ShiroAjaxSessionFilter.java 文件源码

@Override
protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
    HttpServletRequest req = WebUtils.toHttp(request);
    String xmlHttpRequest = req.getHeader("X-Requested-With");
    if (StringUtils.isNotBlank(xmlHttpRequest)) {
        if (xmlHttpRequest.equalsIgnoreCase("XMLHttpRequest")) {
            HttpServletResponse res = WebUtils.toHttp(response);
            // 采用res.sendError(401);在Easyui中会处理掉error，$.ajaxSetup中监听不到
            res.setHeader("oauthstatus", "401");
            return false;
        }
    }
    return super.onAccessDenied(request, response);
}