shiro中session緩存中關於JSESSIONID失效問題

考研期間,再次抽點時間來搞點開發(其實上的課不想聽又放不下之前弄了一半的東西,所以有點開小差了.....),哈哈。用一個小dmeo來學習shiro的權限分配管理,在學習其中的在線會話管理,要用到sesssion管理,結果跟着張凱濤的shiro教程學到這裏後使用了自定義實現的緩存管理和session管理,碰到了這麼個錯誤。

    測試的時候一直是拿後臺的登錄頁面進行測試。在最初請求該頁面時,shirofilter會攔截到請求,將攔截到的request交給securityManager中的sessionManager來出來,爲請求添加session會話,當然在sessionManager中所有有管session的增刪改查都是交由sessionDao來處理的,所以首先懷疑到了sessionDao有問題。

使用自定義的sessionDao報錯如下:

2018-05-14 18:39:45 -25802 [http-bio-8080-exec-142] DEBUG   - Found 'JSESSIONID' cookie value [C2CCB39E36A18CB160E715E0EB2B81B6]
2018-05-14 18:39:45 -25825 [http-bio-8080-exec-142] DEBUG   - doReadSession >>>>>> SessionId=C2CCB39E36A18CB160E715E0EB2B81B6

所以改爲用shiro自帶的EnterpriseCacheSessionManager結果,錯誤就比較明顯了:

