springboot整合shiro @RequiresPermissions 无效但是@RequiresRoles 可以用

左手的ㄟ右手 2022-02-19 23:01 424阅读 0赞

我直接贴代码：

## pom.xml ##

<dependency>
    	      <groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter</artifactId>
    	    </dependency>
    	    
    	    <dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-web</artifactId>			
    		</dependency>
    		
    		
    		<dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-log4j2</artifactId>
            </dependency>
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-thymeleaf</artifactId>			
    		</dependency>	
    		
    		<dependency>
    		    <groupId>org.springframework.boot</groupId>
    		    <artifactId>spring-boot-starter-cache</artifactId>
    		</dependency>
    		<dependency>
    		    <groupId>net.sf.ehcache</groupId>
    		    <artifactId>ehcache</artifactId>
    		</dependency>
    
    			
    		
    		<dependency>
    		<groupId>org.apache.shiro</groupId>
    		<artifactId>shiro-spring</artifactId>
    		<version>1.2.5</version>
    	</dependency>
    	<dependency>
    		<groupId>org.apache.shiro</groupId>
    		<artifactId>shiro-ehcache</artifactId>
    		<version>1.2.5</version>
    	</dependency>
    	<dependency>
    		<groupId>com.github.theborakompanioni</groupId>
    		<artifactId>thymeleaf-extras-shiro</artifactId>
    		<version>1.2.1</version>
    	</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-test</artifactId>
    			<scope>test</scope>
    		</dependency>
    		
    			<dependency>
    			<groupId>org.mybatis.spring.boot</groupId>
    			<artifactId>mybatis-spring-boot-starter</artifactId>
    			<version>1.3.1</version>
    		</dependency>
    		  
            
    		<dependency>
    		    <groupId>com.github.pagehelper</groupId>
    		    <artifactId>pagehelper-spring-boot-starter</artifactId>
    		    <version>1.1.1</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>mysql</groupId>
    			<artifactId>mysql-connector-java</artifactId>
    			<scope>runtime</scope>
    		</dependency>
    				
    		<dependency>
    			<groupId>io.springfox</groupId>
    			<artifactId>springfox-swagger2</artifactId>
    			<version>2.7.0</version>
    		</dependency>
            
            <dependency>
    			<groupId>commons-fileupload</groupId>
    			<artifactId>commons-fileupload</artifactId>
    			<version>1.3.1</version>
    		</dependency>
    		
    		 <dependency>
    			<groupId>io.springfox</groupId>
    			<artifactId>springfox-swagger-ui</artifactId>
    			<version>2.7.0</version>
    		 </dependency>
    		 
    		 <dependency>
    			    <groupId>com.belerweb</groupId>
    			    <artifactId>pinyin4j</artifactId>
    			    <version>2.5.0</version>
    			</dependency>
    			
    			
    			<dependency>
    				<groupId>com.nimbusds</groupId>
    				<artifactId>oauth2-oidc-sdk</artifactId>
    				<version>4.5</version>
    			</dependency>

## ShiroConfiguration.java ##

package com.xyz.configurer;
    
    import org.apache.shiro.spring.LifecycleBeanPostProcessor;
    import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
    import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
    import org.springframework.beans.factory.annotation.Qualifier;
    
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.context.annotation.DependsOn;
    
    import com.xyz.realm.AuthRealm;
    
    
    
    import java.util.LinkedHashMap;
    
    import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
    import org.apache.shiro.cache.ehcache.EhCacheManager;
    import org.apache.shiro.mgt.SecurityManager;
    @Configuration
    public class ShiroConfiguration {
    	
    	
    	@Bean
        public ShiroFilterFactoryBean shiroFilter(@Qualifier("securityManager")SecurityManager securityManager) {
            ShiroFilterFactoryBean bean=new ShiroFilterFactoryBean();
            bean.setSecurityManager(securityManager);     
            //配置访问权限
            LinkedHashMap<String, String> filterChainDefinitionMap=new LinkedHashMap<>();
            filterChainDefinitionMap.put("/static/**", "anon");
            filterChainDefinitionMap.put("/image/**", "anon");
            filterChainDefinitionMap.put("/layui/**", "anon");
            filterChainDefinitionMap.put("/jquery.min.js", "anon");
          
            filterChainDefinitionMap.put("/logout", "logout");
            filterChainDefinitionMap.put("/loginIn", "logout");
            //表示可以匿名访问          
            filterChainDefinitionMap.put("/**", "authc");
            
