<!-- 退出登录过滤器 -->
<bean id="logoutFilter" class="cn.egenie.web.common.shiro.CustomLogoutFilter">
    <property name="redirectUrl" value="/shiro_login"/>
</bean>

<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    <property name="securityManager" ref="securityManager"/>
    <!-- override these for application-specific URLs if you like:-->
    <property name="loginUrl" value="/shiro_login"/>
    <property name="unauthorizedUrl" value="/shiro_login"/>
    <!-- The 'filters' property is not necessary since any declared javax.servlet.Filter bean  -->
    <!-- defined will be automatically acquired and available via its beanName in chain        -->
    <!-- definitions, but you can perform instance overrides or name aliases here if you like: -->
    <property name="filters">
        <util:map>
            <entry key="authc" value-ref="formAuthenticationFilter"/>
            <entry key="authc_mute" value-ref="muteAuthenticationFilter"/>
            <entry key="authc_pda" value-ref="pdaAuthenticationFilter"/>
            <entry key="logout" value-ref="logoutFilter"/>
            <!--<entry key="sysUser" value-ref="sysUserFilter"/>-->
            <!--<entry key="onlineSession" value-ref="onlineSessionFilter"/>-->
            <!--<entry key="syncOnlineSession" value-ref="syncOnlineSessionFilter"/>-->
            <!--<entry key="jCaptchaValidate" value-ref="jCaptchaValidateFilter"/>-->
        </util:map>
    </property>
    <property name="filterChainDefinitions">
        <value>
            /static/** = anon
            /favicon.ico = anon
            /api/tenant/tenant = anon
            /api/tenant/integrate/tenant = anon
            /api/user/password = anon
            /api/pda/** = anon
            /download/** = anon
            /register = anon
            /password = anon
            /api/dts/server/** = anon
            /api/open/order/** = anon
            /api/management/**=anon
            /logout = logout
            /shiro_login = authc
            /api/tenant/integrate/login = authc_mute
            /** = user,perms,roles<!--,sysUser,onlineSession,syncOnlineSession-->
        </value>
    </property>
</bean>