<!-- 配置shiro框架提供過濾器工廠 -->
  <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    <!-- 注入shiro核心組件安全管理器 -->
    <property name="securityManager" ref="securityManager"></property>
    <!-- 注入相關(guān)頁面 -->
    <property name="loginUrl" value="/login.jsp"></property>
    <property name="unauthorizedUrl" value="/unauthorized.jsp"></property>
    <!-- 配置過濾器鏈：配置項(xiàng)目發(fā)出url對應(yīng)攔截規(guī)則：指定什么url要求具有什么樣權(quán)限 -->
    <property name="filterChainDefinitions">
      <value>
        /css/**=anon
        /js/**=anon
        /validatecode.jsp*=anon
        /images/**=anon
        /login.jsp=anon
        /service/**=anon
        /**=authc
      </value>
    </property>
  </bean>
  <!-- 配置安全管理器 -->
  <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
     <property name="realms" ref="bosRealm"></property>
     <!-- 使用緩存 -->
     <property name="cacheManager" ref="cacheManager"></property>
  </bean>

  <!-- 配置緩存管理器-->
  <bean id="cacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
     <!-- 加載ehcache的配置文件，指定緩存策略 -->
    <property name="cacheManager" ref="ehcacheManager"></property>
  </bean> 

  <!-- 開啟shiro注解支持 -->
  <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator">
    <!-- 強(qiáng)制使用cglib代理 -->
    <property name="proxyTargetClass" value="true"></property>
  </bean>
  <!-- 配置切面 目的驗(yàn)權(quán)，判斷當(dāng)前用戶是否有權(quán)限調(diào)用service層方法 -->
  <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor"></bean>

@Configuration
public class ShiroConfig {
  @Bean
  public ShiroFilterFactoryBean shirFilter(SecurityManager securityManager) {
    ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
    shiroFilterFactoryBean.setSecurityManager(securityManager);

    Map<String, String> filterChainDefinitionMap = new HashMap<String, String>();
    shiroFilterFactoryBean.setLoginUrl("/login");
    shiroFilterFactoryBean.setUnauthorizedUrl("/unauthc");
    shiroFilterFactoryBean.setSuccessUrl("/home/index");
    
    filterChainDefinitionMap.put("/*", "anon");
    filterChainDefinitionMap.put("/authc/index", "authc");
    return shiroFilterFactoryBean;
  }

  @Bean
  public HashedCredentialsMatcher hashedCredentialsMatcher() {
    HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
    hashedCredentialsMatcher.setHashAlgorithmName(PasswordHelper.ALGORITHM_NAME); 
    hashedCredentialsMatcher.setHashIterations(PasswordHelper.HASH_ITERATIONS); 
    return hashedCredentialsMatcher;
  }

  @Bean
  public EnceladusShiroRealm shiroRealm() {
    EnceladusShiroRealm shiroRealm = new EnceladusShiroRealm();
    shiroRealm.setCredentialsMatcher(hashedCredentialsMatcher()); 
    return shiroRealm;
  }

  @Bean
  public SecurityManager securityManager() {
    DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
    securityManager.setRealm(shiroRealm());
    return securityManager;
  }

  @Bean
  public PasswordHelper passwordHelper() {
    return new PasswordHelper();
  }
}