public class UsernamePasswordAuthenticationFilter extends FormAuthenticationFilter{}

/**
 * 沒(méi)有登陸的情況下，訪問(wèn)需要權(quán)限的接口，需要引導(dǎo)用戶登陸
 *
 * @param request
 * @param response
 * @throws IOException
 */
@Override
protected void saveRequestAndRedirectToLogin(ServletRequest request, ServletResponse response) throws IOException {
    //  保存當(dāng)前請(qǐng)求，以便后續(xù)登陸成功后重新請(qǐng)求
    this.saveRequest(request);
    // 1. 服務(wù)端直接跳轉(zhuǎn)
    // ? - 服務(wù)端重定向登陸頁(yè)面
    if (autoRedirectToLogin) {
       ?this.redirectToLogin(request, response);
    } else {
       ?// 2. json模式
       ?// ? - json數(shù)據(jù)格式告知前端需要跳轉(zhuǎn)到登陸頁(yè)面，前端根據(jù)指令跳轉(zhuǎn)登陸頁(yè)面
       ?HttpServletRequest req = (HttpServletRequest) request;
       ?HttpServletResponse res = (HttpServletResponse) response;
       ?Map<String, String> metaInfo = new HashMap<>();
       ?// 告知前端需要跳轉(zhuǎn)的登陸頁(yè)面
       ?metaInfo.put("loginUrl", getLoginUrl());
       ?// 告知前端當(dāng)前請(qǐng)求的url；這個(gè)信息也可以保存在前端
       ?metaInfo.put("currentRequest", req.getRequestURL().toString());
       ?ResultWrap.failure(802, "請(qǐng)登陸后再操作！", metaInfo)
          .writeToResponse(res);
    }
}

@Override
protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, ServletResponse response) throws Exception {
    // 查詢當(dāng)前用戶自定義的登陸成功需要跳轉(zhuǎn)的頁(yè)面，可以更加靈活控制用戶頁(yè)面跳轉(zhuǎn)
    String successUrl = loginSuccessPageFetch.successUrl(token, subject);
    // 如果沒(méi)有自定義的成功頁(yè)面，那么跳轉(zhuǎn)默認(rèn)成功頁(yè)
    if (StringUtils.isEmpty(successUrl)) {
       ?successUrl = this.getSuccessUrl();
    }
    if (loginSuccessAutoRedirect) {
       ?// 服務(wù)端直接重定向到目標(biāo)頁(yè)面
       ?WebUtils.redirectToSavedRequest(request, response, successUrl);
    } else {
       ?SavedRequest savedRequest = WebUtils.getAndClearSavedRequest(request);
       ?if (savedRequest != null && savedRequest.getMethod().equalsIgnoreCase("GET")) {
         ? ?successUrl = savedRequest.getRequestUrl();
        }
       ?// 返回json數(shù)據(jù)格式告知前端跳轉(zhuǎn)目標(biāo)頁(yè)面
       ?HttpServletResponse res = (HttpServletResponse) response;
       ?Map<String, String> data = new HashMap<>();
       ?// 登陸成功后跳轉(zhuǎn)的目標(biāo)頁(yè)面
       ?data.put("successUrl", successUrl);
       ?ResultWrap.success(data).writeToResponse(res);
    }
    return false;
}

@Override
  protected boolean onLoginFailure(AuthenticationToken token, AuthenticationException e, ServletRequest request, ServletResponse response) {
    if (log.isDebugEnabled()) {
      log.debug("Authentication exception", e);
    }
    this.setFailureAttribute(request, e);
    if (!loginFailureAutoRedirect) {
      // 返回json數(shù)據(jù)格式告知前端跳轉(zhuǎn)目標(biāo)頁(yè)面
      HttpServletResponse res = (HttpServletResponse) response;
      ResultWrap.failure(803, "用戶名或密碼錯(cuò)誤，請(qǐng)核對(duì)后無(wú)誤后重新提交！", null).writeToResponse(res);
    }
    return true;
  }

@Bean
  public ShiroFilterFactoryBean shiroFilterFactoryBean() {
    ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
    shiroFilterFactoryBean.setSecurityManager(securityManager());
    Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
    // 設(shè)置不需要權(quán)限的url
    String[] permitUrls = properties.getPermitUrls();
    if (ArrayUtils.isNotEmpty(permitUrls)) {
      for (String permitUrl : permitUrls) {
        filterChainDefinitionMap.put(permitUrl, "anon");
      }
    }
    // 設(shè)置退出的url
    String logoutUrl = properties.getLogoutUrl();
    filterChainDefinitionMap.put(logoutUrl, "logout");
 ? ?// 設(shè)置需要權(quán)限驗(yàn)證的url
    filterChainDefinitionMap.put("/**", "authc");
    shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
    // 設(shè)置提交登陸的url
    String loginUrl = properties.getLoginUrl();
    shiroFilterFactoryBean.setLoginUrl(loginUrl);
    // 設(shè)置登陸成功跳轉(zhuǎn)的url
    String successUrl = properties.getSuccessUrl();
    shiroFilterFactoryBean.setSuccessUrl(successUrl);
    // 添加自定義Filter
    shiroFilterFactoryBean.setFilters(customFilters());
    return shiroFilterFactoryBean;
  }
?
