shiro-UserContext

shiro-UserContext(工具类-存取用户)

session是从subject获取

存在shiro的session中后，HttpSession也会有值

public class UserContext {

public static final String USER_IN_SESSION ="loginUser";

//把登录成功的用户放到session中
public static void setUser(Employee loginUser){
    Subject subject = SecurityUtils.getSubject();
    //代表登录成功,把当前登录用户放到Session中去(shiro的session)
    //1.拿到session
    Session session = subject.getSession();
    //2.把当前登录成功的用户放到session中去
    session.setAttribute(USER_IN_SESSION, loginUser);

}

//获取到当前登录用户
public static Employee getUser(){
    Subject subject = SecurityUtils.getSubject();
    Session session = subject.getSession();
    Employee employee = (Employee) session.getAttribute(USER_IN_SESSION);
    return employee;
}

}