Shiro logout 302重定向，shiro 302解決方案

 

================================

©Copyright 蕃薯耀 2022-04-09

https://www.cnblogs.com/fanshuyao/

 

一、問題描述

當登錄退出為Ajax請求時，使用Shiro的logout退出登錄，會發生302重定向，導致不能正常退出。

 

 

二、解決方案

 

1、重寫LogoutFilter 過濾器

 
import java.util.Locale;
 
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
 
import org.apache.shiro.session.SessionException;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.web.filter.authc.LogoutFilter;
import org.apache.shiro.web.util.WebUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
 
import com.lqy.shiro.bean.Result;
import com.lqy.shiro.utils.RequestUtils;
 
/**
 * 重寫shiro logout邏輯，避免是Ajax請求發生302重定向問題
 * @author islee
 *
 */
public class ShiroLogoutFilter extends LogoutFilter {
 
    private static final Logger log = LoggerFactory.getLogger(ShiroLogoutFilter.class);
    
    @Override
    protected boolean preHandle(ServletRequest request, ServletResponse response) throws Exception {
 
        HttpServletRequest req = (HttpServletRequest) request;
        HttpServletResponse res = (HttpServletResponse) response;
        
        Subject subject = getSubject(request, response);
 
        // Check if POST only logout is enabled
        if (isPostOnlyLogout()) {
 
            // check if the current request's method is a POST, if not redirect
            if (!WebUtils.toHttp(request).getMethod().toUpperCase(Locale.ENGLISH).equals("POST")) {
               return onLogoutRequestNotAPost(request, response);
            }
        }
 
        String redirectUrl = getRedirectUrl(request, response, subject);
        
        try {
            subject.logout();
            
        } catch (SessionException ise) {
            
            log.debug("Encountered session exception during logout.  This can generally safely be ignored.", ise);
        }
        
        if(RequestUtils.isAjaxOrJsonRequest(req)) {
            RequestUtils.write(res, Result.ok("退出登錄"));
            
        }else {
            issueRedirect(request, response, redirectUrl);
        }
        
        return false;
    }
    
}

 

 

核心代碼是：

if(RequestUtils.isAjaxOrJsonRequest(req)) {
    RequestUtils.write(res, Result.ok("退出登錄"));
            
}else {
    issueRedirect(request, response, redirectUrl);
}

判斷是否為Ajax請求或者是Json請求，如果是，返回json字符串，否則默認進行登錄跳轉，即302重定向。

 

 

2、配置LogoutFilter 過濾器（ShiroLogoutFilter）

    @Bean
    public ShiroFilterFactoryBean shiroFilterFactoryBean () {
        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
        
        
        //自定義過濾器
        LinkedHashMap<String, Filter> filtsMap=new LinkedHashMap<String, Filter>();
        filtsMap.put("logout",new ShiroLogoutFilter() );
        
        shiroFilterFactoryBean.setFilters(filtsMap);
        
        
        return shiroFilterFactoryBean;
    }

 

 

 

（時間寶貴，分享不易，捐贈回饋，^_^）

 

================================

©Copyright 蕃薯耀 2022-04-09

https://www.cnblogs.com/fanshuyao/