shiro限制重复账号登陆

遍历同一个账户的session
private List<Session> getLoginedSession(Subject currentUser) {
Collection<Session> list = ((DefaultSessionManager) ((DefaultSecurityManager) SecurityUtils
.getSecurityManager()).getSessionManager()).getSessionDAO()
.getActiveSessions();
List<Session> loginedList = new ArrayList<Session>();
SessionUser loginUser = (SessionUser) currentUser.getPrincipal();
for (Session session : list) {

Subject s = new Subject.Builder().session(session).buildSubject();

if (s.isAuthenticated()) {
SessionUser user = (SessionUser) s.getPrincipal();

if (user.getAccount().equalsIgnoreCase(loginUser.getAccount())) {
if (!session.getId().equals(
currentUser.getSession().getId())) {
loginedList.add(session);
}
}
}
}
return loginedList;
}
  // 剔除其他此账号在其它地方登录
List<Session> loginedList = getLoginedSession(currentUser);
for (Session session : loginedList) {
session.stop();
 }