shiro 判断ajax是否通过身份验证

最新推荐文章于 2025-06-05 10:46:32 发布

yvan1115

最新推荐文章于 2025-06-05 10:46:32 发布

阅读量2.7k

点赞数

CC 4.0 BY-SA版权

分类专栏： shiro-spring-mvc整合 shiro-cas 文章标签： shiro ajax

本文链接：https://blog.youkuaiyun.com/upxiaofeng/article/details/77894184

shiro-spring-mvc整合同时被 2 个专栏收录

5 篇文章

订阅专栏

shiro-cas

5 篇文章

订阅专栏

本文介绍了一种在使用Shiro框架进行权限管理时，如何针对Ajax请求进行未授权响应处理的方法。通过重写RoleAuthorizationFilter类，实现了对于Ajax请求特定格式的响应返回，并对常规请求进行重定向。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

这篇文章主要是针对使用shiro后ajax请求判断是否经过验证的问题。

代码:

public class RoleAuthorizationFilter extends AuthenticationFilter {

    private static int bytes = 1024;
    private static int startByte = 0;
    private static int endByte = 0;

    /**
     * shiro 授权失败会进入此方法 判断是否是ajax请求
     */
    @Override
    protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        HttpServletResponse httpResponse = (HttpServletResponse) response;
        String serlvetPath = httpRequest.getServletPath();
        Subject subject = getSubject(request, response);
        if (subject.getPrincipal() == null) {
            // 这里判断是否为ajax请求且是以.do结尾的
            // 如果不是会走shiro默认的权限流程 
            if (isAjax(httpRequest) && serlvetPath.contains(".do")) {
                returnJsonResult(httpResponse, "您尚未登录或登录时间过长,请重新登录!");
            } else {
                saveRequestAndRedirectToLogin(request, response);

            }
        }
        return false;
    }

    private void returnJsonResult(HttpServletResponse httpResponse, String message) {
        httpResponse.setStatus(301);
        httpResponse.setHeader("Content-type", "application/json;charset=UTF-8");
        Result result = new Result();
        result.setCode(Const.FAIL);
        result.setMessage(message);
        Gson gson = new Gson();
        String jsonStr = gson.toJson(result);
        try {
            OutputStream os = httpResponse.getOutputStream();
            byte[] jsonByte = jsonStr.getBytes("UTF-8");
            int count = jsonByte.length;
            while (count > 0) {
                if (count < 1024) {
                    endByte = endByte + count;
                } else {
                    endByte = endByte + bytes;
                }
                os.write(jsonByte, startByte, endByte);
                startByte = endByte;
                count = count - bytes;
            }
        } catch (Exception e) {
        }

    }

    /**
     * 判断ajax请求
     * 
     * @param request
     * @return
     */
    private boolean isAjax(HttpServletRequest request) {
        return (request.getHeader("X-Requested-With") != null
                && "XMLHttpRequest".equals(request.getHeader("X-Requested-With").toString()));
    }

}