HTTP Status 500 - No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton. This is an invalid application configuration.
上面浏览器报错原因
下面工具报错原因
ERROR DefaultDispatcherErrorHandler:42 - Exception occurred during processing request: No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton. This is an invalid application configuration.
org.apache.shiro.UnavailableSecurityManagerException:No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton. This is an invalid application configuration.
原因:
web.xml文件中filter顺序问题:多个filter的执行顺序从上往下
做用户登录权限效验出错,由于把shiro filter写到了struts filter后面,当登录的时候会先走struts的filter
大概意思就是shiro无法管理到这个请求,而你又在配置文件里设置要shiro管理这个请求
解决:
shiro filter放在struts2 filter前面
如未解决,提供其他解决方案:
<filter>
<filter-name>shiroFilter</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
<filter-name>shiroFilter</filter-name>
<url-pattern>/*</url-pattern>
<dispatcher>REQUEST</dispatcher>
<dispatcher>FORWARD</dispatcher>
<dispatcher>INCLUDE</dispatcher>
<dispatcher>ERROR</dispatcher>
</filter-mapping>
加上dispatcher
作用:
转发,错误等请求,必须经过这个过滤器。
org.apache.shiro.authc.IncorrectCredentialsException:Submitted credentials for token [org.apache.shiro.authc.UsernamePasswordToken - lisi, rememberMe=false] did not match the expected credentials.
登录时报错
原因:
F12查看到只有用户名,密码未传递过来,表单未填写input name=password
搜索了看到还有种可能,数据库密码是hash,form表单传递过来的为明文,导致不一致.
我并不是这种情况,所以没有去使用