Shiro.xml configuration file

<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
	<property name="securityManager" ref="securityManager" />
	<property name="loginUrl" value="/web/signon/unauthenticated" />
	<property name="filterChainDefinitions">
		<value>
			/web/signon/**=anon
			/web/security/**=anon
			/web/monitor/**=anon
			/**=user
		</value>
	</property>
</bean>
Copy the code

All requests will be based on the filter to filter, the entry is org.. Apache shiro. Web. Servlet. AbstractShiroFilter# doFilterInternal

The configuration file is configured with / * * = user said use UserFilter filter org.. Apache shiro. Web. Filter. Authc. UserFilter# isAccessAllowed