2018-05-14 18:38:42 -17883 [http-bio-8080-exec-140] DEBUG   - Found 'JSESSIONID' cookie value [C2CCB39E36A18CB160E715E0EB2B81B6]
com.lu.upms.shiro.session.EnterpriseCacheSessionDAO.doReadSession()
2018-05-14 18:38:42 -17906 [http-bio-8080-exec-140] DEBUG   - Resolved SubjectContext context session is invalid.  Ignoring and creating an anonymous (session-less) Subject instance.
org.apache.shiro.session.UnknownSessionException: There is no session with id [C2CCB39E36A18CB160E715E0EB2B81B6]
	at org.apache.shiro.session.mgt.eis.AbstractSessionDAO.readSession(AbstractSessionDAO.java:170)
	at org.apache.shiro.session.mgt.eis.CachingSessionDAO.readSession(CachingSessionDAO.java:261)
	at org.apache.shiro.session.mgt.DefaultSessionManager.retrieveSessionFromDataSource(DefaultSessionManager.java:236)
	at org.apache.shiro.session.mgt.DefaultSessionManager.retrieveSession(DefaultSessionManager.java:222)
	at org.apache.shiro.session.mgt.AbstractValidatingSessionManager.doGetSession(AbstractValidatingSessionManager.java:118)
	at org.apache.shiro.session.mgt.AbstractNativeSessionManager.lookupSession(AbstractNativeSessionManager.java:148)
	at org.apache.shiro.session.mgt.AbstractNativeSessionManager.getSession(AbstractNativeSessionManager.java:140)
	at org.apache.shiro.mgt.SessionsSecurityManager.getSession(SessionsSecurityManager.java:156)
	at org.apache.shiro.mgt.DefaultSecurityManager.resolveContextSession(DefaultSecurityManager.java:456)
	at org.apache.shiro.mgt.DefaultSecurityManager.resolveSession(DefaultSecurityManager.java:442)
	at org.apache.shiro.mgt.DefaultSecurityManager.createSubject(DefaultSecurityManager.java:338)
	at org.apache.shiro.subject.Subject$Builder.buildSubject(Subject.java:846)
	at org.apache.shiro.web.subject.WebSubject$Builder.buildWebSubject(WebSubject.java:148)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.createSubject(AbstractShiroFilter.java:292)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.doFilterInternal(AbstractShiroFilter.java:359)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:262)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:218)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:169)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
	at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:956)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:442)
	at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1082)
	at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:623)
	at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:316)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
	at java.lang.Thread.run(Thread.java:745)
2018-05-14 18:38:42 -17923 [http-bio-8080-exec-140] DEBUG   - DispatcherServlet with name 'springMVC' processing GET request for [/lucms/manager/login]
2018-05-14 18:38:42 -17924 [http-bio-8080-exec-140] DEBUG   - Looking up handler method for path /manager/login
2018-05-14 18:38:42 -17927 [http-bio-8080-exec-140] DEBUG   - Returning handler method [public java.lang.String com.lu.cms.controller.LoginController.login()]
2018-05-14 18:38:42 -17927 [http-bio-8080-exec-140] DEBUG   - Returning cached instance of singleton bean 'loginController'
2018-05-14 18:38:42 -17928 [http-bio-8080-exec-140] DEBUG   - Last-Modified value for [/lucms/manager/login] is: -1
2018-05-14 18:38:42 -17946 [http-bio-8080-exec-140] DEBUG   - Invoking afterPropertiesSet() on bean with name '/manager/login'
2018-05-14 18:38:42 -17946 [http-bio-8080-exec-140] DEBUG   - Rendering view [org.springframework.web.servlet.view.JstlView: name '/manager/login'; URL [/views//manager/login.jsp]] in DispatcherServlet with name 'springMVC'
2018-05-14 18:38:42 -17951 [http-bio-8080-exec-140] DEBUG   - Forwarding to resource [/views//manager/login.jsp] in InternalResourceView '/manager/login'
2018-05-14 18:38:43 -18090 [http-bio-8080-exec-140] DEBUG   - Creating new EIS record for new session instance [com.lu.upms.shiro.session.UpmsSession,id=null]
com.lu.upms.shiro.session.EnterpriseCacheSessionDAO.doCreate()
2018-05-14 18:38:43 -18091 [http-bio-8080-exec-140] ERROR   - set cache shiro-demo-cache:b1be7c3c-d2ff-4d57-ac7b-a285d75ace61 error!
com.lu.upms.shiro.session.EnterpriseCacheSessionDAO.doUpdate()
2018-05-14 18:38:43 -18091 [http-bio-8080-exec-140] ERROR   - set cache shiro-demo-cache:b1be7c3c-d2ff-4d57-ac7b-a285d75ace61 error!
2018-05-14 18:38:43 -18092 [http-bio-8080-exec-140] DEBUG   - Added HttpServletResponse Cookie [JSESSIONID=b1be7c3c-d2ff-4d57-ac7b-a285d75ace61; Path=/lucms; HttpOnly]
2018-05-14 18:38:43 -18092 [http-bio-8080-exec-140] DEBUG   - 會話創建:b1be7c3c-d2ff-4d57-ac7b-a285d75ace61
com.lu.upms.shiro.session.EnterpriseCacheSessionDAO.doReadSession()
2018-05-14 18:38:43 -18299 [http-bio-8080-exec-140] DEBUG   - Successfully completed request
com.lu.upms.shiro.session.EnterpriseCacheSessionDAO.doReadSession()

看第二條報錯信息就明白了,創建的session無效,根本就沒有寫入到redis裏面,所以之後的對於sesisonId的查詢也就是空的了。

解決:就是自定義一個不與容器衝突的SEESIONID

<bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">
        <property name="sessionDAO" ref="sessionDAO"/>

        <property name="sessionIdCookieEnabled" value="true"/>
        <property name="sessionIdCookie" ref="sessionIdCookie"/>
    </bean>

    <!-- 指定本系統SESSIONID, 默認爲: JSESSIONID 問題: 與SERVLET容器名衝突, 如JETTY, TOMCAT 等默認JSESSIONID,
        當跳出SHIRO SERVLET時如ERROR-PAGE容器會爲JSESSIONID重新分配值導致登錄會話丟失! -->
    <bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
        <constructor-arg name="name" value="ycyintang.session.id"/>
    </bean>


        ...


發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章