## 问题

管理端请求商户列表的接口,由于token过期,nginx抛出502异常


## 解决

一开始,在Nginx配置重定向,效果不理想.

后来研究shiro源码,网上找解决方案,使用filter解决

[Shiro:未登录时请求跳转问题](https://www.cnblogs.com/shipc/p/11468117.html)

## 代码

### 1. 新增过滤器

```java

/**

* 继承FormAuthenticationFilter，重写onAccessDenied方法

*

* @author admin

*/

@Slf4j

public class ShiroFormAuthenticationFilter extends FormAuthenticationFilter {

@Override

protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {

if (this.isLoginRequest(request, response)) {

if (this.isLoginSubmission(request, response)) {

if (log.isTraceEnabled()) {

log.trace("Login submission detected. Attempting to execute login.");

}

return this.executeLogin(request, response);

} else {

if (log.isTraceEnabled()) {

log.trace("Login page view.");

}

return true;

}

} else {

HttpServletRequest req = (HttpServletRequest) request;

HttpServletResponse resp = (HttpServletResponse) response;

if (req.getMethod().equals(RequestMethod.OPTIONS.name())) {

resp.setStatus(HttpStatus.OK.value());

return true;

} else {

if (log.isTraceEnabled()) {

log.trace("Attempting to access a path which requires authentication. Forwarding to the Authentication url [{}]", this.getLoginUrl());

}

/**

* 在这里实现自己想返回的信息，其他地方和源码一样就可以了

*/

resp.setHeader("Access-Control-Allow-Origin", req.getHeader("Origin"));

resp.setHeader("Access-Control-Allow-Credentials", "true");

resp.setContentType("application/json; charset=utf-8");

resp.setCharacterEncoding("UTF-8");

PrintWriter out = resp.getWriter();

out.println(JSONObject.toJSON(ResponseUtil.unlogin()));

out.flush();

out.close();

return false;

}

}

}

}

```

### 2. 修改shiro的配置,注释loginUrl,配置filter

```java

public class ShiroConfig {

@Bean

public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager) {

ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();

shiroFilterFactoryBean.setSecurityManager(securityManager);

Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>();

filterChainDefinitionMap.put("/admin/auth/login", "anon");

filterChainDefinitionMap.put("/admin/auth/401", "anon");

filterChainDefinitionMap.put("/admin/auth/index", "anon");

filterChainDefinitionMap.put("/admin/auth/403", "anon");

filterChainDefinitionMap.put("/admin/index/index", "anon");

filterChainDefinitionMap.put("/admin/**", "authc");

///shiroFilterFactoryBean.setLoginUrl("/admin/auth/401");

// 这里使用自定义的filter

LinkedHashMap<String, Filter> filtersMap = new LinkedHashMap<>();

filtersMap.put("authc", new ShiroFormAuthenticationFilter());

shiroFilterFactoryBean.setFilters(filtersMap);

shiroFilterFactoryBean.setSuccessUrl("/admin/auth/index");

shiroFilterFactoryBean.setUnauthorizedUrl("/admin/auth/403");

shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);

return shiroFilterFactoryBean;

}

}