager(new CookieRememberMeManager());
    setSessionManager(new ServletContainerSessionManager());
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
public StalessSecurityManager() {
    setSubjectFactory(new StalessSubjectFactory()) ;

    // Disabling Subject State Session Storage
    // https://shiro.apache.org/session-management.html#disabling-subject-state-session-storage
    DefaultSubjectDAO subjectDAO = (DefaultSubjectDAO)this.getSubjectDAO() ;
    DefaultSessionStorageEvaluator sessionStorageEvaluator = (DefaultSessionStorageEvaluator)subjectDAO.getSessionStorageEvaluator() ;
    sessionStorageEvaluator.setSessionStorageEnabled(false) ;
    this.setRememberMeManager(null) ;
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
private void applySessionManagerToSessionStorageEvaluatorIfPossible() {
    SubjectDAO subjectDAO = getSubjectDAO();
    if (subjectDAO instanceof DefaultSubjectDAO) {
        SessionStorageEvaluator evaluator = ((DefaultSubjectDAO)subjectDAO).getSessionStorageEvaluator();
        if (evaluator instanceof DefaultWebSessionStorageEvaluator) {
            ((DefaultWebSessionStorageEvaluator)evaluator).setSessionManager(getSessionManager());
        }
    }
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
public SimpleWebSecurityManager() {
	super();
	super.setSubjectDAO(new SubjectDAOImpl());
	((DefaultSubjectDAO) this.subjectDAO)
			.setSessionStorageEvaluator(new SimpleWebSessionStorageEvaluator());
	setSubjectFactory(new DefaultWebSubjectFactory());
	setRememberMeManager(new CookieRememberMeManager());
	setSessionManager(new ServletContainerSessionManager());
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
private void applySessionManagerToSessionStorageEvaluatorIfPossible() {
	SubjectDAO subjectDAO = getSubjectDAO();
	if (subjectDAO instanceof DefaultSubjectDAO) {
		SessionStorageEvaluator evaluator = ((DefaultSubjectDAO) subjectDAO)
				.getSessionStorageEvaluator();
		if (evaluator instanceof SimpleWebSessionStorageEvaluator) {
			((SimpleWebSessionStorageEvaluator) evaluator)
					.setSessionManager(getSessionManager());
		}
	}
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
/**
 * Constructs a new session-less security manager.
 */
public SessionlessSecurityManager() {
	super();
	DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO();
	DefaultSessionStorageEvaluator sessionStorageEvaluator = new DefaultSessionStorageEvaluator();
	sessionStorageEvaluator.setSessionStorageEnabled(false);
	subjectDAO.setSessionStorageEvaluator(sessionStorageEvaluator);
	setSubjectDAO(subjectDAO);
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
public LaputaSecurityManager() {
  super();
  ((DefaultSubjectDAO) this.subjectDAO).setSessionStorageEvaluator(new LaputaSessionStorageEvaluator());
  setSubjectFactory(new LaputaSubjectFactory());
  setRememberMeManager(new CookieRememberMeManager());
  setSessionManager(new LaputaSessionManager());
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
private void initializeSubjectDAO(DefaultSecurityManager dsm) {
  if(dsm.getSubjectDAO() instanceof DefaultSubjectDAO) {
    ((DefaultSubjectDAO) dsm.getSubjectDAO()).setSessionStorageEvaluator(new SessionStorageEvaluator());
  }
}
 

import org.apache.shiro.mgt.DefaultSubjectDAO; //导入依赖的package包/类
@Override
public void init() {

	if (LOG.isTraceEnabled()) {
		LOG.trace("Initializing the '" + getClass().getSimpleName()
				+ "' using the default settings.");
	}

	// use the default realm
	final MapDbAuthorizingRealm realm = new MapDbAuthorizingRealm(
			handler.getDefaultLocation(true));
	if (realm instanceof Initializable) {
		realm.init();
	}

	// create a default manager and set it
	final DefaultSecurityManager manager = new DefaultSecurityManager();
	manager.setRealm(realm);

	// get the manager and initialize it
	if (manager instanceof Initializable) {
		((Initializable) manager).init();
	}

	this.manager = manager;
	final SessionManager sessionManager = this.manager.getSessionManager();
	if (sessionManager instanceof AbstractValidatingSessionManager) {
		((AbstractValidatingSessionManager) sessionManager)
				.setSessionValidationSchedulerEnabled(false);
	}
	final SubjectDAO subjectDao = this.manager.getSubjectDAO();
	if (subjectDao instanceof DefaultSubjectDAO) {
		final SessionStorageEvaluator sessionStorageEvaluator = ((DefaultSubjectDAO) this.manager
				.getSubjectDAO()).getSessionStorageEvaluator();
		if (sessionStorageEvaluator instanceof DefaultSessionStorageEvaluator) {
			((DefaultSessionStorageEvaluator) sessionStorageEvaluator)
					.setSessionStorageEnabled(false);
		}
	}
	this.builder = new Subject.Builder(manager);
	this.builder.sessionCreationEnabled(false);
}