<!-- 引入数据源 -->
		<context:property-placeholder location="classpath:db.properties"/>
		<!-- 注解扫描 -->
		<context:component-scan base-package="cn.neusoft.dao,cn.neusoft.filter"></context:component-scan>
		
		<!-- 配置数据库连接池 -->
		<bean id="dataSource" class="com.alibaba.druid.pool.DruidDataSource"
		destroy-method="close">
		<property name="driverClassName" value="${jdbc.driver}" />
		<property name="url" value="${jdbc.url}" />
		<property name="username" value="${jdbc.username}" />
		<property name="password" value="${jdbc.password}" />
		<property name="maxActive" value="10" />
		<property name="maxIdle" value="5" />
		</bean>
		
		
		<!-- 自定义的shiro 过滤器 -->
		<bean id="phoneFilter" class="cn.neusoft.filter.UserPhoneFilter">
			<property name="userdao" ref="userDao"></property>
		</bean>	
		
		<bean id="chainDefinitionSectionMetaSource" class="cn.neusoft.filter.ChainDefinitionSectionMetaSource">
			<property name="filterChainDefinitions">
				<value>
					/userphone/login.action =anon
					/user/login.action = anon
					/login.jsp =anon
					/user/all.action = authc
					/userphone/select.action =authc
					/userphone/* =phone
					/url/all.action =authc
				</value>
			</property>
		</bean>
		
		<!-- Shiro的过滤器工厂BEAN ： 间接地加载9个内置过滤器  -->
		<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">		
			<!-- 安全管理器 ：Shiro的核心组件，相当于大脑  -->
			<property name="securityManager" ref="securityManager" />		
			<!-- 认证相关： 指定登陆页面，当用户未登陆时访问资源，则自动跳转到此页面   -->
			<property name="loginUrl" value="/login.jsp" /> 
			<!-- 授权相关：指定错误页面,当用户登陆后访问没有权限的资源时，自动跳转到此页面 -->
			<property name="unauthorizedUrl" value="/error.html" /> 
				<property name="filters">
					<map>
						<entry key="phone" value-ref="phoneFilter" />
					</map>
				</property>
			<!-- shiro连接约束配置,在这里使用自定义的动态获取资源类 -->  
    		<property name="filterChainDefinitionMap" ref="chainDefinitionSectionMetaSource" />
		</bean>
		
		
		<!-- 安全管理器 -->
		<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
			<property name="realm" ref="userRealm"></property>
		</bean>
		
		
		<!-- 自定义Realm -->
		<bean id="userRealm" class="cn.neusoft.realm.UserRealm">
			<property name="userService" ref="userService"></property>
			<property name="user" ref="user"></property>
		</bean>
		
	
</beans>

@Service
public class ChainDefinitionSectionMetaSource implements FactoryBean<Ini.Section>{
	
	@Autowired
	private UrlFilterDao urlFilterDao;
	//配置文件中的信息会注入进来
	public static String filterChainDefinitions;
	@Autowired
    private ShiroFilterFactoryBean shiroFilterFactoryBean;
	
	/** 
     * 默认premission字符串 
     */  
    public static final String PREMISSION_STRING="perms[\"{0}\"]";
    //初始化权限
	@Override
	public Section getObject() throws Exception {



		List<UrlFilter> list = urlFilterDao.selectall();
		Ini ini = new Ini();
		//加载默认的url  
        ini.load(filterChainDefinitions);
        Ini.Section section = ini.getSection(Ini.DEFAULT_SECTION_NAME);  
        //循环Resource的url,逐个添加到section中。section就是filterChainDefinitionMap,  
        //里面的键就是链接URL,值就是存在什么条件才能访问该链接  
        for (Iterator<UrlFilter> it = list.iterator(); it.hasNext();) {  
        	UrlFilter resource = it.next();  
            //如果不为空值添加到section中  
            if(!StringUtils.isEmpty(resource.getUrl()) && !StringUtils.isEmpty(resource.getPerms())) {  
                section.put(resource.getUrl(),  MessageFormat.format(PREMISSION_STRING,resource.getPerms()));  
            }  
        }
        
        section.put("/*.html", "authc");
        section.put("/*.action", "authc");
        section.put("/*", "authc");
        return section;  
	}

	public void setFilterChainDefinitions(String filterChainDefinitions) {
		this.filterChainDefinitions = filterChainDefinitions;
	}

}