您需要实现自定义的Shiro过滤器.像这样：import javax.servlet.ServletRequest;import javax.servlet.ServletResponse;import java.io.IOException ;import javax.servlet.http.HttpServletResponse ;import org.apache.shiro.web.filter.authz.AuthorizationFilter…