@Produces
    @RequestScoped
    public static Subject getSubject() {
        return SecurityUtils.getSubject();
    }
Exposes Shiro's SecurityManager, Session and Subject via CDI @Inject
support/cdi/src/main/java/org/apache/shiro/cdi/ShiroComponentProducer.java