<bean id="cluterShiroSessionDao" class="com.platform.shiro.CluterShiroSessionDao"/><bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager"><!-- 设置session过期时间为1小时(单位：毫秒)，默认为30分钟 --><property name="globalSessionTimeout" value="3600000"></property><property name="sessionValidationSchedulerEnabled" value="true"></property><property name="sessionIdUrlRewritingEnabled" value="false"></property><property name="sessionDAO" ref="cluterShiroSessionDao"/></bean>

public class CluterShiroSessionDao extends EnterpriseCacheSessionDAO {//创建Session(它实现了CachingSessionDAO接口的方法)@Overrideprotected Serializable doCreate(Session session) {Serializable sessionId = super.doCreate(session);final String key = Constant.SESSION_KEY + sessionId.toString();setShiroSession(key, session);return sessionId;}//根据sessionId读取session信息(它实现了CachingSessionDAO接口的方法)@Overrideprotected Session doReadSession(Serializable sessionId) {Session session = super.doReadSession(sessionId);if (null == session) {final String key = Constant.SESSION_KEY + sessionId.toString();session = getShiroSession(key);}return session;}//更新操作(它实现了CachingSessionDAO接口的方法)@Overrideprotected void doUpdate(Session session) {super.doUpdate(session);final String key = Constant.SESSION_KEY + session.getId().toString();setShiroSession(key, session);}//删除操作(它实现了CachingSessionDAO接口的方法)@Overrideprotected void doDelete(Session session) {super.doDelete(session);final String key = Constant.SESSION_KEY + session.getId().toString();J2CacheUtils.remove(key);}private Session getShiroSession(String key) {return (Session) J2CacheUtils.get(key);}private void setShiroSession(String key, Session session) {J2CacheUtils.put(key, session);}
}