Apache Shiro 认证失败处理

Shiro通过异常类来描述认证失败的原因，比如：

AuthenticationToken token = new UsernamePasswordToken(loginName,loginPwd);

Subject currentUser = SecurityUtils.getSubject();

try {

currentUser.login(token);

} catch (UnknownAccountException uae) {

log.info("username wasn't in the system.");

} catch (IncorrectCredentialsException ice) {

log.info("password didn't match.");

} catch (LockedAccountException lae) {

log.info(account for that username is locked - can't login.");

} catch (AuthenticationException ae) {

log.info("unexpected condition.");

}

Shiro自带的认证异常类类图如下：

所有的异常类都是继承AuthenticationExceptions。如果现有的异常类不符合您的要求，可以自定义AuthenticationExceptions来代表具体的异常情况。