shiro （八） spring结合 --自定义过滤器（角色篇）

 

package com.miv.shiro.common;

 

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

 

import org.apache.shiro.SecurityUtils;

import org.apache.shiro.subject.Subject;

import org.apache.shiro.web.filter.authz.AuthorizationFilter;

 

public class MIVshiroFilter extends AuthorizationFilter {

 

    @Override

    protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object weaving)

            throws Exception {

        // TODO Auto-generated method stub

        Subject subject = SecurityUtils.getSubject();

 

        String[] weaving_ = (String[]) weaving;

 

        String[] rolesArray = weaving_[0].split(",");

 

        if (rolesArray == null || rolesArray.length == 0) {

            return true;

        }

        for (int i = 0; i < rolesArray.length; i++) {

            if (subject.hasRole(rolesArray[i])) {

                return true;

            }

        }

        if (subject.isAuthenticated()) {// 认证

            // subject.getSession().;

            // ((HttpServletRequest) request).getSession().invalidate();

            subject.logout();

        } else if (subject.isRemembered()) {// 记住我

            subject.logout();

            // ((HttpServletRequest) request).getSession().invalidate();

        } else {// 其他

 

        }

        subject.getSession().setAttribute("role_code", rolesArray);

        return false;

    }

}