shiro web step by step example不起作用，stormpath已移动

<dependency>
    <groupId>org.apache.shiro</groupId>
    <artifactId>shiro-web</artifactId>
    <version>1.7.1</version>
</dependency>

[users]
username=password,role1,role2

<filter>
    <filter-name>shiroFilter</filter-name>
    <filter-class>org.apache.shiro.web.servlet.ShiroFilter</filter-class>
</filter>
<filter-mapping>
    <filter-name>shiroFilter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

Subject currentUser = SecurityUtils.getSubject();
if (!currentUser.isAuthenticated()) {
    UsernamePasswordToken token = new UsernamePasswordToken(username, password);
    token.setRememberMe(true);
    try {
        currentUser.login(token);
    } catch (AuthenticationException e) {
        // 身份验证失败
    }
}

if (currentUser.hasRole("role1")) {
    // 用户拥有role1角色，执行相应操作
} else {
    // 用户没有role1角色，执行其他操作
}