爱华网在shrio与spring集成好了以后，调试源码的高人可能已经注意到。项目启动时，shrio通过自己的org.apache.shiro.spring.web.ShiroFilterFactoryBean类的filterChainDefinitions(授权规则定义)属性转换为一个filterChainDefinitionMap，转换完成后交给ShiroFilterFactoryBean保管。ShiroFilterFactoryBean根据授权（AuthorizationInfo类）后的信息去判断哪些链接能访问哪些链接不能访问。filterChainDefinitionMap里面的键就是链接URL,值就是存在什么条件才能访问该链接，如perms、roles。filterChainDefinitionMap是一个Map，shiro扩展出一个Map的子类Ini.Section
现在有一张表的描述实体类，以及数据访问:
@Entity
@Table(name="TB_RESOURCE")
publicclassResourceimplementsSerializable{
//主键id
@Id
privateStringid;
//actionurl
privateStringvalue;
//shiropermission;
privateStringpermission;
//------------------Getter/Setter---------------------//
}
@Repository
publicclassResourceDaoextendsBasicHibernateDao<Resource,String>{
}
通过该类可以知道permission字段和value就是filterChainDefinitionMap的键/值，用springFactoryBean接口的实现getObject()返回Section给filterChainDefinitionMap即可
publicclassChainDefinitionSectionMetaSourceimplementsFactoryBean<Ini.Section>{
@Autowired
privateResourceDaoresourceDao;
privateStringfilterChainDefinitions;
/**
*默认premission字符串
*/
publicstaticfinalStringPREMISSION_STRING="perms["{0}"]";
publicSectiongetObject()throwsBeansException{
//获取所有Resource
Listlist=resourceDao.getAll();
Iniini=newIni();
//加载默认的url
ini.load(filterChainDefinitions);
Ini.Sectionsection=ini.getSection(Ini.DEFAULT_SECTION_NAME);
//循环Resource的url,逐个添加到section中。section就是filterChainDefinitionMap,
//里面的键就是链接URL,值就是存在什么条件才能访问该链接
for(Iteratorit=list.iterator();it.hasNext();){
Resourceresource=it.next();
//如果不为空值添加到section中
if(StringUtils.isNotEmpty(resource.getValue())&&StringUtils.isNotEmpty(resource.getPermission())){
section.put(resource.getValue(),MessageFormat.format(PREMISSION_STRING,resource.getPermission()));
}
}
returnsection;
}
/**
*通过filterChainDefinitions对默认的url过滤定义
*
*@paramfilterChainDefinitions默认的url过滤定义
*/
publicvoidsetFilterChainDefinitions(StringfilterChainDefinitions){
this.filterChainDefinitions=filterChainDefinitions;
}
publicClass>getObjectType(){
returnthis.getClass();
}
publicbooleanisSingleton(){
returnfalse;
}
}
定义好了chainDefinitionSectionMetaSource后修改applicationContext-shiro.xml文件
<beanid="chainDefinitionSectionMetaSource">
<propertyname="filterChainDefinitions">
<value>
/login=authc
/logout=logout
/resource/**=anon
</value>
</property>
</bean>
<beanid="shiroSecurityFilter">
<propertyname="securityManager"ref="securityManager"/>
<propertyname="loginUrl"value="/login.jsp"/>
<propertyname="successUrl"value="/index.jsp"/>
<propertyname="unauthorizedUrl"value="/unauthorized.jsp"/>
<!--shiro连接约束配置,在这里使用自定义的动态获取资源类-->
<propertyname="filterChainDefinitionMap"ref="chainDefinitionSectionMetaSource"/>
</bean>
<beanid="securityManager">
</bean>
<beanid="lifecycleBeanPostProcessor"/>
