一，首先在登入頁面加入以下程式碼，作用是使用ifrme等載入頁面時，跳轉登入頁面會巢狀在框架內，讓登入頁面全屏

<script language="JavaScript">
    if (window != top)
    {
        top.location.href = location.href;
    }
</script>

二，在web.xml中配置過濾器，過濾所有的action判斷session是否過期

<!-- session過濾器配置相關 -->
<filter>
  <filter-name>SessionFilter</filter-name
 
>
  <filter-class>com.wonders.filter.SessionFilter</filter-class>
</filter>
<filter-mapping>
  <filter-name>SessionFilter</filter-name>
  <url-pattern>*.action</url-pattern>
  <!--<dispatcher>FORWARD</dispatcher>-->
  <!--在這種情況下，如果請求是以/contract/…或者/user/…開頭的，並且是通過request dispatcher的forward方法傳遞過來或者直接從客戶端傳遞過來的，則必須經過這個過濾器。-->
 

  <!--<dispatcher>REQUEST</dispatcher>-->
</filter-mapping>

三，相關的過濾類

該類中主要判斷action是否是生成驗證碼和跳轉到登入頁面的類，如果是以上兩個類則不過濾，否則無法顯示登入頁面和驗證碼，除此以外的都可以過濾

import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet
 
.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.wonders.admin.model.User;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.Subject;

public class SessionFilter implements Filter {
    @Override
    public void destroy() {
        // 過濾器銷燬，一般是釋放資源
    }
    /**
     * 某些url需要登陸才能訪問（session驗證過濾器）
     */
    @Override
    public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2)
            throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) arg0;
        HttpServletResponse response = (HttpServletResponse) arg1;
//        HttpSession session = request.getSession();
        //判斷session是否過期
        HttpServletRequest sr = (HttpServletRequest) request;
        String strURL = sr.getRequestURL().toString();

        //此處是判斷url如果是登入頁面和生成驗證碼的action則不執行過濾
        if (strURL.indexOf("/code.action") == -1 && strURL.indexOf("/login.action")== -1) {
            //獲得session判斷是否存在
            Subject currentUser = SecurityUtils.getSubject();
            Session session = currentUser.getSession();
            User user =(User)session.getAttribute("user");
            if (user == null) {
                String errors = "您還沒有登入，或者session已過期。請先登陸!";
                request.setAttribute("Message", errors);
                //跳轉至登入頁面
                request.getRequestDispatcher("/login.jsp").forward(request, response);
            } else {
                arg2.doFilter(request, response);
            }
        }
        else
        {
            arg2.doFilter(request, response);
        }
    }

    @Override
    public void init(FilterConfig arg0) throws ServletException {
        // 初始化操作，讀取web.xml中過濾器配置的初始化引數，滿足你提的要求不用此方法
    }
}

通過以上過濾就可判斷session過期時自動跳轉到登入頁面，而不是點選操作時沒反應。