merge

boot-web/src/main/java/com/xwbing/shiro/MyShiroRealm.java

@@ -36,7 +36,7 @@ public class MyShiroRealm extends AuthorizingRealm {
     private SysRoleService sysRoleService;
 
     /**
-     * 授权用户权限
+     * 授权用户权限(授权)
      *
      * @param principals
      * @return
@@ -68,7 +68,7 @@ public class MyShiroRealm extends AuthorizingRealm {
     }
 
     /**
-     * 验证用户身份
+     * 验证用户身份(认证)
      *
      * @param authenticationToken
      * @return

boot-web/src/main/java/com/xwbing/shiro/ShiroConfig.java

@@ -35,10 +35,10 @@ public class ShiroConfig {
     public ShiroFilterFactoryBean shiroFilter() {
         ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
         shiroFilterFactoryBean.setSecurityManager(securityManager());
-        //配置访问权限
-        Map<String, String> chains = new LinkedHashMap<>();
-        shiroFilterFactoryBean.setLoginUrl("/user/login");
+        //如果不设置默认会自动寻找Web工程根目录下的"/login.jsp"页面
+        shiroFilterFactoryBean.setLoginUrl("/login.html");
         shiroFilterFactoryBean.setSuccessUrl("/doc");
+        Map<String, String> chains = new LinkedHashMap<>();
         //静态资源
         chains.put("/META-INF/resources/**", "anon");
         chains.put("/resources/**", "anon");
@@ -57,6 +57,8 @@ public class ShiroConfig {
         //德鲁伊数据源
         chains.put("/druid/*", "anon");
         chains.put("/druid", "anon");
+        //登录校验
+        chains.put("/user/login", "anon");
         //权限认证路径
         chains.put("/**", "authc");
         shiroFilterFactoryBean.setFilterChainDefinitionMap(chains);

boot-web/src/main/resources/static/login.html

@@ -5,6 +5,6 @@
 	<title>Welcome to the world</title>
 </head>
 <body>
-<h2>Hello World!</h2>
+<h2>welcome!</h2>
 </body>
 </html>