import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
public Subject createSubject(SubjectContext context) {
    if (!(context instanceof WebSubjectContext)) {
        return super.createSubject(context);
    }
    WebSubjectContext wsc = (WebSubjectContext) context;
    SecurityManager securityManager = wsc.resolveSecurityManager();
    Session session = wsc.resolveSession();
    boolean sessionEnabled = wsc.isSessionCreationEnabled();
    PrincipalCollection principals = wsc.resolvePrincipals();
    boolean authenticated = wsc.resolveAuthenticated();
    String host = wsc.resolveHost();
    ServletRequest request = wsc.resolveServletRequest();
    ServletResponse response = wsc.resolveServletResponse();

    return new WebDelegatingSubject(principals, authenticated, host, session, sessionEnabled,
            request, response, securityManager);
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
@Override
protected SessionContext createSessionContext(SubjectContext subjectContext) {
    SessionContext sessionContext = super.createSessionContext(subjectContext);
    if (subjectContext instanceof WebSubjectContext) {
        WebSubjectContext wsc = (WebSubjectContext) subjectContext;
        ServletRequest request = wsc.resolveServletRequest();
        ServletResponse response = wsc.resolveServletResponse();
        DefaultWebSessionContext webSessionContext = new DefaultWebSessionContext(sessionContext);
        if (request != null) {
            webSessionContext.setServletRequest(request);
        }
        if (response != null) {
            webSessionContext.setServletResponse(response);
        }

        sessionContext = webSessionContext;
    }
    return sessionContext;
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
@Override
protected SessionContext createSessionContext(SubjectContext subjectContext) {
	SessionContext sessionContext = super
			.createSessionContext(subjectContext);
	if (subjectContext instanceof WebSubjectContext) {
		WebSubjectContext wsc = (WebSubjectContext) subjectContext;
		ServletRequest request = wsc.resolveServletRequest();
		ServletResponse response = wsc.resolveServletResponse();
		DefaultWebSessionContext webSessionContext = new DefaultWebSessionContext(
				sessionContext);
		if (request != null) {
			webSessionContext.setServletRequest(request);
		}
		if (response != null) {
			webSessionContext.setServletResponse(response);
		}

		sessionContext = webSessionContext;
	}
	return sessionContext;
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
/**
 * {@inheritDoc} <br />
 * Original code taken from {@link DefaultWebSubjectFactory} and modified
 * in order to return {@link SodaWebDelegatingSubject} instances.
 */
@Override
public Subject createSubject( SubjectContext context ) {
	if ( !(context instanceof WebSubjectContext) ) {
		return super.createSubject( context );
	}
	WebSubjectContext wsc = (WebSubjectContext) context;
	SecurityManager securityManager = wsc.resolveSecurityManager();
	Session session = wsc.resolveSession();
	boolean sessionEnabled = wsc.isSessionCreationEnabled();
	PrincipalCollection principals = wsc.resolvePrincipals();
	boolean authenticated = wsc.resolveAuthenticated();
	String host = wsc.resolveHost();
	ServletRequest request = wsc.resolveServletRequest();
	ServletResponse response = wsc.resolveServletResponse();

	return new SodaWebDelegatingSubject( principals, authenticated, host, session, sessionEnabled, request, response, securityManager );
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
@Override
public Subject createSubject(SubjectContext context) {
    WebSubjectContext wsc = (WebSubjectContext) context;
    AuthenticationInfo info = wsc.getAuthenticationInfo();

    AccountProfile profile = null;
    AccountSubject subject = null;
    if (info instanceof AccountAuthenticationInfo) {
    	profile = ((AccountAuthenticationInfo) info).getProfile();
        subject = doCreate(wsc, profile);
        subject.getSession(true).setAttribute("profile", profile);
    }else{
        Session session = wsc.getSession();
        if(session != null){
        	profile = (AccountProfile)session.getAttribute("profile");
        }
        subject = doCreate(wsc, profile);
        boolean isRemembered = subject.isRemembered();
        if (session == null) {
            wsc.setSessionCreationEnabled(true);
            subject.getSession(true);
        }
        if (isRemembered && profile == null) {
            Object username = subject.getPrincipal();
            profile = userService.getProfileByName((String) username);
            