/**
   * 自定義過(guò)濾器
   *
   * @return
   */
  private Map<String, Filter> customFilters() {
    Map<String, Filter> filters = new LinkedHashMap<>();
    // 自定義FormAuthenticationFilter，用于管理用戶登陸的，包括登陸成功后的動(dòng)作、登陸失敗的動(dòng)作
    // 可查看org.apache.shiro.web.filter.mgt.DefaultFilter，可覆蓋里面對(duì)應(yīng)的authc
    UsernamePasswordAuthenticationFilter usernamePasswordAuthenticationFilter = new UsernamePasswordAuthenticationFilter();
    // 不允許服務(wù)器自動(dòng)控制頁(yè)面跳轉(zhuǎn)
    usernamePasswordAuthenticationFilter.setAutoRedirectToLogin(false);
    usernamePasswordAuthenticationFilter.setLoginSuccessAutoRedirect(false);
    usernamePasswordAuthenticationFilter.setLoginFailureAutoRedirect(false);
    filters.put("authc", usernamePasswordAuthenticationFilter);
    return filters;
  }

import com.example.awesomespring.vo.ResultWrap;
import lombok.Data;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
import org.apache.shiro.web.util.SavedRequest;
import org.apache.shiro.web.util.WebUtils;
?
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.HashMap;
import java.util.Map;
?
/**
 * @author zouwei
 * @className UsernamePasswordAuthenticationFilter
 * @date: 2022/8/2 上午12:14
 * @description:
 */
@Data
@Slf4j
public class UsernamePasswordAuthenticationFilter extends FormAuthenticationFilter {
  //  如果用戶沒(méi)有登陸的情況下訪問(wèn)需要權(quán)限的接口，服務(wù)端是否自動(dòng)調(diào)整到登陸頁(yè)面
  private boolean autoRedirectToLogin = true;
  // 登陸成功后是否自動(dòng)跳轉(zhuǎn)
  private boolean loginSuccessAutoRedirect = true;
  // 登陸失敗后是否跳轉(zhuǎn)
  private boolean loginFailureAutoRedirect = true;
  /**
   * 個(gè)性化定制每個(gè)登陸成功的賬號(hào)跳轉(zhuǎn)的url
   */
  private LoginSuccessPageFetch loginSuccessPageFetch = new LoginSuccessPageFetch(){};
?
  public UsernamePasswordAuthenticationFilter() {
  }
?
