shiro整合applicationContext.xml

导入jar包

这里由于使用maven，自动导入了jar包

web.xml添加配置文件

首先需要之前配置的拦截器

<!-- shiro:过滤器，DelegatingFilterProxy通过代理模式将spring容器中的bean和filter关联起来 -->
    <filter>
        <filter-name>shiroFilter</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
<!-- 设置true由servlet容器控制filter的生命周期 -->
    <init-param>
        <param-name>targetFilterLifecycle</param-name>
        <parm-value>true</param-value>
    </init-param>
<!-- 设置spring容器filter的bean id，如果不设置则找与filter-name一致的bean -->
    <init-param>
        <param-name>targetBeanName</param-name>
        <param-value>shiroFilter</param-value>
    </init-param>
    </filter>
    <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

在applicationContext-shiro.xml中配置web.xml中filter对应spring容器中的bean

创建applicationContext.xml文件

<!-- web.xml中shiro的filter对应的bean -->
<!-- shiro的web过滤器 -->
    <bean id ="shiroFilter" class = "org.apache.shiro.spring.web.ShiroFilterFactoryBean">
        <property name ="securityManager" ref ="securityManager">
<!-- loginUrl认证提交地址，如果没有认证将会请求此地址进行认证，请求地址将由formAuthenticationFilter进行表单认证 -->
        <property name ="loginUrl" value ="/relogin">
        <property name ="unauthorizedUrl" value ="/error">
<!-- 过滤器链定义:从上向下顺序执行，一般将/**放在最下边 -->
        <property name ="filterChainDefinitions">
            <value>
                <!-- /** = anon所有url都可以匿名访问 -->
                /** = anon
            </value>
        </property>
        </bean>
<!-- securityManager -->
    <bean id ="securityManager" class ="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
        <property name ="realm" ref ="CustomRealm">
    </bean>
<!-- realm -->
    <bean id ="CustomRealm" class ="cn.dinggc.shiro.realm.CustomRealm">
    </beans>