<!--名字必须和web.xml里面的filter-name一样-->

     <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">

         <property name="securityManager" ref="securityManager"/>

         <property name="loginUrl" value="/login"/>

         <property name="successUrl" value="/main"/>

         <property name="unauthorizedUrl" value="/noperssion"/>

         <!-- 1.anon 匿名访问

              2.authc 认证访问

              3.logout 登出

         -->

         <property name="filterChainDefinitions">

             <value>

                 /login = anon

                 /doLogin = anon

                 /logout = logout

                 /assert/* =anon

                 /** = authc

             </value>

         </property>

     </bean>