            //配置登录的url和登录成功的url
            bean.setLoginUrl("/login");
            // 登录成功后要跳转的链接
            bean.setSuccessUrl("/index");
          //未授权界面;
            bean.setUnauthorizedUrl("/403");
            bean.setFilterChainDefinitionMap(filterChainDefinitionMap);
            return bean;
        }
    
    	/**
    	 * 缓存管理器
    	 * @return
    	 */
    	@Bean
    	public EhCacheManager ehCacheManager(){
    	    EhCacheManager cacheManager = new EhCacheManager();
    	    cacheManager.setCacheManagerConfigFile("classpath:ehcache.xml");
    	    return cacheManager;
    	}
    
    
      //配置核心安全事务管理器
        @Bean
        public SecurityManager securityManager() {
           
            DefaultWebSecurityManager manager=new DefaultWebSecurityManager();
            manager.setRealm(authRealm());
            manager.setCacheManager(ehCacheManager());
            return manager;
        }
        //配置自定义的权限登录器
        @Bean
        @DependsOn("lifecycleBeanPostProcessor")
        public AuthRealm authRealm() {
            AuthRealm authRealm=new AuthRealm();
            authRealm.setCacheManager(ehCacheManager());
            //authRealm.setCredentialsMatcher(hashedCredentialsMatcher());
            return authRealm;
        }
    //    @Bean
    //    public HashedCredentialsMatcher hashedCredentialsMatcher(){
    //        HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
    //        hashedCredentialsMatcher.setHashAlgorithmName("md5");//散列算法:这里使用md5算法;
    //        hashedCredentialsMatcher.setHashIterations(2);//散列的次数，比如散列两次，相当于 md5( md5(""));
    //        return hashedCredentialsMatcher;
    //    }
        
        /**
         * Shiro生命周期处理器
         * @return
         */
        @Bean("lifecycleBeanPostProcessor")
        public LifecycleBeanPostProcessor lifecycleBeanPostProcessor(){
            return new LifecycleBeanPostProcessor();
        }
        
        /**
         * 自动创建代理
         * @return
         */
        @Bean
        @DependsOn("lifecycleBeanPostProcessor")
        public DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator(){
            DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
            advisorAutoProxyCreator.setProxyTargetClass(true);
            return advisorAutoProxyCreator;
        }
        
        /**
         *  开启shiro aop注解支持.
         *  使用代理方式;所以需要开启代码支持;否则@RequiresRoles等注解无法生效
         * @param securityManager
         * @return
         */
        @Bean
        public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager){
            AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
            authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
            return authorizationAttributeSourceAdvisor;
        }
    
    }

## AuthRealm ##

package com.xyz.realm;
    
    import java.util.List;
    
    import javax.annotation.Resource;
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.SimpleAuthenticationInfo;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.authz.SimpleAuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import org.springframework.context.annotation.Lazy;
    
    import com.xyz.model.Accout;
    import com.xyz.model.Functions;
    import com.xyz.model.Role;
    import com.xyz.service.AccoutService;
    import com.xyz.service.FunctionsService;
    import com.xyz.service.RoleService;
    
    public class AuthRealm extends AuthorizingRealm {
    	   @Resource
    	   @Lazy
           AccoutService accoutService;
    	   @Resource
    	   @Lazy
           RoleService roleService;
    	   @Resource
    	   @Lazy
    	   FunctionsService functionsService;
    	@Override
    	protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
    		UsernamePasswordToken uToken=(UsernamePasswordToken) token;
    		String uName=uToken.getUsername();
    		System.out.println(uName);
    		Accout  accout=accoutService.selectByName(uName);		
    		if(accout == null){
    		      return null;
    		    }
    		AuthenticationInfo authcInfo=new SimpleAuthenticationInfo(accout,accout.getAccoutPass(),this.getClass().getName());
    		super.clearCachedAuthorizationInfo(authcInfo.getPrincipals());
    		SecurityUtils.getSubject().getSession().setAttribute("login", accout);
    		return authcInfo;
    	}
    	
    	@Override
    	protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    		SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
    		Accout accout=(Accout) principals.getPrimaryPrincipal();
    		List<Role> roles=roleService.selectByAccoutId(accout.getAccoutId());		
    		for (Role role : roles) {
    			authorizationInfo.addRole(role.getRoleId().toString());			
    			List<Functions>functions=functionsService.selectByRoleId(role.getRoleId());			
    			for (Functions functions2 : functions) {
    				System.out.println(functions2.getFuncCode());
    				authorizationInfo.addStringPermission(functions2.getFuncCode());
    			  }
    		  }
    		return authorizationInfo;
    	}
    
    	
    
    }

## 运行起来只有@RequiresRoles 的配置可以实现权限控制，@RequiresPermissions完全没得用 ##