SpringBoot2 学习9 集成Shiro 记住我

一时失言乱红尘 2021-07-26 15:33 414阅读 0赞

# 源码 #

https://gitee.com/bseaworkspace/springboot2all/tree/master/SpringBootShiroRememberMe

# 导包 #

<dependency>
    		    <groupId>org.apache.shiro</groupId>
    		    <artifactId>shiro-spring</artifactId>
    		    <version>1.4.0</version>
    		</dependency>

# 注入rememberMeManager #

@Bean  
        public SecurityManager securityManager(){  
           DefaultWebSecurityManager securityManager =  new DefaultWebSecurityManager();
           securityManager.setRealm(shiroRealm());
           securityManager.setRememberMeManager(rememberMeManager());
           return securityManager;  
        }

# 设置CookieRememberMeManager #

/**
    	 * cookie对象
    	 * @return
    	 */
    	public SimpleCookie rememberMeCookie() {
    		// 设置cookie名称，对应login.html页面的<input type="checkbox" name="rememberMe"/>
    		SimpleCookie cookie = new SimpleCookie("rememberMe");
    		// 设置cookie的过期时间，单位为秒，这里为一天
    		cookie.setMaxAge(86400);
    		return cookie;
    	}
    	
    	/**
    	 * cookie管理对象
    	 * @return
    	 */
    	public CookieRememberMeManager rememberMeManager() {
    		//Cookie 数据存在客户端的浏览器
    		CookieRememberMeManager cookieRememberMeManager = new CookieRememberMeManager();
    		cookieRememberMeManager.setCookie(rememberMeCookie());
    		// rememberMe cookie加密的密钥 
    		cookieRememberMeManager.setCipherKey(Base64.decode("3AvVhmFLUs0KTA3Kprsdag=="));
    		return cookieRememberMeManager;
    	}

# ShiroRealm #

package com.zz.config;
    
    import javax.annotation.Resource;
    
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.IncorrectCredentialsException;
    import org.apache.shiro.authc.LockedAccountException;
    import org.apache.shiro.authc.SimpleAuthenticationInfo;
    import org.apache.shiro.authc.UnknownAccountException;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import org.springframework.beans.factory.annotation.Autowired;
    
    import com.zz.entity.User;
    import com.zz.repository.UserRepository;
    
    //import com.springboot.dao.UserMapper;
    //import com.springboot.pojo.User;
    
    public class ShiroRealm extends AuthorizingRealm {
    
    	@Resource
    	private UserRepository userRepository;
    
    	/**
    	 * 获取用户角色和权限
    	 */
    	@Override
    	protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principal) {
    		return null;
    	}
    
    	/**
    	 * 登录认证
    	 */
    	@Override
    	protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
    		String userName = (String) token.getPrincipal();
    		String password = new String((char[]) token.getCredentials());
    
    		System.out.println("用户" + userName + "认证-----ShiroRealm.doGetAuthenticationInfo");
    //		User user = userMapper.findByUserName(userName);
    		User user = userRepository.findByName(userName);
    //		User user=new User();
    		if (user == null) {
    			throw new UnknownAccountException("用户名错误！");
    		}
    		//1. MD5加密不可以破解
    		//2. 登录比较的是，两个密文
    		if (!password.equals(user.getPwd())) {
    			throw new IncorrectCredentialsException("密码错误！");
    		}
    		if (user.getStatus().equals("0")) {
    			throw new LockedAccountException("账号已被锁定,请联系管理员！");
    		}
    		SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(user, password, getName());
    		return info;
    	}
    
    }

# HTML #

<!DOCTYPE html>
    <html>
    <head>
      <title>Bootstrap 实例</title>
      <meta charset="utf-8">
      <meta name="viewport" content="width=device-width, initial-scale=1">
      <link rel="stylesheet" href="https://cdn.staticfile.org/twitter-bootstrap/4.1.0/css/bootstrap.min.css">
      <script src="https://cdn.staticfile.org/jquery/3.2.1/jquery.min.js"></script>
      <script src="https://cdn.staticfile.org/popper.js/1.12.5/umd/popper.min.js"></script>
      <script src="https://cdn.staticfile.org/twitter-bootstrap/4.1.0/js/bootstrap.min.js"></script>
    </head>
    <body>
    
    <div class="container">
      <h2>堆叠表单</h2>
      <form>
        <div class="form-group">
          <label for="email">Email:</label>
          <input type="email" class="form-control" id="email" placeholder="Enter email">
        </div>
        <div class="form-group">
          <label for="pwd">Password:</label>
          <input type="password" class="form-control" id="pwd" placeholder="Enter password">
        </div>
        <div class="form-check">
          <label class="form-check-label">
            <input class="form-check-input" name='rememberMe' type="checkbox"> Remember me
          </label>
        </div>
        <button type="button" id="subtn" class="btn btn-primary">Submit</button>
      </form>
    </div>
    <script type="text/javascript">
    
    $("#subtn").click(function(){
    	var rememberMe =$("input[name='rememberMe']").is(':checked');
    	$.post("/r/login", { "username": $("#email").val(),"password": $("#pwd").val(),"rememberMe": rememberMe },
    	        function(data){
    	        console.log(data); //  
    	        window.location.href="index1.html";
    	        }, "json");
    });
    
    
    </script>
    </body>
    </html>