最近在使用springboot專案中整合shiro做登入以及許可權驗證，整合的過程中，我自己在shiro的配置類ShiroConfig中配置了登入成功後的跳轉路徑，如下圖：

然而當我成功登入時卻沒有跳轉到我指定的頁面，經過查詢相關資料，發現是authc（即FormAuthenticationFilter）攔截器的問題，分析FormAuthenticationFilter中成功登入部分的原始碼：

protectedbooleanonLoginSuccess(AuthenticationToken token, Subject subject,
                                     ServletRequest request, ServletResponse response)
 
throws Exception {
        issueSuccessRedirect(request, response);
        //we handled the success redirect directly, prevent the chain from continuing:
        return false;
    }

登入成功後會執行：

protectedvoidissueSuccessRedirect(ServletRequest request, ServletResponse response)throws Exception {
        WebUtils.redirectToSavedRequest(request, response, getSuccessUrl());
    }
 

該方法具體程式碼如下：

   publicstaticvoidredirectToSavedRequest(ServletRequest request, ServletResponse response, String fallbackUrl)throws IOException {
        String successUrl = null;
        boolean contextRelative = true;
        SavedRequest savedRequest = WebUtils.getAndClearSavedRequest(request);
        if
 
 (savedRequest != null && savedRequest.getMethod().equalsIgnoreCase(AccessControlFilter.GET_METHOD)) {
            successUrl = savedRequest.getRequestUrl();
            contextRelative = false;
        }

        if (successUrl == null) {
            successUrl = fallbackUrl;
        }

        if (successUrl == null) {
            throw new IllegalStateException("Success URL not available via saved request or via the " +
                    "successUrlFallback method parameter. One of these must be non-null for " +
                    "issueSuccessRedirect() to work.");
        }

        WebUtils.issueRedirect(request, response, successUrl, null, contextRelative);
    }

這裡可以看到successUrl = savedRequest.getRequestUrl()，會把successUrl重新賦值，配置的/home失效，所以即使配置了successUrl也不能跳轉。

解決方法：寫一個攔截器繼承FormAuthenticationFilter，重寫onLoginSucess方法，程式碼如下：

public classMyFormAuthenticationFilterextendsFormAuthenticationFilter{
    @Override
    protectedbooleanonLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, ServletResponse response)throws Exception {
        String successUrl = "/home";
        WebUtils.issueRedirect(request,response,successUrl);
        return false;
    }
}

然後在shiro的配置類中加入該攔截器即可，如下圖所示：

如此，此問題解決