自定义过滤器获取不到session问题

问题现象

action请求中request对象为ShiroHttpServletRequest, 可以取到session内容 

而在第一个自定义过滤器中request对象中或取不到session内容

原因

session由shiro管理，凡是在shiro过滤器顺序之前的自定义过滤器都取不到session内容

根本原因，多个自定义过滤器执行顺序问题

解决方法

将shiro过滤器放在第一个位置

 

 

代码示例

1、过滤器代码

    @Override
    protected String getUserPin(HttpServletRequest httpServletRequest) {
        HttpSession s = httpServletRequest.getSession(false);
        if (s != null) {
            UserInfoService usersService = (UserInfoService) WebApplicationContextUtils.getWebApplicationContext(httpServletRequest.getServletContext()).getBean("userInfoService");
            log.info("usersService#:{}", JSON.toJSONString(usersService));
            Long userId = (Long) s.getAttribute(Constants.SESSION_USER_ID);
            UserInfo userInfo = usersService.getUserInfoById(Integer.valueOf(userId.toString()));
            return userInfo != null ? userInfo.getStaffNo() : "";
        }
        return "erp";
    }

  
    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        HttpServletRequest req = (HttpServletRequest) servletRequest;
        String a = req.getRequestURI();
        if (a.contains(".xls") || a.contains(".xlsx")
                || a.contains("export") || a.contains("download")
                || a.contains("Export") || a.contains("Download")) {
            filterChain.doFilter(servletRequest, servletResponse);
        } else {
            super.doFilter(servletRequest, servletResponse, filterChain);
        }
    }

2、在application-context.xml 注册 用户bean

<bean id="userInfoService" class="com.xxx.biz.impl.UserInfoServiceImpl" />

3、Shiro过滤器放到最上面

<!-- Apache Shiro -->
    <filter>
        <filter-name>shiroFilter</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
        <init-param>
            <param-name>targetFilterLifecycle</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>