SpringBoot|SpringBoot 使用Shiro权限框架自定义拦截器检查token失效 SpringBoot使用Shiro权限框架自定

创建一个类，继承自UserFilter，实现OnAccessDenied函数即可。

package io.tenglu.modules.sys.shiro; import org.apache.shiro.web.filter.authc.UserFilter; import org.apache.shiro.web.servlet.ShiroHttpServletRequest; import org.springframework.stereotype.Component; import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; import javax.servlet.http.Cookie; import javax.servlet.http.HttpSession; @Component public class SessionCheckFilter extends UserFilter {@Override protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception { ShiroHttpServletRequest rrr = (ShiroHttpServletRequest)request; String s = rrr.getRequestURI(); HttpSession session = rrr.getSession(); Long t1 = session.getCreationTime(); String userAgent = rrr.getHeader("User-Agent"); String sid = session.getId(); String a = rrr.getRequestedSessionId(); String b = rrr.getQueryString(); String c = rrr.getPathInfo(); Cookie d[] = rrr.getCookies(); //是APP访问 if (userAgent.indexOf("Android-APP") >= 0 || userAgent.indexOf("IOS-APP") >= 0) {response.getWriter().write("{\"code\":\"101\",\"message\":\"token已失效，请重新登录\"}"); response.getWriter().flush(); response.getWriter().close(); } else {//是Web访问 super.redirectToLogin (request, response); //super.isLoginRequest(request,response) }return false; }}

添加过滤器到 setFilterChainDefinitionMap 中，系统访问时，如果session失效，访问被拒绝，则会被自定义的过滤器进行拦截。

@Bean("shiroFilter") public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) { ShiroFilterFactoryBean shiroFilter = new ShiroFilterFactoryBean(); shiroFilter.setSecurityManager(securityManager); SessionCheckFilter sessionCheckFilter = new SessionCheckFilter(); Map cumstomfilterMap = new HashMap<>(); //map里面key值要为authc才能使用自定义的过滤器 cumstomfilterMap.put("user", sessionCheckFilter); shiroFilter.setLoginUrl("/login.html"); shiroFilter.setUnauthorizedUrl("/login.html"); Map filterMap = new LinkedHashMap<>(); filterMap.put("/swagger/**", "anon"); filterMap.put("/v2/api-docs", "anon"); filterMap.put("/swagger-ui.html", "anon"); filterMap.put("/webjars/**", "anon"); filterMap.put("/swagger-resources/**", "anon"); filterMap.put("/statics/**", "anon"); filterMap.put("/login.html", "anon"); filterMap.put("/sys/login", "anon"); filterMap.put("/sys/logoinfo","anon"); filterMap.put("/app/login", "anon"); filterMap.put("/app/logout", "anon"); filterMap.put("/app/getCaptcha", "anon"); filterMap.put("/favicon.ico", "anon"); filterMap.put("/captcha.jpg", "anon"); filterMap.put("/**", "user"); shiroFilter.setFilterChainDefinitionMap(filterMap); shiroFilter.setFilters(cumstomfilterMap); return shiroFilter; }

【SpringBoot|SpringBoot 使用Shiro权限框架自定义拦截器检查token失效】