我想实现shiro rememberMe之后,再次访问后自动登录并把一些用户信息再存入session
我现在是按照http://blog.csdn.net/Q_AN1314...这篇文章,写了一个过滤器,但是在过滤器里获取subject时出现错误
org.apache.shiro.UnavailableSecurityManagerException: No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton. This is an invalid application configuration.
这是过滤器
public class AddPrincipalToSessionFilter extends OncePerRequestFilter {
@Resource
private ManagerService managerService;
@Override
protected void doFilterInternal(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws ServletException, IOException {
Subject subject = SecurityUtils.getSubject();
if (subject.isRemembered()) {
String principal = (String) subject.getPrincipal();
Manager manager = managerService.queryManager(principal);
//将用户信息存入session
ContextHelper.saveLoginUserInfoToSeesion(manager);
}
filterChain.doFilter(servletRequest, servletResponse);
}
}
这是shiroFilter
@Bean
@Autowired
public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {
ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
// 必须设置 SecurityManager
shiroFilterFactoryBean.setSecurityManager(securityManager);
Map<String, Filter> filters = shiroFilterFactoryBean.getFilters();//获取filters
filters.put("authc", new CustomFormAuthenticationFilter());//验证码过滤器
filters.put("addPrincipal", addPrincipalToSessionFilter());//rememberMe存session过滤器
//拦截器.
Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
//配置退出过滤器,其中的具体的退出代码Shiro已经替我们实现了
filterChainDefinitionMap.put("/logout", "logout");
filterChainDefinitionMap.put("/favicon.ico", "anon");
filterChainDefinitionMap.put("/js/**", "anon");
filterChainDefinitionMap.put("/css/**", "anon");
filterChainDefinitionMap.put("/img/**", "anon");
filterChainDefinitionMap.put("/fonts/**", "anon");
filterChainDefinitionMap.put("/icons/**", "anon");
filterChainDefinitionMap.put("/error/**", "anon");
filterChainDefinitionMap.put("/validateCode", "anon");
//配置记住我或认证通过可以访问的地址
filterChainDefinitionMap.put("/", "addPrincipal,user");
filterChainDefinitionMap.put("/index", "addPrincipal,user");
filterChainDefinitionMap.put("/index.html", "addPrincipal,user");
//<!-- 过滤链定义,从上向下顺序执行,一般将 /**放在最为下边
//<!-- authc:所有url都必须认证通过才可以访问; anon:所有url都都可以匿名访问-->
filterChainDefinitionMap.put("/**", "authc");
shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
// 如果不设置默认会自动寻找Web工程根目录下的"/login.jsp"页面
shiroFilterFactoryBean.setLoginUrl("/login.html");
// 登录成功后要跳转的链接
shiroFilterFactoryBean.setSuccessUrl("/index.html");
// 未授权要跳转的链接
shiroFilterFactoryBean.setUnauthorizedUrl("/error/403");
return shiroFilterFactoryBean;
}
}
请问一下大家这是怎么回事?或者大家有什么更好的实现方法请指教一下
Selesai
1. Suntikan kacang ini mestilah di bawah shiroFilter
2.pengguna hendaklah ditulis di hadapan addPrincipal
filterChainDefinitionMap.put("/", "user,addPrincipal");