集成shiro 出现org.hibernate.HibernateException: No Session found for current thread

[Jayron]

在Realm中，
方法doGetAuthenticationInfo，通过sysUserService查询，执行正常
方法doGetAuthorizationInfo，也是通过sysUserService查询，结果会报错：org.hibernate.HibernateException: No Session found for current thread
同个类中，为什么一个正常，一个会报session找不到

请各位大侠帮忙指点！

web.xml

  <filter>
    <filter-name>shiroFilter</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>shiroFilter</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>
  <filter>

applicationContext-shiro.xml

 <bean id="securityManager" 
   class="org.apache.shiro.web.mgt.DefaultWebSecurityManager"> 
   <property name="realm" ref="myRealm"/> 
   <property name="cacheManager" ref="shiroCacheManager" />
 </bean> 

 <bean id="myRealm" class="com.bkbk.module.admin.Realm.MyRealm"> 
 	<property name="sysUserService" ref="sysUserService"/>
 </bean>
 
<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean"> 
   <property name="securityManager" ref="securityManager"/> 
   <property name="loginUrl" value="/admin/sys_user!login.action"/> 
   <property name="successUrl" value="/admin/process_definition!findPage.action"/> 
   <property name="unauthorizedUrl" value="/403.do"/> 
	<property name="filters">
		<map>
			<entry key="authenticationFilter" value-ref="authenticationFilter" />
		</map>
	</property>
   <property name="filterChainDefinitions"> 
 			<value>
				/admin/logout.jsp = logout
				/admin/work!** = perms["admin:work"]
			</value>
   </property> 
 </bean> 

	<bean id="shiroCacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
		<property name="cacheManagerConfigFile" value="classpath:ehcache.xml"/>
	</bean>

	<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
	
	<bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor">
		<property name="proxyTargetClass" value="true" />
	</bean>

	<bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
    	<property name="securityManager" ref="securityManager"/>
	</bean>
	

MyRealm.java

public class MyRealm extends AuthorizingRealm implements  
Realm,   
InitializingBean{  
	
	
	private SysUserService sysUserService;

	
	public MyRealm() {
		super();

	}
	
 
    /** 
     * 认证信息 
     */  
	@Override
    protected AuthenticationInfo doGetAuthenticationInfo(  
                AuthenticationToken authcToken ) throws AuthenticationException {  
        UsernamePasswordToken token = (UsernamePasswordToken) authcToken;  
        String userName = token.getUsername();  
        if( userName != null && !"".equals(userName) ){  、
//这个地方查询，执行正常
        	SysUser user = sysUserService.login(token.getUsername(),  String.valueOf(token.getPassword()));
        	
            if( user != null )  
                return new SimpleAuthenticationInfo(  
                            user.getUserName(),user.getPassword(), getName());  
        }  
        return null;  
    }

	   /** 
     * 授权信息 
     */  
	@Override
    protected AuthorizationInfo doGetAuthorizationInfo(  
                PrincipalCollection principals) {  
      
        String username = SecurityUtils.getSubject().getPrincipals().fromRealm(getName()).toString();
        
      	
        if( username != null ){  
                SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();  
//这个地方去查询，结果在dao会报错：org.hibernate.HibernateException: No Session found for current thread
                info.addRoles(sysUserService.findRoleByUser(user));
                return info;  
            }  
        return null;  
    }  
  
	
	public SysUserService getSysUserService() {
		return sysUserService;
	}

	public void setSysUserService(SysUserService sysUserService) {
		this.sysUserService = sysUserService;
	}


	@Override
	public void afterPropertiesSet() throws Exception {
		 Assert.notNull(sysUserService);  
		// TODO Auto-generated method stub
		
	}
	

	@Override
	public String getName() {
		return getClass().getName();
	}

  
}  

[song_wl]

SysUserService 贴出来看看吧

[MK_Code]

hibernate配置文件，没有配置绑定当前线程的session

[Jayron]

引用 1 楼 song_1990 的回复:

SysUserService 贴出来看看吧

第一个是正常的，第二个会报no session SysUserService.java

	public SysUser login(String userName, String password) {
		
		SysUser user = null;
		List<Object[]> list = sessionFactory.getCurrentSession().createSQLQuery("select id_,password_,user_name_ from `user_` where `user_name_`= '"+userName+"' and `password_`='"+password+"'").list();
		for(Object[] o : list)
		{
			user = new SysUser();
			user.setId(((BigInteger)o[0]).longValue());
			user.setPassword((String)o[1]);
			user.setUserName((String)o[2]);
		}
		return user;
	}

	public List<String> findResourceByUser(SysUser user) {
		
		return sessionFactory.getCurrentSession().createSQLQuery("select distinct(url_) from resource_").list();
	}

[Jayron]

引用 1 楼 song_1990 的回复:

SysUserService 贴出来看看吧

如果用isPermitted()主动去触发MyRealmk中的doGetAuthorizationInfo(),会正常返回结果。 但如果是通过访问去触发MyRealm中的doGetAuthorizationInfo(),会出现no session的错。 很奇怪

[Jayron]

引用 2 楼 MK_Code 的回复:

hibernate配置文件，没有配置绑定当前线程的session

如果用isPermitted()主动去触发MyRealmk中的doGetAuthorizationInfo(),会正常返回结果。 但如果是通过访问去触发MyRealm中的doGetAuthorizationInfo(),会出现no session的错。 应该都有绑定，会不会是因为session已经关闭？还是？

[song_wl]

<filter> <filter-name>shiroFilter</filter-name> <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> <init-param> <param-name>targetFilterLifecycle</param-name> <param-value>true</param-value> </init-param> </filter> 这样试试

[Jayron]

引用 6 楼 song_1990 的回复:

<filter> <filter-name>shiroFilter</filter-name> <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> <init-param> <param-name>targetFilterLifecycle</param-name> <param-value>true</param-value> </init-param> </filter> 这样试试

引用 6 楼 song_1990 的回复:

<filter> <filter-name>shiroFilter</filter-name> <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> <init-param> <param-name>targetFilterLifecycle</param-name> <param-value>true</param-value> </init-param> </filter> 这样试试

还是不行 org.hibernate.HibernateException: No Session found for current thread 谢谢song_1990 的提醒，应该是session生命周期的问题。只是很奇怪登录的方法doGetAuthorizationInfo是正常，获取权限信息的方法doGetAuthorizationInfo却有这个错

[蜗牛爬山]

我也遇见了 怎么解决啊大哥

[qzw1210]

用hibernate3下南就改成".hibernate4"

<filter>
		<filter-name>hibernateFilter</filter-name>
		<filter-class>
     org.springframework.orm.hibernate4.support.OpenSessionInViewFilter
		</filter-class>
	</filter>
	<filter-mapping>
		<filter-name>hibernateFilter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

[tao1027879132]

有可能是你并没有成功登陆。