spring集成shiro

1,配置web.xml

<filter>
  <filter-name>shiroFilter</filter-name>
  <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
  <init-param>
    <param-name>targetFilterLifecycle</param-name>
    <param-value>true</param-value>
  </init-param>
</filter>

<filter-mapping>
  <filter-name>shiroFilter</filter-name>
  <url-pattern>/*</url-pattern>
</filter-mapping>

2,shiro 配置文件

 <!--配置SecurityManager-->
 <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
     <property name="authenticator" ref="authenticator"></property>
     <property name="realms">
         <list>
             <ref bean="securityRealm"></ref>
         </list>
     </property>
 </bean>
 <!--配置realm-->
 <bean id="securityRealm" class="com.ali.pims.realms.ShiroRealm">
     <property name="credentialsMatcher">
         <bean class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
             <!--md5加密-->
             <property name="hashAlgorithmName" value="MD5"></property>
             <!--加密次数-->
             <property name="hashIterations" value="2"></property>
         </bean>
     </property>
 </bean>
 <!--认证器-->
 <bean id="authenticator"
       class="org.apache.shiro.authc.pam.ModularRealmAuthenticator">
     <property name="authenticationStrategy">
         <bean class="org.apache.shiro.authc.pam.AtLeastOneSuccessfulStrategy"></bean>
     </property>
 </bean>
<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
 <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"
       depends-on="lifecycleBeanPostProcessor"/>
 <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
     <property name="securityManager" ref="securityManager"/>
 </bean>
 <!--ShiroFilter配置-->
 <!--
      anon 可以直接访问
     authc 登录认证访问
     anon 登出
 -->
 <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
     <property name="securityManager" ref="securityManager"/>
     <property name="loginUrl" value="/login.jsp"/>
     <property name="successUrl" value="/list.jsp"/>
     <property name="unauthorizedUrl" value="/unauthorized.jsp"/>
     <property name="filterChainDefinitions">
         <value>
             /login.jsp = anon
             /login = anon
             /logout = logout
             /** = authc
         </value>
     </property>
 </bean>