shiro中我們可以通過自定義過濾器的方式來實現自己想要的結果，比如想要登陸之後跳轉不同頁面

@Bean(name = "shiroFilter")
    public ShiroFilterFactoryBean getShiroFilterFactoryBean(DefaultWebSecurityManager securityManager,
            AuthenticationFilter authenticationFilter) {
        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();

        shiroFilterFactoryBean.setSecurityManager(securityManager);

        shiroFilterFactoryBean.setSuccessUrl("/"
 
);
        shiroFilterFactoryBean.setLoginUrl("/login");
        shiroFilterFactoryBean.setUnauthorizedUrl("/login");
        filterChainDefinitionMap.put("/login", "authc");
        filterChainDefinitionMap.put("/logout", "logout");
        filterChainDefinitionMap.put("/", "authc");

        Map<String, Filter> filtersMap = new
 
 LinkedHashMap<String, Filter>();
        filtersMap.put ("authc",new LoginFormAuthenticationFilter());//自定義登陸的過濾器
        filtersMap.put ("logout",new LogoutFormAuthenticationFilter());//自定義退出的過濾器
        shiroFilterFactoryBean.setFilters (filtersMap);

        shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);


        return
 
 shiroFilterFactoryBean;
    }

上面這個配置我們可以看到，將login連線配置成登陸訪問的連線，但我們進行登陸提交的時候會執行authc許可權的過濾器也就是這段

  filtersMap.put ("authc",new LoginFormAuthenticationFilter());//自定義登陸的過濾器

我們執行登出的時候就會執行下面這個過濾器

   filtersMap.put ("logout",new LogoutFormAuthenticationFilter());//自定義退出的過濾器

現在我們看一下兩個過濾器的寫法

import com.yssoft.fs.business.comm.ShiroDbRealm;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
import org.apache.shiro.web.util.WebUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;

/**
 * 說明
 *
 * @author chenyidong
 * @建立時間 2018-07-2018/7/30/030 19:50
 * @copyright © 2018
 */
public class LoginFormAuthenticationFilter extends FormAuthenticationFilter {

    private static Logger logger = LoggerFactory.getLogger(LoginFormAuthenticationFilter.class);

    @Override
    protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request,
                                     ServletResponse response) throws Exception {

        ShiroDbRealm.ShiroUser user = (ShiroDbRealm.ShiroUser) SecurityUtils.getSubject().getPrincipal();

        if(user != null) {
            HttpServletRequest req = (HttpServletRequest) request;
            String clientType = (String) req.getParameter("isPhone");

            logger.debug("[LOGIN]login success(user:" + user.loginName + ", client:" + clientType + ")");

                if("null".equals (clientType) || null==clientType) { // 正常情況下跳轉的頁面    
                return super.onLoginSuccess(token, subject, request, response);
            } else { // 根據型別跳轉指定頁面

                WebUtils.getAndClearSavedRequest(request); // 清除登入前請求路徑

                req.getSession ().setAttribute ("isPhone","true");
                //其他情況自己想要跳轉的頁面
                String fallbackUrl = "/manager/service/list";
                WebUtils.redirectToSavedRequest(request, response, fallbackUrl);
            }
        }
        return false;
    }


}

import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;

/**
 * 說明
 *
 * @author chenyidong
 * @建立時間 2018-07-2018/7/30/030 19:59
 * @copyright © 2018
 */
public class LogoutFormAuthenticationFilter extends LogoutFilter {
    private static Logger logger = LoggerFactory.getLogger(LogoutFormAuthenticationFilter.class);

    @Override
    protected boolean preHandle (ServletRequest request, ServletResponse response) throws Exception {
        //return super.preHandle (request, response);
        Subject subject = getSubject(request, response);
        String redirectUrl = getRedirectUrl(request, response, subject);
        HttpServletRequest req = (HttpServletRequest) request;
        String clientType =  req.getSession().getAttribute ("isPhone")+"";//在前面登陸的過濾器中儲存的資料，用來分辨是不是app登陸
        subject.logout();
        logger.debug("[LOGIN]logout success( client:" + clientType + ")");
        if(!"null".equals (clientType) && null!=clientType) { // 請求方為pc，執行原方法
            issueRedirect(request, response, "/app/login");
        }else{
            issueRedirect(request, response, "/login");
        }
        return false;
    }
}

上面是登陸過濾器和登出過濾器程式碼，當然實現其他的功能和著兩個過濾器同樣配置，使用如下方式

  Map<String, Filter> filtersMap = new LinkedHashMap<String, Filter>();
        filtersMap.put ("authc",new LoginFormAuthenticationFilter());//自定義登陸的過濾器
        filtersMap.put ("logout",new LogoutFormAuthenticationFilter());//自定義退出的過濾器
        shiroFilterFactoryBean.setFilters (filtersMap);

        shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);