shiro登录实现自定义路径跳转

一、实现需求

登录框架采用shiro，需根据不同客户端类型实现相对应定义页面跳转。

二、登录页jsp表单

    <div class="input-prepend" title="Username" data-rel="tooltip">
    <span class="add-on"><i class="icon-user"></i></span>    <input type="text" id="username" name="username"  value="${username}" class="input-medium required"/>
    </div>
    <div class="clearfix"></div>

    <div class="input-prepend" title="Password" data-rel="tooltip">
    <span class="add-on"><i class="icon-lock"></i></span><input type="password" id="password" name="password" class="input-medium required"/>
    </div>
    <div class="clearfix"></div>

    <div><input type="hidden" id="clienttype" name="clienttype" value="pc"/></div>

    <div class="input-prepend">
    <label class="checkbox" for="rememberMe"><input type="checkbox" id="rememberMe" name="rememberMe"/> 记住我<a  href="${ctx}/register">注册</a></label>
    </div>
    <div class="clearfix"></div>

    <p class="center span5">
    <button type="submit" class="btn btn-primary">登录</button>
    </p>

三、自定义过滤器类

创建自定义过滤器LoginFormAuthenticationFilter，继承FormAuthenticationFilter。然后通过重写onLoginSuccess方法与WebUtils工具类，实现自定义跳转。

　

 public class LoginFormAuthenticationFilter extends FormAuthenticationFilter {

     private static Logger logger = LoggerFactory.getLogger(LoginFormAuthenticationFilter.class);

     @Override
     protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request,
             ServletResponse response) throws Exception {

         ShiroUser user = (ShiroUser) SecurityUtils.getSubject().getPrincipal();

         if(user != null) {
             HttpServletRequest req = (HttpServletRequest) request;
             String clientType = (String) req.getParameter("clienttype");
             logger.debug("[LOGIN]login success(user:" + user.loginName + ", client:" + clientType + ")");
             if("pc".equals(clientType)) { // 请求方为pc，执行原方法
                 return super.onLoginSuccess(token, subject, request, response);
             } else { // 其他，根据类型跳转指定页面
                 WebUtils.getAndClearSavedRequest(request); // 清除登录前请求路径
                 String fallbackUrl = null;
                 fallbackUrl = "/static/" + clientType + ".jsp"; // 自定义跳转界面
                 WebUtils.redirectToSavedRequest(request, response, fallbackUrl);
             }
         }
         return false;
     }
 }

四、修改shiro配置文件

在applicationContext-shiro.xml中配置自定义过滤器。

首先，修改beans元素属性；

xmlns:util=http://www.springframework.org/schema/util

xsi:schemaLocation:

http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-2.0.xsd

其次，修改shiroFilter内容，添加自定义过滤器属性。

     <!-- 请求分发过滤器 -->
     <bean id="loginDispacher" class="cn.com.mcfly.web.filter.LoginFormAuthenticationFilter"/>
     <!-- Shiro Filter -->
     <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
         <property name="securityManager" ref="securityManager" />
         <property name="loginUrl" value="/login" />
         <property name="filters">
             <util:map>
                 <entry key="authc" value-ref="loginDispacher"/>
             </util:map>
         </property>
         <!--<property name="successUrl" value="/" />-->
         <property name="filterChainDefinitions">
             <value>
                 /static/** = anon
                 /login = authc
                 /logout = logout
                 ...
                 /** = user
             </value>
         </property>
     </bean>