springMVC集成shiro權限認證框架，登錄之后退出登錄出現登錄不上的問題

有兩種解決方式：

1.在web.xml文件配置一段歡迎頁面：

<welcome-file-list>
    <welcome-file>/index.do</welcome-file>     
 </welcome-file-list>

 

 2.在自定義表單過濾器MyFormAuthenticationFilter里，添加清除shiro 在sesion存儲的上一次訪問地址 shiroSavedReques 

 

package cn.zj.logistic.shiro;

import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;

import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
import org.apache.shiro.web.util.WebUtils;

public class MyFormAuthenticationFilter extends FormAuthenticationFilter {

    @Override
    protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {

        HttpServletRequest req = (HttpServletRequest) request;

        // 1.獲取前台表單提交的驗證碼
        String verifyCode = req.getParameter("verifyCode");

        
        
        String rand = (String) req.getSession().getAttribute("rand");

        System.out.println("rand :" + rand);

        if (StringUtils.isNotBlank(verifyCode)) {
            if (!verifyCode.equals(rand.toLowerCase())) {
                // 共享一個錯誤信息到 shiroLoginFailure
                request.setAttribute("shiroLoginFailure", "verifyCodeError");

                // 返回true，shiro就不再進行下一操作（數據庫認證）了，直接返回了
                return true;
            }
        }

        return super.onAccessDenied(request, response);
    }

    @Override
    protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request,
            ServletResponse response) throws Exception {
                
    
        // 1.獲取sesssion
        Session session = subject.getSession(false);
        if (session != null) {
            // 清除shiro共享的上一次地址 ://shiroSavedRequest
            session.removeAttribute(WebUtils.SAVED_REQUEST_KEY);
        }

        return super.onLoginSuccess(token, subject, request, response);
    }

}