Apache Shiro Web应用过滤器

叁歲伎倆 2022-04-14 02:39 283阅读 0赞

Shiro中一些默认的过滤器：

<table style="border-collapse:collapse;"> 
 <tbody> 
 <tr> 
 <td style="width:101.15pt;"> Filter&nbsp;Name </td> 
 <td> Class </td> 
 </tr> 
 <tr> 
 <td> anon </td> 
 <td> org.apache.shiro.web.filter.authc.AnonymousFilter </td> 
 </tr> 
 <tr> 
 <td> authc </td> 
 <td> org.apache.shiro.web.filter.authc.FormAuthenticationFilter </td> 
 </tr> 
 <tr> 
 <td> authcBasic </td> 
 <td> org.apache.shiro.web.filter.authc.BasicHttpAuthenticationFilter </td> 
 </tr> 
 <tr> 
 <td> logout </td> 
 <td> org.apache.shiro.web.filter.authc.LogoutFilter </td> 
 </tr> 
 <tr> 
 <td> noSessionCreation </td> 
 <td> org.apache.shiro.web.filter.session.NoSessionCreationFilter </td> 
 </tr> 
 <tr> 
 <td> perms </td> 
 <td> org.apache.shiro.web.filter.authz.PermissionsAuthorizationFilter </td> 
 </tr> 
 <tr> 
 <td> port </td> 
 <td> org.apache.shiro.web.filter.authz.PortFilter </td> 
 </tr> 
 <tr> 
 <td> rest </td> 
 <td> org.apache.shiro.web.filter.authz.HttpMethodPermissionFilter </td> 
 </tr> 
 <tr> 
 <td> roles </td> 
 <td> org.apache.shiro.web.filter.authz.RolesAuthorizationFilter </td> 
 </tr> 
 <tr> 
 <td> ssl </td> 
 <td> org.apache.shiro.web.filter.authz.SslFilter </td> 
 </tr> 
 <tr> 
 <td> user </td> 
 <td> org.apache.shiro.web.filter.authc.UserFilter </td> 
 </tr> 
 </tbody> 
</table>

一般为所有的请求启用或禁用一个过滤器是通过设置其enabled 属性为true 或false。默认的设置是true， 因为 如果他们被配置在一个过滤器链中则本质上是需要执行的。禁用过滤器的例子如下：

<table style="border-collapse:collapse;"> 
 <tbody> 
 <tr> 
 <td style="width:426.1pt;"> [main] … #&nbsp;configure&nbsp;Shiro's&nbsp;default&nbsp;'ssl'&nbsp;filter&nbsp;to&nbsp;be&nbsp;disabled&nbsp;while&nbsp;testing: ssl.enabled&nbsp;=&nbsp;false [urls] … /some/path&nbsp;=&nbsp;ssl,&nbsp;authc /another/path&nbsp;=&nbsp;ssl,&nbsp;roles[admin] … </td> 
 </tr> 
 </tbody> 
</table>