Apache shiro阻止p:imageCropper primefaces

时间:2014-12-07 06:12:49

标签: java-ee primefaces jsf-2.2 shiro glassfish-4

我使用primefacess-5.1和apache shiro 1.2.2与pax-shiro 0.1.0叠加。所有东西都站在Glassfish 4.0上。我的问题是,当我在web.xml中评论下面的所有片段时

<filter>
    <filter-name>ShiroFilter</filter-name>
    <filter-class>org.apache.shiro.web.servlet.ShiroFilter</filter-class>
</filter>

<filter-mapping>
    <filter-name>ShiroFilter</filter-name>
    <url-pattern> /*</url-pattern>
    <dispatcher>REQUEST</dispatcher>
    <dispatcher>FORWARD</dispatcher>
    <dispatcher>INCLUDE</dispatcher>
    <dispatcher>ERROR</dispatcher>
</filter-mapping>

ImageCropper工作得很好但是shiro没有。当我取消注释上面的代码shiro工作正常,但当我按下p:imageCropper中的按钮裁剪时,我得到错误500 whitch你可以在下面看到。

            [2014-12-06T18:19:27.913+0100] [glassfish 4.0] [WARNING] [] [javax.enterprise.web] [tid: _ThreadID=23 _ThreadName=http-listener-1(1)] [timeMillis: 1417886367913] [levelValue: 900] [[
  StandardWrapperValve[Faces Servlet]: Servlet.service() for servlet Faces Servlet threw exception
java.lang.NullPointerException
    at org.primefaces.component.imagecropper.ImageCropperRenderer.getConvertedValue(ImageCropperRenderer.java:141)
    at javax.faces.component.UIInput.getConvertedValue(UIInput.java:1046)
    at javax.faces.component.UIInput.validate(UIInput.java:976)
    at javax.faces.component.UIInput.executeValidate(UIInput.java:1249)
    at javax.faces.component.UIInput.processValidators(UIInput.java:712)
    at javax.faces.component.UIComponentBase.processValidators(UIComponentBase.java:1261)
    at javax.faces.component.UIForm.processValidators(UIForm.java:253)
    at javax.faces.component.UIComponentBase.processValidators(UIComponentBase.java:1261)
    at javax.faces.component.UIComponentBase.processValidators(UIComponentBase.java:1261)
    at javax.faces.component.UIViewRoot.processValidators(UIViewRoot.java:1195)
    at com.sun.faces.lifecycle.ProcessValidationsPhase.execute(ProcessValidationsPhase.java:76)
    at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101)
    at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:198)
    at javax.faces.webapp.FacesServlet.service(FacesServlet.java:646)
    at org.apache.catalina.core.StandardWrapper.service(StandardWrapper.java:1682)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:344)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)
    at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
    at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
    at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
    at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
    at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
    at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
    at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
    at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
    at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
    at org.apache.shiro.web.servlet.AbstractShiroFilter.executeChain(AbstractShiroFilter.java:449)
    at org.apache.shiro.web.servlet.AbstractShiroFilter$1.call(AbstractShiroFilter.java:365)
    at org.apache.shiro.subject.support.SubjectCallable.doCall(SubjectCallable.java:90)
    at org.apache.shiro.subject.support.SubjectCallable.call(SubjectCallable.java:83)
    at org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:383)
    at org.apache.shiro.web.servlet.AbstractShiroFilter.doFilterInternal(AbstractShiroFilter.java:362)
    at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:256)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:316)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:160)
    at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:734)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:673)
    at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:99)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:174)
    at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:357)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:260)
    at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:188)
    at org.glassfish.grizzly.http.server.HttpHandler.runService(HttpHandler.java:191)
    at org.glassfish.grizzly.http.server.HttpHandler.doHandle(HttpHandler.java:168)
    at org.glassfish.grizzly.http.server.HttpServerFilter.handleRead(HttpServerFilter.java:189)
    at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119)
    at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:288)
    at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:206)
    at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:136)
    at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:114)
    at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77)
    at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:838)
    at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:113)
    at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:115)
    at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:55)
    at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:135)
    at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:564)
    at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:544)
    at java.lang.Thread.run(Thread.java:744)
]]

我的JSF表单在

下面
<h:body>

<h:form enctype="multipart/form-data">
    <p:growl id="msgs" showDetail="true"/>

    <h:panelGrid columns="2">
        <p:imageCropper id="ic"  value="#{cropperView.croppedImage}" image="http://rg-rgb-szkola:8080/dpsmvn-web/admin/images/tmp/portret_wup.jpg" initialCoords="225,75,300,125"/>
        <p:graphicImage alt="po wykadrowaniu" id="cropped" rendered="#{cropperView.photocomlete==1?true:false}" library="images"  name="twarze/pracownicy/#{cropperView.newImageName}.jpg" /> 
    </h:panelGrid>

    <p:commandButton value="Crop" action="#{cropperView.crop}"   update="msgs ic cropped" icon="ui-icon-scissors" ajax="false"/>
    <p:commandButton value="Zapisz" action="#{cropperView.saveImage()}" ajax="false" />
</h:form>

        </h:body>

我的shiro配置在

之下
[main]  

authc.successUrl = /witamy.xhtml
authc.loginUrl = /login.xhtml
roles.unauthorizedUrl = /accessdenied.xhtml
ssl.enabled = false

[urls]

/javax.faces.resource/** = anon
/ = anon
/images/tla/sloneczniki.jpg = anon
/images/tla/liscie-tlo.jpg = anon
/index.xhtml = anon
/login.xhtml = authc
/logout.xhtml = logout

/witamy.xhtml = authc


/pielegniarka/** = authc, roles[adminpielegniarka]
/admin/** = authc, roles[root]

/** = authc

变量ImageCropper imagecropper的代码可以在下面,并且在@SessionScoped的CDI bean中。我也可以说错误的原因是这个变量的NULL值。我想shiro并没有认识到这个变量的mime类型。我可以这么说,因为在开始我使用这个组件工作时我收到警告警告:JSF1091

private CroppedImage croppedImage;

public CroppedImage getCroppedImage() {
    return croppedImage;
}

public void setCroppedImage(CroppedImage croppedImage) {
    this.croppedImage = croppedImage;
}

我的问题是如何将apache shiro与p:imageCropper primefaces组件同步?

1 个答案:

答案 0 :(得分:0)

解决方案证明非常简单。我只是添加线 /admin/cropprofile.xhtml = authc 到我的shiro.ini 这是具有p:imageCropper组件和授权权限的站点 为了确保一切都有效,我还添加了一行 / resources / ** = anon但我认为没有必要 所以我可以说我解决了这个问题! :) 我的所有shiro.ini文件都在

之下
[main]

authc.successUrl = /witamy.xhtml
authc.loginUrl = /login.xhtml
roles.unauthorizedUrl = /accessdenied.xhtml
ssl.enabled = false

[urls]

/javax.faces.resource/** = anon
/resources/** = anon
/ = anon
/images/tla/sloneczniki.jpg = anon
/images/tla/liscie-tlo.jpg = anon
/admin/cropprofile.xhtml = authc
/index.xhtml = anon
/login.xhtml = authc
/logout.xhtml = logout

/witamy.xhtml = authc

/pielegniarka/** = authc, roles[adminpielegniarka]
/admin/** = authc, roles[root]

/** = authc