1、shiro 支持的注解
@RequiresAuthentication
@RequiresPermissions
@RequiresRoles
@RequiresUser
@RequiresGuest
在方法上加上上述的 shiro annotations,用 AOP 的知识可以理解成:定义了 Pointcut
。
2、Enabling Shiro Annotations
Requires Shiro’s Spring AOP
integration to scan
for the appropriate annotated classes.
<!-- Enable Shiro Annotations for Spring-configured beans. Only run after -->
<!-- the lifecycleBeanProcessor has run: -->
<bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor"/>
<bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
<property name="securityManager" ref="securityManager"/>
</bean>