How to use

createSession

method

in

org.apache.shiro.session.mgt.SessionFactory

protected Session newSessionInstance(SessionContext context) {
  return getSessionFactory().createSession(context);
}

protected Session newSessionInstance(SessionContext context) {
  return getSessionFactory().createSession(context);
}

protected Session newSessionInstance(SessionContext context) {
  return getSessionFactory().createSession(context);
}

@Override
public Session start(SessionContext context) {
  log.debug("starting VaadinSessionManager");
  // Retrieve the VaadinSession for the current user.
  VaadinSession vaadinSession = sessionProvider.get();
  // Create a new security session using the session factory.
  SimpleSession shiroSession = (SimpleSession) sessionFactory.createSession(context);
  // Assign a unique ID to the session now because this session manager
  // doesn't use a SessionDAO for persistence as it delegates to any
  // VaadinSession configured persistence.
  shiroSession.setId(UUID.randomUUID()
              .toString());
  // Put the security session in the VaadinSession. We use the session's ID as
  // part of the key just to be safe so we can double check that the security
  // session matches when it is requested in getSession.
  vaadinSession.setAttribute(SESSION_ATTRIBUTE_PREFIX + shiroSession.getId(), shiroSession);
  return shiroSession;
}

@Override
public Session start(SessionContext context) {
  log.debug("starting VaadinSessionManager");
  // Retrieve the VaadinSession for the current user.
  VaadinSession vaadinSession = sessionProvider.get();
  // Create a new security session using the session factory.
  SimpleSession shiroSession = (SimpleSession) sessionFactory.createSession(context);
  // Assign a unique ID to the session now because this session manager
  // doesn't use a SessionDAO for persistence as it delegates to any
  // VaadinSession configured persistence.
  shiroSession.setId(UUID.randomUUID()
              .toString());
  // Put the security session in the VaadinSession. We use the session's ID as
  // part of the key just to be safe so we can double check that the security
  // session matches when it is requested in getSession.
  vaadinSession.setAttribute(SESSION_ATTRIBUTE_PREFIX + shiroSession.getId(), shiroSession);
  return shiroSession;
}