System.out.println("shiro:"+ subject.getSession().getId());
System.out.println(" "+ request.getSession().getId());
运行结果:
而且
subject.getSession() == request.getSession() 为false
但是subject.getSession().setAttribute("key","value")后
能从request的Session中取值
request获取的session是httpSession,而subject后取的session类型,本质上也是httpSession。即两者在操作session时,都是操作同一类型的session对象;