SpringBoot配置Shiro时@RequiresRoles不起作用

提示：扫一扫查出行
【扫一扫了解最新限行尾号】
复制提示

在SpringBoot中配置Shiro，结果@RequiresRoles、@RequiresPermissions等注解都无效

解决方法：

在ShiroConfiguration中注入开启支持aop、代理的bean。具体如下：

@Configuration

public class ShiroConfiguration {

     /**

     *  开启shiro aop注解支持.否则@RequiresRoles等注解无法生效

     *  使用代理方式;

     * @param securityManager

     * @return

     */

    @Bean

    public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager){

        AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();

        authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);

        return authorizationAttributeSourceAdvisor;

    }

    /**

     * Shiro生命周期处理器

     * @return

     */

    @Bean

    public LifecycleBeanPostProcessor lifecycleBeanPostProcessor(){

        return new LifecycleBeanPostProcessor();

    }

    /**

     * 自动创建代理

     * @return

     */

    @Bean

    @DependsOn({"lifecycleBeanPostProcessor"})

    public DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator(){

        DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();

        advisorAutoProxyCreator.setProxyTargetClass(true);

        return advisorAutoProxyCreator;

    }

}