基于Spring框架的Shiro配置方法

<!-- shiro filter-->
<filter>
<filter-name>shirofilter</filter-name>
<filter-class>
org.springframework.web.filter.delegatingfilterproxy
</filter-class>
</filter>
<filter-mapping>
<filter-name>shirofilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

<!-- shiro filter -->
<bean id="shirofilter" class="org.apache.shiro.spring.web.shirofilterfactorybean">
 <property name="securitymanager" ref="securitymanager" />
 <property name="loginurl" value="/login" />
 <property name="successurl" value="/user/list" />
 <property name="unauthorizedurl" value="/login" />
 <property name="filterchaindefinitions">
 <value>
 /login = anon
 /user/** = authc
 /role/edit/* = perms[role:edit]
 /role/save = perms[role:edit]
 /role/list = perms[role:view]
 /** = authc
 </value>
 </property>
</bean>

public class myrealm extends authorizingrealm{

 private accountmanager accountmanager;
 public void setaccountmanager(accountmanager accountmanager) {
 this.accountmanager = accountmanager;
 }

 /**
 * 授权信息
 */
 protected authorizationinfo dogetauthorizationinfo(
 principalcollection principals) {
 string username=(string)principals.fromrealm(getname()).iterator().next();
 if( username != null ){
 user user = accountmanager.get( username );
 if( user != null && user.getroles() != null ){
 simpleauthorizationinfo info = new simpleauthorizationinfo();
 for( securityrole each: user.getroles() ){
  info.addrole(each.getname());
  info.addstringpermissions(each.getpermissionsasstring());
 }
 return info;
 }
 }
 return null;
 }

 /**
 * 认证信息
 */
 protected authenticationinfo dogetauthenticationinfo(
 authenticationtoken authctoken ) throws authenticationexception {
 usernamepasswordtoken token = (usernamepasswordtoken) authctoken;
 string username = token.getusername();
 if( username != null && !"".equals(username) ){
 user user = accountmanager.login(token.getusername(),
  string.valueof(token.getpassword()));

 if( user != null )
 return new simpleauthenticationinfo(
  user.getloginname(),user.getpassword(), getname());
 }
 return null;
 }
}