Apache Shiro 认证失败处理

Shiro通过异常类来描述认证失败的原因，比如：

AuthenticationToken token = new UsernamePasswordToken(loginName,loginPwd); 

Subject currentUser = SecurityUtils.getSubject(); 

try { 

    currentUser.login(token); 

} catch (UnknownAccountException uae) { 

    log.info("username wasn't in the system."); 

} catch (IncorrectCredentialsException ice) { 

    log.info("password didn't match."); 

} catch (LockedAccountException lae) { 

    log.info(account for that username is locked - can't login."); 

} catch (AuthenticationException ae) { 

    log.info("unexpected condition."); 

}

 

       Shiro自带的认证异常类类图如下：

所有的异常类都是继承AuthenticationExceptions。如果现有的异常类不符合您的要求，可以自定义AuthenticationExceptions来代表具体的异常情况。