  /**
   * 沒(méi)有登陸的情況下，訪問(wèn)需要權(quán)限的接口，需要引導(dǎo)用戶登陸
   *
   * @param request
   * @param response
   * @throws IOException
   */
  @Override
  protected void saveRequestAndRedirectToLogin(ServletRequest request, ServletResponse response) throws IOException {
    //  保存當(dāng)前請(qǐng)求，以便后續(xù)登陸成功后重新請(qǐng)求
    this.saveRequest(request);
    // 1. 服務(wù)端直接跳轉(zhuǎn)
    // ? - 服務(wù)端重定向登陸頁(yè)面
    if (autoRedirectToLogin) {
      this.redirectToLogin(request, response);
    } else {
      // 2. json模式
      // ? - json數(shù)據(jù)格式告知前端需要跳轉(zhuǎn)到登陸頁(yè)面，前端根據(jù)指令跳轉(zhuǎn)登陸頁(yè)面
      HttpServletRequest req = (HttpServletRequest) request;
      HttpServletResponse res = (HttpServletResponse) response;
      Map<String, String> metaInfo = new HashMap<>();
      // 告知前端需要跳轉(zhuǎn)的登陸頁(yè)面
      metaInfo.put("loginUrl", getLoginUrl());
      // 告知前端當(dāng)前請(qǐng)求的url；這個(gè)信息也可以保存在前端
      metaInfo.put("currentRequest", req.getRequestURL().toString());
      ResultWrap.failure(802, "請(qǐng)登陸后再操作！", metaInfo)
          .writeToResponse(res);
    }
  }
?
  @Override
  protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, ServletResponse response) throws Exception {
    // 查詢當(dāng)前用戶自定義的登陸成功需要跳轉(zhuǎn)的頁(yè)面，可以更加靈活控制用戶頁(yè)面跳轉(zhuǎn)
    String successUrl = loginSuccessPageFetch.successUrl(token, subject);
    // 如果沒(méi)有自定義的成功頁(yè)面，那么跳轉(zhuǎn)默認(rèn)成功頁(yè)
    if (StringUtils.isEmpty(successUrl)) {
      successUrl = this.getSuccessUrl();
    }
    if (loginSuccessAutoRedirect) {
      // 服務(wù)端直接重定向到目標(biāo)頁(yè)面
      WebUtils.redirectToSavedRequest(request, response, successUrl);
    } else {
      SavedRequest savedRequest = WebUtils.getAndClearSavedRequest(request);
      if (savedRequest != null && savedRequest.getMethod().equalsIgnoreCase("GET")) {
        successUrl = savedRequest.getRequestUrl();
      }
      // 返回json數(shù)據(jù)格式告知前端跳轉(zhuǎn)目標(biāo)頁(yè)面
      HttpServletResponse res = (HttpServletResponse) response;
      Map<String, String> data = new HashMap<>();
      // 登陸成功后跳轉(zhuǎn)的目標(biāo)頁(yè)面
      data.put("successUrl", successUrl);
      ResultWrap.success(data).writeToResponse(res);
    }
    return false;
  }
?
  @Override
  protected boolean onLoginFailure(AuthenticationToken token, AuthenticationException e, ServletRequest request, ServletResponse response) {
    if (log.isDebugEnabled()) {
      log.debug("Authentication exception", e);
    }
    this.setFailureAttribute(request, e);
    if (!loginFailureAutoRedirect) {
      // 返回json數(shù)據(jù)格式告知前端跳轉(zhuǎn)目標(biāo)頁(yè)面
      HttpServletResponse res = (HttpServletResponse) response;
      ResultWrap.failure(803, "用戶名或密碼錯(cuò)誤，請(qǐng)核對(duì)后無(wú)誤后重新提交！", null).writeToResponse(res);
    }
    return true;
  }
  /**
   * 針對(duì)不同的人員登陸成功后有不同的跳轉(zhuǎn)頁(yè)面而設(shè)計(jì)
   */
  public interface LoginSuccessPageFetch {
?
    default String successUrl(AuthenticationToken token, Subject subject) {
      return StringUtils.EMPTY;
    }
  }
}

import com.example.awesomespring.util.JsonUtil;
import lombok.AllArgsConstructor;
import lombok.Data;
import org.apache.commons.lang3.StringUtils;
import org.springframework.http.HttpStatus;
?
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.PrintWriter;
import java.util.Objects;
?
