測試Shiro過濾器和DispatcherServlet的調用順序

web.xml

 <filter>
        <filter-name>shiroFilter</filter-name>
        <filter-class>
            org.springframework.web.filter.DelegatingFilterProxy
        </filter-class>
    </filter>
    <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/shiro/*</url-pattern>
    </filter-mapping>

 

applicationContext.xml

 <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
        <property name="securityManager" ref="securityManager"/>
        <!-- override these for application-specific URLs if you like:
        <property name="loginUrl" value="/login.jsp"/>
        <property name="successUrl" value="/home.jsp"/>
        <property name="unauthorizedUrl" value="/unauthorized.jsp"/> -->
        <!-- The 'filters' property is not necessary since any declared javax.servlet.Filter bean  -->
        <!-- defined will be automatically acquired and available via its beanName in chain        -->
        <!-- definitions, but you can perform instance overrides or name aliases here if you like: -->
        <!-- <property name="filters">
            <util:map>
                <entry key="anAlias" value-ref="someFilter"/>
            </util:map>
        </property> -->
        <property name="filterChainDefinitions">
            <value>
                # some example chain definitions:
                /admin/** = authc, roles[admin]
                /docs/** = authc, perms[document:read]
                /shiro/** = authc
                # more URL-to-FilterChain definitions here
            </value>
        </property>
    </bean>

 

測試url:  /shiro/test

結果： shiroFilter - 》DispatcherServlet

 

測試url:  /other/test

結果： DispatcherServlet 

 

結論：當請的url能被shiro過濾器匹配到時，先走shiro過濾器，再走DispatcherServlet ；

　　   否則只走DispatcherServlet。