我們在上面一篇文章中已經知道了如何自定義filters來重寫角色驗證，authc授權驗證等。

但是出現了filters無效的情況。

shiro  自定義filters無效

這種情況主要分成兩個原因

一是shiro本身的配置有問題，就是shiro未生效。

這種情況建議重新檢查一遍shiro的搭建。先不自定義filers。

參考連結:

二是攔截順序設定的有問題

大家注意到 

Shiro驗證URL時，URL匹配成功便不再繼續匹配查詢。

如果我們把/**放在其他/student/**前面，則只會進入/**的攔截，不會再進去/student/**的攔截了。

所以需要注意filterChainDefinitions中的順序,越仔細的路徑應該放在越前面。

/**=athuc尤其不能放在最前，否則就不會進roles的攔截了。

錯誤的順序

<property name="filterChainDefinitions">
			<value>
				/**/*.* = anon
				/login = anon
	                        /** = authc
				/student/** =roles["admin,normal,assistant"]
				/teacher/** =roles["admin,normal,assistant"]
				/class/** =roles["admin,normal,assistant"]
				/grade/** =roles["admin,normal"]
			</value>
		</property>
 

正確的攔截順序

	<property name="filterChainDefinitions">
			<value>
				/**/*.* = anon
				/login = anon
				/student/** =roles["admin,normal,assistant"]
				/teacher/** =roles["admin,normal,assistant"]
				/class/** =roles["admin,normal,assistant"]
				/grade/** =roles["admin,normal"]		
				/** = authc
			</value>
		</property>
 

完整shiro.xml

<?xml version="1.0" encoding="UTF-8"?>
<!-- ~ Licensed to the Apache Software Foundation (ASF) under one ~ or more 
	contributor license agreements. See the NOTICE file ~ distributed with this 
	work for additional information ~ regarding copyright ownership. The ASF 
	licenses this file ~ to you under the Apache License, Version 2.0 (the ~ 
	"License"); you may not use this file except in compliance ~ with the License. 
	You may obtain a copy of the License at ~ ~ http://www.apache.org/licenses/LICENSE-2.0 
	~ ~ Unless required by applicable law or agreed to in writing, ~ software 
	distributed under the License is distributed on an ~ "AS IS" BASIS, WITHOUT 
	WARRANTIES OR CONDITIONS OF ANY ~ KIND, either express or implied. See the 
	License for the ~ specific language governing permissions and limitations 
	~ under the License. -->
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="
       http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd">



	<bean id="mongoRealm" class="com.test.web.support.shiro.MyShiro">
		<property name="credentialsMatcher">
			<bean class="org.apache.shiro.authc.credential.SimpleCredentialsMatcher"></bean>
		</property>
		<property name="mongoTemplate" ref="mongoTemplate" />
	</bean>

	<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />


	

	<!-- securityManager -->
	<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
		<!-- <property name="cacheManager" ref="cacheManager" /> -->
		<!-- <property name="sessionManager" ref="sessionManager" /> -->
		<!-- Single realm app. If you have multiple realms, use the 'realms' property 
			instead. -->
		<property name="rememberMeManager">
			<bean class="org.apache.shiro.web.mgt.CookieRememberMeManager">
				<property name="cookie">
					<bean class="org.apache.shiro.web.servlet.SimpleCookie">
						<constructor-arg value="sid" />
						<!--設定Cookie名字，預設為JSESSIONID -->
						<property name="name" value="WEBSID" />
					</bean>
				</property>
			</bean>
		</property>
		<property name="realm" ref="mongoRealm" />
	</bean>


	<!-- shiroFilter -->
	<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean" >
		<property name="securityManager" ref="securityManager" />
		<property name="loginUrl" value="/login" />
		<property name="unauthorizedUrl" value="/403" />
		<property name="filters">
			<map>
			<entry key="authc">
					<bean
						class="com.test.web.support.shiro.AjaxCompatibleAuthenticationFilter"></bean>
				</entry>
			<entry key="roles">  
                    <bean  
                        class="com.test.web.support.shiro.CustomRolesAuthorizationFilter" />  
                </entry>  
			</map>
		</property>
		<property name="filterChainDefinitions">
			<value>
				/**/*.* = anon
				/login = anon
				/student/** =roles["admin,normal,assistant"]
				/teacher/** =roles["admin,normal,assistant"]
				/class/** =roles["admin,normal,assistant"]
				/grade/** =roles["admin,normal"]		
				/** = authc
			</value>
		</property>
	</bean>
</beans>