Shiro实现单用户登录

// 登录处代码
Subject subject = ShiroUtils.getSubject();
UsernamePasswordToken token = new UsernamePasswordToken(username, password);
subject.login(token);
			
// 剔除其他此账号在其它地方登录
List<Session> loginedList = getLoginedSession(subject);
for (Session session : loginedList) {
      session.stop();
}

    //遍历同一个账户的session
    private List<Session> getLoginedSession(Subject currentUser) {
        Collection<Session> list = ((DefaultSessionManager) ((DefaultSecurityManager) SecurityUtils
                .getSecurityManager()).getSessionManager()).getSessionDAO()
                .getActiveSessions();
        List<Session> loginedList = new ArrayList<Session>();
        SysUserEntity loginUser = (SysUserEntity) currentUser.getPrincipal();
        for (Session session : list) {

            Subject s = new Subject.Builder().session(session).buildSubject();

            if (s.isAuthenticated()) {
                SysUserEntity user = (SysUserEntity) s.getPrincipal();

                if (user.getUsername().equalsIgnoreCase(loginUser.getUsername())) {
                    if (!session.getId().equals(
                            currentUser.getSession().getId())) {
                        loginedList.add(session);
                    }
                }
            }
        }
        return loginedList;
    }