Shiro报错No SecurityManager accessible to the calling code

HTTP Status 500 - No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton. This is an invalid application configuration.

上面浏览器报错原因

下面工具报错原因

ERROR DefaultDispatcherErrorHandler:42 - Exception occurred during processing request: No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton.  This is an invalid application configuration.

org.apache.shiro.UnavailableSecurityManagerException:No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton.  This is an invalid application configuration.

 

原因:

web.xml文件中filter顺序问题:多个filter的执行顺序从上往下

做用户登录权限效验出错,由于把shiro filter写到了struts filter后面,当登录的时候会先走struts的filter

大概意思就是shiro无法管理到这个请求,而你又在配置文件里设置要shiro管理这个请求

解决:

shiro filter放在struts2 filter前面

 

 

 

如未解决,提供其他解决方案:

    
        shiroFilter
        org.springframework.web.filter.DelegatingFilterProxy
    
    
        shiroFilter
        /*
       REQUEST
        FORWARD
        INCLUDE
        ERROR
    

加上dispatcher

作用:

转发,错误等请求,必须经过这个过滤器。

 

 

 

 

org.apache.shiro.authc.IncorrectCredentialsException:Submitted credentials for token [org.apache.shiro.authc.UsernamePasswordToken - lisi, rememberMe=false] did not match the expected credentials.

登录时报错

原因:

F12查看到只有用户名,密码未传递过来,表单未填写input name=password

搜索了看到还有种可能,数据库密码是hash,form表单传递过来的为明文,导致不一致.

我并不是这种情况,所以没有去使用