Shiro自定义Filter后,在后面的Filter上无法获取到Subject

我希望在后台报错后,可以返回统一的报错信息,但是@ControllerAdvice只能捕获到Controller层面上的报错,但是没法捕获到Filter报错。所以我的做法是写一个Filter(在所有Filter的最前面)去try catch 。

但是这么写了之后,会打乱了shiro的过滤器链的执行顺序,导致我在后面的自定义的过滤器中无法获取到Shiro的Subject

自定义的Filter有GlobalExceptionHandle(全局捕获Filter)、LoginActionFilter(在这里获取Subject)

GlobalExceptionHandle

@WebFilter("/api/*")
public class GlobalExceptionHandler implements Filter {

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        try {
            filterChain.doFilter(servletRequest,servletResponse);
        }
        catch (RuntimeException e){
            ServiceResult result=new ServiceResult();
            result.isFailure("操作失败");
            HttpServletResponse httpServletResponse=(HttpServletResponse) servletResponse;
            httpServletResponse.setContentType("application/json; charset=utf-8");
            PrintWriter writer = httpServletResponse.getWriter();
            String json = JSON.toJSONString(result, SerializerFeature.WriteMapNullValue);
            writer.append(json);
            writer.flush();
            writer.close();
            }
    }
}

设置GlobalExceptionHandle的Order:(这里采了小坑,用@Order注解设置是不起效果的,要用一下方式)

//过滤器相关配置,想要改Filter的是在顺序,直接在Filter上面加@Order是不起作用的
@Configuration
public class FilterConfig {
    @Bean
    public FilterRegistrationBean filterRegistrationBean(){
        FilterRegistrationBean bean=new FilterRegistrationBean();
        bean.setFilter(new GlobalExceptionHandler());
        bean.addUrlPatterns("/*");
        bean.setOrder(1);
        return bean;
    }
}

获取shiro过滤器链,在启动类上打断点获取:

GlobalExceptionHandle没有设置Order的:

把GlobalExceptionHandle的Order设置成 1 之后:(LoginActionFilter就会拿不到Subject)

 解决办法:我目前的解决办法是 LoginActionFilter换用拦截器

猜你喜欢

转载自blog.csdn.net/liyayou/article/details/132497485