title: Shiro web filter chain order policy
body: <p>Probably I'm in a kind of misunderstanding problem, but here is the thing:</p>
  
  <ul>
  <li>I want my <code>&lt;domain&gt;/index.html</code> publicly available and everything else should be protected.</li>
  </ul>
  
  <p>I'm using shiro web + guice:</p>
  
  <pre><code>...
  
  bindConstant().annotatedWith(Names.named("shiro.loginUrl")).to("/index.html");
  
  addFilterChain("/index.html", ANON);
  addFilterChain("/**", AUTHC);
  
  ...
  </code></pre>
  
  <p>This configuration is leading me to a "TOO MANY REDIRECTS LOOP" problem. Shiro documentation says <a href="http://shiro.apache.org/web.html#Web-URLPathExpressions" rel="nofollow">here</a> it uses a FIRST MATCH WIN policy, but I think I didn't get it well.</p>
  
  <p>Any thoughts?</p>