shiro ajax请求返回json,springboot+shiro 02 - 异步ajax请求无权限时，返回json格式数据...

博客: https://www.cnblogs.com/youxiu326/p/shiro-01.html

github:https://github.com/youxiu326/sb_shiro_session.git

在原有基础上添加 SimpleFormAuthenticationFilter

/**

* 自定义过滤器，ajax请求数据 以json格式返回

* Created by lihui on 2019/2/28.

*/

public class SimpleFormAuthenticationFilter extends FormAuthenticationFilter {

private static final Logger log = LoggerFactory.getLogger(SimpleFormAuthenticationFilter.class);

@Override

protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {

if (isLoginRequest(request, response)) {

if (isLoginSubmission(request, response)) {

if (log.isTraceEnabled()) {

log.trace("Login submission detected. Attempting to execute login.");

}

return executeLogin(request, response);

} else {

if (log.isTraceEnabled()) {

log.trace("Login page view.");

}

return true;

}

} else {

HttpServletRequest httpRequest = WebUtils.toHttp(request);

if (isAjax(httpRequest)) {

HttpServletResponse httpServletResponse = WebUtils.toHttp(response);

httpServletResponse.sendError(401);

return false;

} else {

if (log.isTraceEnabled()) {

log.trace("Attempting to access a path which requires authentication. Forwarding to the " +

"Authentication url [" + getLoginUrl() + "]");

}

saveRequestAndRedirectToLogin(request, response);

}

return false;

}

}

/*

* 判断ajax请求

* @param request

* @return

*/

boolean isAjax(HttpServletRequest request){

return (request.getHeader("X-Requested-With") != null && "XMLHttpRequest".equals( request.getHeader("X-Requested-With").toString()) ) ;

}

}

在ShiroConfig中添加一行

shiroFilterFactoryBean.getFilters().put("authc", new SimpleFormAuthenticationFilter());

login.html 修改

没有添加 SimpleFormAuthenticationFilter 之前

添加SimpleFormAuthenticationFilter 之后 返回了自定义错误状态码401