<filter><filter-name>shiroFilter</filter-name><filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class><init-param><param-name>targetFilterLifecycle</param-name><param-value>true</param-value></init-param></filter><filter-mapping><filter-name>shiroFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping>

  <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean"><!-- Shiro的核心安全接口，这个属性是必须的 --><property name="securityManager" ref="securityManager"></property><!-- 要求登录时的链接(登录页面地址)，非必须的属性，默认会自动寻找Web工程根目录下的"/login.jsp"页面 --><property name="loginUrl" value="/login"></property><property name="filters"><map><entry key="anyRole" value-ref="anyRoleAuthorizationFilter" /></map></property><!-- 登录成功后要跳转的连接 --><!-- <property name="successUrl" value="/main" ></property> --><!-- 用户访问未对其授权的资源时，所显示的连接 --><property name="unauthorizedUrl" value="/noAuthority"></property><property name="filterChainDefinitionMap" ref="filterChainFactoryBean"></property></bean>

    <filter><filter-name>DelegatingFilterProxy</filter-name><filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class><init-param><param-name>ignoreUrls</param-name><param-value>/caClient.jsp,/403.jsp,/login.html*,/j_spring_security_check,/accounts/**,/secure/logout,/js/**,/app/**,/images/**,/icons/**,/lib/**,/resource/**,/secure/changepassword</param-value></init-param>        <init-param><param-name>targetBeanName</param-name><param-value>commonWebFilter</param-value></init-param><init-param><param-name>targetFilterLifecycle</param-name><param-value>true</param-value></init-param></filter><filter-mapping><filter-name>DelegatingFilterProxy</filter-name><url-pattern>/*</url-pattern></filter-mapping>

<bean id="commonWebFilter" class="com.wonders.LoginFilter"/>