shiro 无法跳转到unauthorizedUrl

问题：shiro框架控制用户权限，用户权限认证未通过时，无法跳转到unauthorizedUrl对应的页面，直接抛出了异常。

原因：

 private void applyUnauthorizedUrlIfNecessary(Filter filter) {
     String unauthorizedUrl = getUnauthorizedUrl();
     if (StringUtils.hasText(unauthorizedUrl) && (filter instanceof AuthorizationFilter)) {
         AuthorizationFilter authzFilter = (AuthorizationFilter) filter;
         //only apply the unauthorizedUrl if they haven't explicitly configured one already:
         String existingUnauthorizedUrl = authzFilter.getUnauthorizedUrl();
         if (existingUnauthorizedUrl == null) {
             authzFilter.setUnauthorizedUrl(unauthorizedUrl);
         }
     }
 }

定义的filter必须满足filter instanceof AuthorizationFilter，只有perms，roles，ssl，rest，port才是属于AuthorizationFilter，而anon，authcBasic，auchc，user是AuthenticationFilter，所以unauthorizedUrl设置后页面不跳转

解决方案：

方案一：

org.apache.shiro.authz.UnauthorizedException
/unauthorized.jsp

方案二：使用perms，roles，ssl，rest，port

方案三：使用@ExceptionHandler(UnauthorizedException.class)