<welcome-file-list>
    <welcome-file>index.jsp</welcome-file>
</welcome-file-list>

  <!-- Apache Shiro -->
  <filter>
    <filter-name>shiroFilter</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    <init-param>
      <param-name>targetFilterLifecycle</param-name>
      <param-value>true</param-value>
    </init-param>
  </filter>
  <filter-mapping>
    <filter-name>shiroFilter</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>

  <!-- PageCache, cache .html suffix.
  <filter>
    <filter-name>PageCacheFilter</filter-name>
    <filter-class>com.thinkgem.jeesite.common.filter.PageCachingFilter</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>PageCacheFilter</filter-name>
    <url-pattern>/</url-pattern>
  </filter-mapping>
  <filter-mapping>
    <filter-name>PageCacheFilter</filter-name>
    <url-pattern>*.html</url-pattern>
  </filter-mapping>-->

  <!-- SiteMesh -->
  <filter>
    <filter-name>sitemeshFilter</filter-name>
    <filter-class>com.opensymphony.sitemesh.webapp.SiteMeshFilter</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>sitemeshFilter</filter-name>
    <url-pattern>/a/*</url-pattern>
  </filter-mapping>
  <filter-mapping>
    <filter-name>sitemeshFilter</filter-name>
    <url-pattern>/f/*</url-pattern>
  </filter-mapping>

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation="
    http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd
    http://www.springframework.org/schema/context  http://www.springframework.org/schema/context/spring-context-4.0.xsd"
  default-lazy-init="true">

  <description>Shiro Configuration</description>

    <!-- 加载配置属性文件 -->
  <context:property-placeholder ignore-unresolvable="true" location="classpath:jeesite.properties" />
  
  <!-- Shiro权限过滤过滤器定义 -->
  <bean name="shiroFilterChainDefinitions" class="java.lang.String">
    <constructor-arg>
      <value>
        /static/** = anon
        /userfiles/** = anon
        ${adminPath}/cas = cas
        ${adminPath}/login = authc
        ${adminPath}/isValidateKlp = anon
        ${adminPath}/queryLoingname = anon
        ${adminPath}/ukeyIsExist = anon
        ${adminPath}/validSlider/** = anon
        ${adminPath}/dataInterface/** = anon
        ${adminPath}/sys/forget/** = anon<!-- 登录页忘记密码 -->
        ${adminPath}/logout = logout
        ${adminPath}/** = user
        /act/rest/service/editor/** = perms[act:model:edit]
        /act/rest/service/model/** = perms[act:model:edit]
        /act/rest/service/** = user
        /ReportServer/** = user
        
        ${mobilePath}/** = anon
      </value>
    </constructor-arg>
  </bean>
  
  <!-- 安全认证过滤器 -->
  <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    <property name="securityManager" ref="securityManager" /><!-- 
    <property name="loginUrl" value="${cas.server.url}?service=${cas.project.url}${adminPath}/cas" /> -->
    <property name="loginUrl" value="${adminPath}/login" />
    <property name="successUrl" value="${adminPath}?login" />
    <property name="filters">
            <map>
                <entry key="cas" value-ref="casFilter"/>
                <entry key="authc" value-ref="formAuthenticationFilter"/>
            </map>
        </property>
    <property name="filterChainDefinitions">
      <ref bean="shiroFilterChainDefinitions"/>
    </property>
  </bean>
  
  <!-- CAS认证过滤器 -->  
  <bean id="casFilter" class="org.apache.shiro.cas.CasFilter">  
    <property name="failureUrl" value="${adminPath}/login"/>
  </bean>
  
  <!-- 定义Shiro安全管理配置 -->
  <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    <property name="realm" ref="systemAuthorizingRealm" />
    <property name="sessionManager" ref="sessionManager" />
    <property name="cacheManager" ref="shiroCacheManager" />
  </bean>
  
  <!-- 自定义会话管理配置 -->
  <bean id="sessionManager" class="com.thinkgem.jeesite.common.security.shiro.session.SessionManager"> 
    <property name="sessionDAO" ref="sessionDAO"/>
    
    <!-- 会话超时时间，单位：毫秒  -->
    <property name="globalSessionTimeout" value="${session.sessionTimeout}"/>
    
    <!-- 定时清理失效会话, 清理用户直接关闭浏览器造成的孤立会话   -->
    <property name="sessionValidationInterval" value="${session.sessionTimeoutClean}"/>
<!--      <property name="sessionValidationSchedulerEnabled" value="false"/> -->
    <property name="sessionValidationSchedulerEnabled" value="true"/>
    
    <property name="sessionIdCookie" ref="sessionIdCookie"/>
    <property name="sessionIdCookieEnabled" value="true"/>
  </bean>
  
  <!-- 指定本系统SESSIONID, 默认为: JSESSIONID 问题: 与SERVLET容器名冲突, 如JETTY, TOMCAT 等默认JSESSIONID,
    当跳出SHIRO SERVLET时如ERROR-PAGE容器会为JSESSIONID重新分配值导致登录会话丢失! -->
  <bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
      <constructor-arg name="name" value="jeesite.session.id"/>
      <property name="path" value="/" />
  </bean>

  <!-- 自定义Session存储容器 -->
  <bean id="sessionDAO" class="com.thinkgem.jeesite.common.security.shiro.session.JedisSessionDAO">
    <property name="sessionIdGenerator" ref="idGen" />
    <property name="sessionKeyPrefix" value="${redis.keyPrefix}:user:session_" />
  </bean> 
  <!--<bean id="sessionDAO" class="com.thinkgem.jeesite.common.security.shiro.session.CacheSessionDAO">
    <property name="sessionIdGenerator" ref="idGen" />
    <property name="activeSessionsCacheName" value="activeSessionsCache" />
    <property name="cacheManager" ref="shiroCacheManager" />
  </bean>-->
  
  <!-- 定义授权缓存管理器 -->
<!--  <bean id="shiroCacheManager" class="com.thinkgem.jeesite.common.security.shiro.cache.SessionCacheManager" /> -->
  <bean id="shiroCacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
    <property name="cacheManager" ref="cacheManager"/>
  </bean>
  
  <!-- 保证实现了Shiro内部lifecycle函数的bean执行 -->
  <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
  
  <!-- AOP式方法级权限检查  -->
  <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor">
    <property name="proxyTargetClass" value="true" />
  </bean>
  <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
      <property name="securityManager" ref="securityManager"/>
  </bean>
  
</beans>