/**
 * @author zouwei
 * @className ResultWrap
 * @date: 2022/8/2 下午2:02
 * @description:
 */
@Data
@AllArgsConstructor
public class ResultWrap<T, M> {
  //  方便前端判斷當(dāng)前請(qǐng)求處理結(jié)果是否正常
  private int code;
  //  業(yè)務(wù)處理結(jié)果
  private T data;
  //  產(chǎn)生錯(cuò)誤的情況下，提示用戶信息
  private String message;
  //  產(chǎn)生錯(cuò)誤情況下的異常堆棧，提示開發(fā)人員
  private String error;
  //  發(fā)生錯(cuò)誤的時(shí)候，返回的附加信息
  private M metaInfo;
?
  /**
   * 成功帶處理結(jié)果
   *
   * @param data
   * @param <T>
   * @return
   */
  public static <T> ResultWrap success(T data) {
    return new ResultWrap(HttpStatus.OK.value(), data, StringUtils.EMPTY, StringUtils.EMPTY, null);
  }
?
  /**
   * 成功不帶處理結(jié)果
   *
   * @return
   */
  public static ResultWrap success() {
    return success(HttpStatus.OK.name());
  }
?
  /**
   * 失敗
   *
   * @param code
   * @param message
   * @param error
   * @return
   */
  public static <M> ResultWrap failure(int code, String message, String error, M metaInfo) {
    return new ResultWrap(code, null, message, error, metaInfo);
  }
?
  /**
   * 失敗
   *
   * @param code
   * @param message
   * @param error
   * @param metaInfo
   * @param <M>
   * @return
   */
  public static <M> ResultWrap failure(int code, String message, Exception error, M metaInfo) {
    return failure(code, message, error.getStackTrace().toString(), metaInfo);
  }
?
  /**
   * 失敗
   *
   * @param code
   * @param message
   * @param error
   * @return
   */
  public static ResultWrap failure(int code, String message, Exception error) {
    String errorMessage = StringUtils.EMPTY;
    if (Objects.nonNull(error)) {
      errorMessage = error.getStackTrace().toString();
    }
    return failure(code, message, errorMessage, null);
  }
?
  /**
   * 失敗
   *
   * @param code
   * @param message
   * @param metaInfo
   * @param <M>
   * @return
   */
  public static <M> ResultWrap failure(int code, String message, M metaInfo) {
    return failure(code, message, StringUtils.EMPTY, metaInfo);
  }
?
  private static final String APPLICATION_JSON_VALUE = "application/json;charset=UTF-8";
?
  /**
   * 把結(jié)果寫入響應(yīng)中
   *
   * @param response
   */
  public void writeToResponse(HttpServletResponse response) {
    int code = this.getCode();
    if (Objects.isNull(HttpStatus.resolve(code))) {
      response.setStatus(HttpStatus.OK.value());
    } else {
      response.setStatus(code);
    }
    response.setContentType(APPLICATION_JSON_VALUE);
    try (PrintWriter writer = response.getWriter()) {
      writer.write(JsonUtil.obj2String(this));
      writer.flush();
    } catch (IOException e) {
      e.printStackTrace();
    }
  }
}

?import com.fasterxml.jackson.annotation.JsonInclude;
import com.fasterxml.jackson.core.type.TypeReference;
import com.fasterxml.jackson.databind.DeserializationFeature;
import com.fasterxml.jackson.databind.JavaType;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.fasterxml.jackson.databind.SerializationFeature;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
?
import java.util.Objects;
?
/**
 * @author zouwei
 * @className JsonUtil
 * @date: 2022/8/2 下午3:08
 * @description:
 */
@Slf4j
public final class JsonUtil {
?
  /** 防止使用者直接new JsonUtil() */
  private JsonUtil() {}
?
  private static ObjectMapper objectMapper = new ObjectMapper();
?
  static {
    // 對(duì)象所有字段全部列入序列化
    objectMapper.setSerializationInclusion(JsonInclude.Include.ALWAYS);
    /** 所有日期全部格式化成時(shí)間戳 因?yàn)榧词怪付薉ateFormat，也不一定能滿足所有的格式化情況，所以統(tǒng)一為時(shí)間戳，讓使用者按需轉(zhuǎn)換 */
    objectMapper.configure(SerializationFeature.WRITE_DATES_AS_TIMESTAMPS, true);
    /** 忽略空Bean轉(zhuǎn)json的錯(cuò)誤 假設(shè)只是new方式創(chuàng)建對(duì)象，并且沒(méi)有對(duì)里面的屬性賦值，也要保證序列化的時(shí)候不報(bào)錯(cuò) */
    objectMapper.configure(SerializationFeature.FAIL_ON_EMPTY_BEANS, false);
    /** 忽略反序列化中json字符串中存在，但java對(duì)象中不存在的字段 */
    objectMapper.configure(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES, false);
  }
?
