thanks for the communication.

sorry, i have now where created my own authentication filter, i am using
that built in shiro authentication filter called
FormAuthenticationFilter.... observe my code please once


<bean id="shiroFilter"
class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
<property name="securityManager" ref="securityManager" />
<property name="loginUrl" value="/main/user/performs/login" />
<property name="successUrl"
value="redirect:/main/welcome1?cat=customermanagement.customersummary" />
<property name="unauthorizedUrl" value="/main/admin/unauthorized" />
<property name="filters">
<util:map>
<entry key="logout">
<bean class="org.apache.shiro.web.filter.authc.LogoutFilter">
<property name="redirectUrl" value="/main/user/performs/login"></property>
</bean>
</entry>
<entry key="authc">
<bean
class="org.apache.shiro.web.filter.authc.FormAuthenticationFilter"></bean>
</entry>
</util:map>
</property>
<property name="filterChainDefinitions">
<value>
/main/user/performs/logout = logout
/** = authc
</value>
</

here this "authc" is the form authentication filter, as we know that under
shiroFilter (org.apache.shiro.spring.web.ShiroFilterFactoryBean) whatever
the configuration we have given like properties loginUrl, successUrl,
unauthorizedurl will be applicable for all the filters configured, bulitin
in the property of filters like authc, anon, logout...........etc filters.

here FormAuthenticaation(built-in) filter is using the property of loginUrl
and performing the authentication no issues... but coming to  successUrl,
unauthorizedurl properties are no where getting utilized by the
FormAuthenticationFilter. i am wondering here as some properties are used
remoaining not used.

now pls understand my code and situation please reply, any reply,help is
appreciated..

thanking u very much :)





On Mon, Jun 17, 2013 at 2:39 AM, Bengt Rodehav <[email protected]> wrote:

> Sorry, I'm no Shiro expert I just wanted to remind you that it's not
> enough to create your own authentication filter - you also have to
> configure Shiro to use it.
>
> /Bengt
>
>
> 2013/6/16 Nagaraju Kurma <[email protected]>
>
>> actually in my project no where we are using shiro.ini file... becoz the
>> user list and roles, permission everything we are using to store in elastic
>> search....
>> but i dont understand why shiroFilter (ShiroFilterFactoryBean) uses only
>> loginUrl but nor successUrl and unauthenticatedurl. pls help me if u know..
>> thanks in adv for any assistance.:)
>>
>>
>


-- 

Regards,****

Nagaraju.

Reply via email to