java中的session对象如何获取

HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder.getRequestAttributes()).getRequest();

HttpServletRequest request = ServletActionContext.getRequest(); 
   HttpSession session = request.getSession(); 

String userSession = request.getSession().getAttribute("userId")+StringUtil.EMPTY;

//登录方法
public BaseResult user_login(String userNO,String password,HttpSession session){
   
   BaseResult result = new BaseResult();
   User user = userService.login(userNO, password);
   loginJSON json= new loginJSON();
   if (user==null) {
    result.setSuccess(false);
    result.setMessage("用户名/密码错误");
   } else {
    result.setSuccess(true);
    result.setMessage("登陆成功");
    json.setUserData(user);
    json.setAllDept((List)userService.getAllDep(userNO).get("allDept"));
    json.setAuthDept((List)userService.getAllDep(userNO).get("authDept"));
    json.setCorwd(userService.getGE("corwd"));
    json.setMeetType(userService.getGE("meetType"));
    json.setOrganizer(userService.getGE("organizer"));
    result.setData(json);
   }
   //将对象封装到session中
   session.setAttribute("user",user);
   return result;
  }

HttpServletRequest request =((ServletRequestAttributes) RequestContextHolder.getRequestAttributes()).getRequest(); 
     HttpSession session=request.getSession();
     User user=(User) session.getAttribute("user");
     //