Are you sure your framework work as your purpose?

[deposit-world]

The method readSessionof the SessionDAOhas one paramter named sessionId,when use Shiro in web environment ,then instance of WebSubject init in AbstractShiroFilter like this :
return new WebSubject.Builder(getSecurityManager(), request, response).buildWebSubject();,
but i can't find Shiro init sessionIdat anywhere,it's mean your framework no ability to bind the Sessionthat in Redisto current WebSubject. so when you inovke the method getSession() of Subject,Shiro will create new Sessionfor you.
My Email : fanzhengou@aliyun.com

[alexxiyang]

Please upgrade to 2.4.8 and try again