public static boolean isWebContainerSessions(SecurityManager sm) {
        if (sm instanceof WebSecurityManager) {
            WebSecurityManager wsm = (WebSecurityManager) sm;
            return wsm.isHttpSessionMode();
        }
        return false;
    }
If web environment, delegate to SessionScoped,
otherwise use Shiro sessions to store session beans
support/jakarta-ee/src/main/java/org/apache/shiro/ee/cdi/ShiroScopeContext.java