07、Shiro 实战：拦截器

一、简介：

在shiro中配置拦截器可以拦截客户端发送来的请求，并可以控制是对该请求进行认证还是放行。

二、shiro拦截器的特点

三、使用：

1、 自定义拦截器；

public class CustomAccessControlerFilter extends AccessControlFilter {
    @Override
    protected boolean isAccessAllowed(ServletRequest servletRequest, ServletResponse servletResponse, Object o) throws Exception {
        return false;
    }

    // 对需要被shiro拦截的请求进行拦截
    @Override
    protected boolean onAccessDenied(ServletRequest servletRequest, ServletResponse servletResponse) throws Exception {
        /* 里面可以写一些校验token的逻辑,返回true表示认证通过，返回false表示认证失败*/
       
        return true;
    }
}

2、 将自定义拦截器设置到shiro中；

/**
* shiro过滤器，配置拦截哪些请求
*/
@Bean
public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager){
    ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
    shiroFilterFactoryBean.setSecurityManager(securityManager);
    LinkedHashMap<String, Filter> filtersMap = new LinkedHashMap<>();
    //用来校验token
    filtersMap.put("token", new CustomAccessControlerFilter());
    shiroFilterFactoryBean.setFilters(filtersMap);
    Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
    // 配置不会被拦截的链接 顺序判断
    filterChainDefinitionMap.put("/api/user/login", "anon");
    filterChainDefinitionMap.put("/upload/image/**","anon");
    filterChainDefinitionMap.put("/index/**","anon");
    filterChainDefinitionMap.put("/login","anon");
    filterChainDefinitionMap.put("/register","anon");
    filterChainDefinitionMap.put("/images/**", "anon");
    filterChainDefinitionMap.put("/js/**", "anon");
    filterChainDefinitionMap.put("/layui/**", "anon");
    filterChainDefinitionMap.put("/css/**", "anon");
    filterChainDefinitionMap.put("/treetable-lay/**", "anon");
    filterChainDefinitionMap.put("/api/user/token", "anon");
    //放开swagger-ui地址
    filterChainDefinitionMap.put("/swagger/**", "anon");
    filterChainDefinitionMap.put("/v2/api-docs", "anon");
    filterChainDefinitionMap.put("/swagger-ui.html", "anon");
    filterChainDefinitionMap.put("/swagger-resources/**", "anon");
    filterChainDefinitionMap.put("/webjars/**", "anon");
    filterChainDefinitionMap.put("/druid/**", "anon");
    filterChainDefinitionMap.put("/favicon.ico", "anon");
    filterChainDefinitionMap.put("/captcha.jpg", "anon");
    filterChainDefinitionMap.put("/","anon");
    filterChainDefinitionMap.put("/csrf","anon");
    filterChainDefinitionMap.put("/**","token,authc");
    shiroFilterFactoryBean.setLoginUrl("/api/user/login");
shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
    return shiroFilterFactoryBean;
}