spring-shiro 安全框架配置

「爱情、让人受尽委屈。」 2021-11-02 01:06 334阅读 0赞

<bean id="authRealm" class="com.aaa.ssm.shiro.AuthRealm">
        <property name="credentialsMatcher" ref="credentialsMatcher"></property>
    </bean>
    
    
    <bean id="credentialsMatcher" class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
        
        <property name="hashAlgorithmName" value="md5"></property>
        
        <property name="hashIterations" value="5"></property>
    </bean>
    
    
    
    <bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">
        
        <property name="globalSessionTimeout" value="1800000"></property>
    </bean>
    
    
    <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
        
        <property name="realm" ref="authRealm"></property>
        
        <property name="sessionManager" ref="sessionManager"></property>
    </bean>
    
    
    <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
        
        <property name="securityManager" ref="securityManager"></property>
        
        <property name="loginUrl" value="user/toLogin.do"></property>
        
        <property name="unauthorizedUrl" value="../error.jsp"></property>
        
        <property name="filterChainDefinitions">
            <value>
                
                /static/*=anon
                /user/login.do=anon
                /user/toLogin.do=anon
                /user/register.do=anon
                /login.jsp=anon
                /user/index.do=anon
                /register.jsp=anon
                
                /user/logout.do=logout
                
                /user/*.do=perms[user]
                
                /**=authc
                /*/*=authc
            </value>
        </property>
    </bean>

转载于:https://www.cnblogs.com/LFY001023/p/11049305.html