<dependency>

          <groupId>org.apache.geronimo.bundles</groupId>

          <artifactId>aspectjweaver</artifactId>

          <version>1.6.8_2</version>

</dependency>

<dependency>

          <groupId>org.aspectj</groupId>

          <artifactId>aspectjrt</artifactId>

          <version>1.8.10</version>

</dependency>

/**

   * 注解访问授权动态拦截，不然不会执行doGetAuthenticationInfo

   *

   * @param securityManager

   * @return

   */

  @Bean

  public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {

    AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();

    authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);

    return authorizationAttributeSourceAdvisor;

  }

  /**

   * 授权未通过时(403)错误处理,没有这个不会跳转到403页面

   *

   * @return

   */

  @Bean

  public SimpleMappingExceptionResolver getSimpleMappingExceptionResolver() {

    SimpleMappingExceptionResolver simpleMappingExceptionResolver = new SimpleMappingExceptionResolver();

    Properties mappings = new Properties();

    mappings.setProperty("org.apache.shiro.authz.UnauthorizedException", "/error/403");

    simpleMappingExceptionResolver.setExceptionMappings(mappings);

    return simpleMappingExceptionResolver;

  }

@RequiresPermissions("user:test")

@GetMapping("/test")

public String test() {

  String strResult = "/test";

  return strResult;

}