shiro 用ajax方式登录

Xml代码  

1. <property name="filterChainDefinitions">  
2.             <value>  
3.                 /login/** = anon  
4.             </value>  
5. </property>  

 

 

 下马是java代码中要增加：

 

Java代码  

1. @RequestMapping(value = "/login")  
2.     @ResponseBody  
3.     public Object ajaxLogin(@RequestParam String username,  
4.             @RequestParam String password, @RequestParam boolean rememberMe) {  
5.         String ret="";  
6.         Subject currentUser = SecurityUtils.getSubject();  
7.         if (!currentUser.isAuthenticated()) {  
8.             UsernamePasswordToken token = new UsernamePasswordToken(username,  
9.                     password);  
10.             token.setRememberMe(rememberMe);  
11.             try {  
12.                 currentUser.login(token);  
13.                 ret = "{success:true,message:'登陆成功'}";  
14.             } catch (UnknownAccountException ex) {  
15.                 ret = "{success:false,message:'账号错误'}";  
16.                 logger.debug(ret);  
17.             } catch (IncorrectCredentialsException ex) {  
18.                 ret = "{success:false,message:'密码错误'}";  
19.                 logger.debug(ret);  
20.             } catch (LockedAccountException ex) {  
21.                 ret = "{success:false,message:'账号已被锁定，请与管理员联系'}";  
22.                 logger.debug(ret);  
23.             } catch (AuthenticationException ex) {  
24.                 ret = "{success:false,message:'您没有授权'}";  
25.                 logger.debug(ret);  
26.             }  
27.         }  
28.         // 返回json数据  
29.         return ret;  
30.     }  

 

 

如果是html通过ajax请求，还需要加上跨域支持：

Xml代码  

1. <filter>  
2.         <filter-name>accessFilter</filter-name>  
3.         <filter-class>com.hotice.shequ.filter.AccessFilter</filter-class>  
4.     </filter>  
5.     <filter-mapping>  
6.         <filter-name>accessFilter</filter-name>  
7.         <url-pattern>/*</url-pattern>  
8.     </filter-mapping>  

 

Java代码  

1. @Override  
2.     public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,    
3.             FilterChain chain) throws IOException, ServletException {    
4.             HttpServletResponse response = (HttpServletResponse) servletResponse;    
5.             response.setHeader("Access-Control-Allow-Origin","*");  
6.             response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");  
7.             chain.doFilter(servletRequest, servletResponse);    
8.                 
9.     }