            subject.getSession(true).setTimeout(30 * 60 * Consts.TIME_MIN);
            subject.getSession(true).setAttribute("profile", profile);
        }
    }
    

    return doCreate(wsc, profile);
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
private boolean isIdentityRemoved(WebSubjectContext subjectContext) {
    ServletRequest request = subjectContext.resolveServletRequest();
    if (request != null) {
        Boolean removed = (Boolean) request.getAttribute(ShiroHttpServletRequest.IDENTITY_REMOVED_KEY);
        return removed != null && removed;
    }
    return false;
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
@Override
protected SubjectContext copy(SubjectContext subjectContext) {
    if (subjectContext instanceof WebSubjectContext) {
        return new DefaultWebSubjectContext((WebSubjectContext) subjectContext);
    }
    return super.copy(subjectContext);
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
@Override
protected SubjectContext copy(SubjectContext subjectContext) {
	if (subjectContext instanceof WebSubjectContext) {
		return new DefaultWebSubjectContext(
				(WebSubjectContext) subjectContext);
	}
	return super.copy(subjectContext);
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
private AccountSubject doCreate(WebSubjectContext wsc, AccountProfile profile) {
    return new AccountSubject(wsc.resolvePrincipals(), wsc.resolveAuthenticated(), wsc.resolveHost(),
            wsc.resolveSession(), wsc.isSessionCreationEnabled(), wsc.resolveServletRequest(),
            wsc.resolveServletResponse(), wsc.resolveSecurityManager(), profile);
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
public DefaultWebSubjectContext(WebSubjectContext context) {
    super(context);
}
 

import org.apache.shiro.web.subject.WebSubjectContext; //导入依赖的package包/类
/**
 * Returns a previously serialized identity byte array or {@code null} if the byte array could not be acquired.
 * This implementation retrieves an HTTP cookie, Base64-decodes the cookie value, and returns the resulting byte
 * array.
 * <p/>
 * The {@code SubjectContext} instance is expected to be a {@link WebSubjectContext} instance with an HTTP
 * Request/Response pair so an HTTP cookie can be retrieved from the incoming request.  If it is not a
 * {@code WebSubjectContext} or that {@code WebSubjectContext} does not have an HTTP Request/Response pair, this
 * implementation returns {@code null}.
 *
 * @param subjectContext the contextual data, usually provided by a {@link Subject.Builder} implementation, that
 *                       is being used to construct a {@link Subject} instance.  To be used to assist with data
 *                       lookup.
 * @return a previously serialized identity byte array or {@code null} if the byte array could not be acquired.
 */
protected byte[] getRememberedSerializedIdentity(SubjectContext subjectContext) {

    if (!WebUtils.isHttp(subjectContext)) {
        if (log.isDebugEnabled()) {
            String msg = "SubjectContext argument is not an HTTP-aware instance.  This is required to obtain a " +
                    "servlet request and response in order to retrieve the rememberMe cookie. Returning " +
                    "immediately and ignoring rememberMe operation.";
            log.debug(msg);
        }
        return null;
    }

    WebSubjectContext wsc = (WebSubjectContext) subjectContext;
    if (isIdentityRemoved(wsc)) {
        return null;
    }

    HttpServletRequest request = WebUtils.getHttpRequest(wsc);
    HttpServletResponse response = WebUtils.getHttpResponse(wsc);

    String base64 = getCookie().readValue(request, response);
    // Browsers do not always remove cookies immediately (SHIRO-183)
    // ignore cookies that are scheduled for removal
    if (Cookie.DELETED_COOKIE_VALUE.equals(base64)) return null;

    if (base64 != null) {
        base64 = ensurePadding(base64);
        if (log.isTraceEnabled()) {
            log.trace("Acquired Base64 encoded identity [" + base64 + "]");
        }
        byte[] decoded = Base64.decode(base64);
        if (log.isTraceEnabled()) {
            log.trace("Base64 decoded byte array length: " + (decoded != null ? decoded.length : 0) + " bytes.");
        }
        return decoded;
    } else {
        //no cookie set - new site visitor?
        return null;
    }
}