  /**
   * 對(duì)象轉(zhuǎn)換成json字符串
   *
   * @param obj
   * @param <T>
   * @return
   */
  public static <T> String obj2String(T obj) {
    return obj2String(obj, null);
  }
  /**
   * 對(duì)象轉(zhuǎn)換成json字符串
   *
   * @param obj
   * @param <T>
   * @return
   */
  public static <T> String obj2String(T obj, String defaultValue) {
    if (Objects.isNull(obj)) {
      return defaultValue;
    }
    try {
      return obj instanceof String ? (String) obj : objectMapper.writeValueAsString(obj);
    } catch (Exception e) {
      log.warn("Parse object to String error", e);
      // 即使序列化出錯(cuò)，也要保證程序走下去
      return null;
    }
  }
?
  /**
   * 對(duì)象轉(zhuǎn)json字符串(帶美化效果)
   *
   * @param obj
   * @param <T>
   * @return
   */
  public static <T> String obj2StringPretty(T obj) {
    if (Objects.isNull(obj)) {
      return null;
    }
    try {
      return obj instanceof String
          ? (String) obj
          : objectMapper.writerWithDefaultPrettyPrinter().writeValueAsString(obj);
    } catch (Exception e) {
      log.warn("Parse object to String error", e);
      // 即使序列化出錯(cuò)，也要保證程序走下去
      return null;
    }
  }
?
  /**
   * json字符串轉(zhuǎn)簡(jiǎn)單對(duì)象
   *
   * @param <T>
   * @param json
   * @param clazz
   * @return
   */
  public static <T> T string2Obj(String json, Class<T> clazz) {
    if (StringUtils.isEmpty(json) || Objects.isNull(clazz)) {
      return null;
    }
    try {
      return clazz.equals(String.class) ? (T) json : objectMapper.readValue(json, clazz);
    } catch (Exception e) {
      log.warn("Parse String to Object error", e);
      // 即使序列化出錯(cuò)，也要保證程序走下去
      return null;
    }
  }
?
  /**
   * json字符串轉(zhuǎn)復(fù)雜對(duì)象
   *
   * @param json
   * @param typeReference 例如：new TypeReference<List<User>>(){}
   * @param <T> 例如：List<User>
   * @return
   */
  public static <T> T string2Obj(String json, TypeReference<T> typeReference) {
    if (StringUtils.isEmpty(json) || Objects.isNull(typeReference)) {
      return null;
    }
    try {
      return (T)
          (typeReference.getType().equals(String.class)
              ? (T) json
              : objectMapper.readValue(json, typeReference));
    } catch (Exception e) {
      log.warn("Parse String to Object error", e);
      // 即使序列化出錯(cuò)，也要保證程序走下去
      return null;
    }
  }
?
  /**
   * json字符串轉(zhuǎn)復(fù)雜對(duì)象
   *
   * @param json
   * @param collectionClass 例如：List.class
   * @param elementClasses 例如：User.class
   * @param <T> 例如：List<User>
   * @return
   */
  public static <T> T string2Obj(
      String json, Class<?> collectionClass, Class<?>... elementClasses) {
    if (StringUtils.isEmpty(json)
        || Objects.isNull(collectionClass)
        || Objects.isNull(elementClasses)) {
      return null;
    }
    JavaType javaType =
        objectMapper
            .getTypeFactory()
            .constructParametricType(collectionClass, elementClasses);
    try {
      return objectMapper.readValue(json, javaType);
    } catch (Exception e) {
      log.warn("Parse String to Object error", e);
      // 即使序列化出錯(cuò)，也要保證程序走下去
      return null;
    }
  }
}