<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
 xmlns:util="http://www.springframework.org/schema/util"
 xmlns:aop="http://www.springframework.org/schema/aop"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xsi:schemaLocation="
 http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
 http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd
 http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop.xsd">


 <!-- 凭证匹配器 -->
 <bean id="credentialsMatcher" class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
 <property name="hashAlgorithmName" value="md5"/>
 <property name="hashIterations" value="1"/>
 <property name="storedCredentialsHexEncoded" value="true"/>
 </bean>

 <!-- Realm实现 -->
 <bean id="userRealm" class="com.giit.www.realm.UserRealm">
 <property name="credentialsMatcher" ref="credentialsMatcher"/>
 </bean>

 <!-- 安全管理器 -->
 <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
 <property name="realm" ref="userRealm"/>
 </bean>

 <!-- 相当于调用SecurityUtils.setSecurityManager(securityManager) -->
 <bean class="org.springframework.beans.factory.config.MethodInvokingFactoryBean">
 <property name="staticMethod" value="org.apache.shiro.SecurityUtils.setSecurityManager"/>
 <property name="arguments" ref="securityManager"/>
 </bean>

 <!-- 基于Form表单的身份验证过滤器 -->
 <bean id="formAuthenticationFilter" class="com.giit.www.filter.FormLoginFilter">
 </bean>

 <!-- Shiro的Web过滤器 -->
 <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
 <property name="securityManager" ref="securityManager"/>
 <property name="filters">
 <util:map>
 <entry key="authc" value-ref="formAuthenticationFilter"/>
 </util:map>
 </property>
 <property name="filterChainDefinitions">
 <value>
 /login = authc
 /logout = logout
 </value>
 </property>
 </bean>

</beans>