简化版 java web 开发平台，基于 Spring MVC，jdbcTemplate.zip

package org.apache.shiro.session.mgt; import java.io.IOException; import java.io.ObjectInputStream; import java.io.ObjectOutputStream; import java.io.Serializable; import java.text.DateFormat; import java.util.Collection; import java.util.Collections; import java.util.Date; import java.util.HashMap; import java.util.Map; import org.apache.shiro.session.ExpiredSessionException; import org.apache.shiro.session.InvalidSessionException; import org.apache.shiro.session.StoppedSessionException; import org.apache.shiro.util.CollectionUtils; import org.slf4j.Logger; import org.slf4j.LoggerFactory; /** * Simple {@link org.apache.shiro.session.Session} JavaBeans-compatible POJO implementation, intended to be used on the * business/server tier. * * @since 0.1 */ public class SimpleSession implements ValidatingSession, Serializable { // Serialization reminder: // You _MUST_ change this number if you introduce a change to this class // that is NOT serialization backwards compatible. Serialization-compatible // changes do not require a change to this number. If you need to generate // a new number in this case, use the JDK's 'serialver' program to generate it. private static final long serialVersionUID = -7125642695178165650L; //TODO - complete JavaDoc private transient static final Logger log = LoggerFactory.getLogger(SimpleSession.class); protected static final long MILLIS_PER_SECOND = 1000; protected static final long MILLIS_PER_MINUTE = 60 * MILLIS_PER_SECOND; protected static final long MILLIS_PER_HOUR = 60 * MILLIS_PER_MINUTE; //serialization bitmask fields. DO NOT CHANGE THE ORDER THEY ARE DECLARED! static int bitIndexCounter = 0; private static final int ID_BIT_MASK = 1 << bitIndexCounter++; private static final int START_TIMESTAMP_BIT_MASK = 1 << bitIndexCounter++; private static final int STOP_TIMESTAMP_BIT_MASK = 1 << bitIndexCounter++; private static final int LAST_ACCESS_TIME_BIT_MASK = 1 << bitIndexCounter++; private static final int TIMEOUT_BIT_MASK = 1 << bitIndexCounter++; private static final int EXPIRED_BIT_MASK = 1 << bitIndexCounter++; private static final int HOST_BIT_MASK = 1 << bitIndexCounter++; private static final int ATTRIBUTES_BIT_MASK = 1 << bitIndexCounter++; public static final int USER_ID_BIT_MASK = 1 << bitIndexCounter++; public static final int USER_AGENT_BIT_MASK = 1 << bitIndexCounter++; public static final int STATUS_BIT_MASK = 1 << bitIndexCounter++; public static final int USERNAME_BIT_MASK = 1 << bitIndexCounter++; public static final int REMEMBER_ME_BIT_MASK = 1 << bitIndexCounter++; // ============================================================== // NOTICE: // // The following fields are marked as transient to avoid double-serialization. // They are in fact serialized (even though 'transient' usually indicates otherwise), // but they are serialized explicitly via the writeObject and readObject implementations // in this class. // // If we didn't declare them as transient, the out.defaultWriteObject(); call in writeObject would // serialize all non-transient fields as well, effectively doubly serializing the fields (also // doubling the serialization size). // // This finding, with discussion, was covered here: // // http://mail-archives.apache.org/mod_mbox/shiro-user/201109.mbox/%3C4E81BCBD.8060909@metaphysis.net%3E // // ============================================================== private transient Serializable id; private transient Date startTimestamp; private transient Date stopTimestamp; private transient Date lastAccessTime; private transient long timeout; private transient boolean expired; private transient String host; private transient Map<Object, Object> attributes; public SimpleSession() { this.timeout = DefaultSessionManager.DEFAULT_GLOBAL_SESSION_TIMEOUT; //TODO - remove concrete reference to DefaultSessionManager this.startTimestamp = new Date(); this.lastAccessTime = this.startTimestamp; } public SimpleSession(String host) { this(); this.host = host; } public Serializable getId() { return this.id; } public void setId(Serializable id) { this.id = id; } public Date getStartTimestamp() { return startTimestamp; } public void setStartTimestamp(Date startTimestamp) { this.startTimestamp = startTimestamp; } /** * Returns the time the session was stopped, or <tt>null</tt> if the session is still active. * <p/> * A session may become stopped under a number of conditions: * <ul> * <li>If the user logs out of the system, their current session is terminated (released).</li> * <li>If the session expires</li> * <li>The application explicitly calls {@link #stop()}</li> * <li>If there is an internal system error and the session state can no longer accurately * reflect the user's behavior, such in the case of a system crash</li> * </ul> * <p/> * Once stopped, a session may no longer be used. It is locked from all further activity. * * @return The time the session was stopped, or <tt>null</tt> if the session is still * active. */ public Date getStopTimestamp() { return stopTimestamp; } public void setStopTimestamp(Date stopTimestamp) { this.stopTimestamp = stopTimestamp; } public Date getLastAccessTime() { return lastAccessTime; } public void setLastAccessTime(Date lastAccessTime) { this.lastAccessTime = lastAccessTime; } /** * Returns true if this session has expired, false otherwise. If the session has * expired, no further user interaction with the system may be done under this session. * * @return true if this session has expired, false otherwise. */ public boolean isExpired() { return expired; } public void setExpired(boolean expired) { this.expired = expired; } public long getTimeout() { return timeout; } public void setTimeout(long timeout) { this.timeout = timeout; } public String getHost() { return host; } public void setHost(String host) { this.host = host; } public Map<Object, Object> getAttributes() { return attributes; } public void setAttributes(Map<Object, Object> attributes) { this.attributes = attributes; } public void touch() { this.lastAccessTime = new Date(); } public void stop() { if (this.stopTimestamp == null) { this.stopTimestamp = new Date(); } } protected boolean isStopped() { return getStopTimestamp() != null; } protected void expire() { stop(); this.expired = true; } /** * @since 0.9 */ public boolean isValid() { return !isStopped() && !isExpired(); } /** * Determines if this session is expired. * * @return true if the specified session has expired, false otherwise. */ protected boolean isTimedOut() { if (isExpired()) { return true; } long timeout = getTimeout(); if (timeout >= 0l) { Date lastAccessTime = getLastAccessTime(); if (lastAccessTime == null) { String msg = "session.lastAccessTime for session with id [" + getId() + "] is null. This value must be set at " + "least once, preferably at least upon instantiation. Please check the " + getClass().getName() + " implementation and ensure " + "this value will be set (perhaps in the constructor?)"; throw new IllegalStateExcepti