shiro自定义登陆和推出的过滤器，实现登陆之后根据条件跳转不同页面，推出登陆根据条件跳转不同页面

谁践踏了优雅 2022-05-18 05:51 245阅读 0赞

shiro中我们可以通过自定义过滤器的方式来实现自己想要的结果，比如想要登陆之后跳转不同页面

@Bean(name = "shiroFilter")
        public ShiroFilterFactoryBean getShiroFilterFactoryBean(DefaultWebSecurityManager securityManager,
                AuthenticationFilter authenticationFilter) {
            ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
    
            shiroFilterFactoryBean.setSecurityManager(securityManager);
    
            shiroFilterFactoryBean.setSuccessUrl("/");
            shiroFilterFactoryBean.setLoginUrl("/login");
            shiroFilterFactoryBean.setUnauthorizedUrl("/login");
            filterChainDefinitionMap.put("/login", "authc");
            filterChainDefinitionMap.put("/logout", "logout");
            filterChainDefinitionMap.put("/", "authc");
    
            Map<String, Filter> filtersMap = new LinkedHashMap<String, Filter>();
            filtersMap.put ("authc",new LoginFormAuthenticationFilter());//自定义登陆的过滤器
            filtersMap.put ("logout",new LogoutFormAuthenticationFilter());//自定义退出的过滤器
            shiroFilterFactoryBean.setFilters (filtersMap);
    
            shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
    
    
            return shiroFilterFactoryBean;
        }

上面这个配置我们可以看到，将login连接配置成登陆访问的连接，但我们进行登陆提交的时候会执行authc权限的过滤器也就是这段

filtersMap.put ("authc",new LoginFormAuthenticationFilter());//自定义登陆的过滤器

我们执行注销的时候就会执行下面这个过滤器

filtersMap.put ("logout",new LogoutFormAuthenticationFilter());//自定义退出的过滤器

现在我们看一下两个过滤器的写法

import com.yssoft.fs.business.comm.ShiroDbRealm;
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.subject.Subject;
    import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
    import org.apache.shiro.web.util.WebUtils;
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    
    import javax.servlet.ServletRequest;
    import javax.servlet.ServletResponse;
    import javax.servlet.http.HttpServletRequest;
    
    /** * 说明 * * @author chenyidong * @创建时间 2018-07-2018/7/30/030 19:50 * @copyright © 2018 */
    public class LoginFormAuthenticationFilter extends FormAuthenticationFilter { 
    
        private static Logger logger = LoggerFactory.getLogger(LoginFormAuthenticationFilter.class);
    
        @Override
        protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request,
                                         ServletResponse response) throws Exception {
    
            ShiroDbRealm.ShiroUser user = (ShiroDbRealm.ShiroUser) SecurityUtils.getSubject().getPrincipal();
    
            if(user != null) {
                HttpServletRequest req = (HttpServletRequest) request;
                String clientType = (String) req.getParameter("isPhone");
    
                logger.debug("[LOGIN]login success(user:" + user.loginName + ", client:" + clientType + ")");
    
                    if("null".equals (clientType) || null==clientType) { // 正常情况下跳转的页面 
                    return super.onLoginSuccess(token, subject, request, response);
                } else { // 根据类型跳转指定页面
    
                    WebUtils.getAndClearSavedRequest(request); // 清除登录前请求路径
    
                    req.getSession ().setAttribute ("isPhone","true");
                    //其他情况自己想要跳转的页面
                    String fallbackUrl = "/manager/service/list";
                    WebUtils.redirectToSavedRequest(request, response, fallbackUrl);
                }
            }
            return false;
        }
    
    
    }

import javax.servlet.ServletRequest;
    import javax.servlet.ServletResponse;
    import javax.servlet.http.HttpServletRequest;
    
    /** * 说明 * * @author chenyidong * @创建时间 2018-07-2018/7/30/030 19:59 * @copyright © 2018 */
    public class LogoutFormAuthenticationFilter extends LogoutFilter { 
        private static Logger logger = LoggerFactory.getLogger(LogoutFormAuthenticationFilter.class);
    
        @Override
        protected boolean preHandle (ServletRequest request, ServletResponse response) throws Exception {
            //return super.preHandle (request, response);
            Subject subject = getSubject(request, response);
            String redirectUrl = getRedirectUrl(request, response, subject);
            HttpServletRequest req = (HttpServletRequest) request;
            String clientType =  req.getSession().getAttribute ("isPhone")+"";//在前面登陆的过滤器中存储的数据，用来分辨是不是app登陆
            subject.logout();
            logger.debug("[LOGIN]logout success( client:" + clientType + ")");
            if(!"null".equals (clientType) && null!=clientType) { // 请求方为pc，执行原方法
                issueRedirect(request, response, "/app/login");
            }else{
                issueRedirect(request, response, "/login");
            }
            return false;
        }
    }

上面是登陆过滤器和注销过滤器代码，当然实现其他的功能和着两个过滤器同样配置，使用如下方式

Map<String, Filter> filtersMap = new LinkedHashMap<String, Filter>();
            filtersMap.put ("authc",new LoginFormAuthenticationFilter());//自定义登陆的过滤器
            filtersMap.put ("logout",new LogoutFormAuthenticationFilter());//自定义退出的过滤器
            shiroFilterFactoryBean.setFilters (filtersMap);
    
            shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);