BootDo平台免密登陆

刺骨的言语ヽ痛彻心扉 2022-02-25 19:24 298阅读 0赞

有时在应用中，有需要免密登陆，比如与微信集成、第三方集成(sso也可以)、短信免密登录等都有需求。在这一篇[Spring boot Shiro简单的配置与免密码登录][Spring boot Shiro]已经有非常细的说明了，但要切合应用转成自己的应用，把几个关键元素放出来，分享给大家。

package com.bootdo.system.config;
    
    import at.pollux.thymeleaf.shiro.dialect.ShiroDialect;
    import com.bootdo.common.config.Constant;
    import com.bootdo.common.redis.shiro.RedisCacheManager;
    import com.bootdo.common.redis.shiro.RedisManager;
    import com.bootdo.common.redis.shiro.RedisSessionDAO;
    import com.bootdo.system.shiro.UserRealm;
    //import org.apache.shiro.cache.CacheManager;
    import net.sf.ehcache.CacheManager;
    import org.apache.shiro.cache.ehcache.EhCacheManager;
    import org.apache.shiro.mgt.SecurityManager;
    import org.apache.shiro.session.SessionListener;
    import org.apache.shiro.session.mgt.eis.MemorySessionDAO;
    import org.apache.shiro.session.mgt.eis.SessionDAO;
    import org.apache.shiro.spring.LifecycleBeanPostProcessor;
    import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
    import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    import org.apache.shiro.web.session.mgt.DefaultWebSessionManager;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.beans.factory.annotation.Value;
    import org.springframework.cache.ehcache.EhCacheCacheManager;
    import org.springframework.cache.ehcache.EhCacheManagerFactoryBean;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.core.io.ClassPathResource;
    
    import java.util.ArrayList;
    import java.util.Collection;
    import java.util.LinkedHashMap;
    
    /**
     * @author bootdo 1992lcg@163.com
     */
    @Configuration
    public class ShiroConfig {
        @Value("${spring.redis.host}")
        private String host;
        @Value("${spring.redis.password}")
        private String password;
        @Value("${spring.redis.port}")
        private int port;
        @Value("${spring.redis.timeout}")
        private int timeout;
    
        @Value("${spring.cache.type}")
        private String cacheType ;
    
        @Value("${server.session-timeout}")
        private int tomcatTimeout;
    
        @Bean
        public static LifecycleBeanPostProcessor getLifecycleBeanPostProcessor() {
            return new LifecycleBeanPostProcessor();
        }
    
        /**
         * ShiroDialect，为了在thymeleaf里使用shiro的标签的bean
         *
         * @return
         */
        @Bean
        public ShiroDialect shiroDialect() {
            return new ShiroDialect();
        }
    
        @Bean
        ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager) {
            ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
            shiroFilterFactoryBean.setSecurityManager(securityManager);
            shiroFilterFactoryBean.setLoginUrl("/login");
            shiroFilterFactoryBean.setSuccessUrl("/index");
            shiroFilterFactoryBean.setUnauthorizedUrl("/403");
            LinkedHashMap<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
            filterChainDefinitionMap.put("/login","anon");
            filterChainDefinitionMap.put("/getVerify","anon");
            filterChainDefinitionMap.put("/css/**", "anon");
            filterChainDefinitionMap.put("/js/**", "anon");
            filterChainDefinitionMap.put("/weui/**", "anon");
            filterChainDefinitionMap.put("/mobile/wuxi", "anon"); //无锡扫描界面
            filterChainDefinitionMap.put("/fonts/**", "anon");
            filterChainDefinitionMap.put("/img/**", "anon");
            filterChainDefinitionMap.put("/docs/**", "anon");
            filterChainDefinitionMap.put("/druid/**", "anon");
            filterChainDefinitionMap.put("/upload/**", "anon");
            filterChainDefinitionMap.put("/files/**", "anon");
            filterChainDefinitionMap.put("/logout", "logout");
            filterChainDefinitionMap.put("/", "anon");
            filterChainDefinitionMap.put("/blog", "anon");
            filterChainDefinitionMap.put("/blog/open/**", "anon");
            filterChainDefinitionMap.put("/**", "authc");
            shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
            return shiroFilterFactoryBean;
        }
    
    
        @Bean
        public SecurityManager securityManager(@Qualifier("myRetryLimitCredentialsMatcher") MyRetryLimitCredentialsMatcher matcher) {
            DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
            //设置realm.
            securityManager.setRealm(userRealm(matcher));
            // 自定义缓存实现 使用redis
            if (Constant.CACHE_TYPE_REDIS.equals(cacheType)) {
                securityManager.setCacheManager(rediscacheManager());
            } else {
                securityManager.setCacheManager(ehCacheManager());
            }
            securityManager.setSessionManager(sessionManager());
            return securityManager;
        }
    
        @Bean(name ="userRealm")
        public UserRealm userRealm(MyRetryLimitCredentialsMatcher matcher) {
            UserRealm userRealm = new UserRealm();
            userRealm.setCredentialsMatcher(matcher);
            return userRealm;
        }
    
        /**
         * 开启shiro aop注解支持.
         * 使用代理方式;所以需要开启代码支持;
         *
         * @param securityManager
         * @return
         */
        @Bean
        public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
            AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
            authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
            return authorizationAttributeSourceAdvisor;
        }
        
        /**
         * 密码匹配凭证管理器
         *
         * @return
         */
        @Bean(name = "myRetryLimitCredentialsMatcher")
        public MyRetryLimitCredentialsMatcher hashedCredentialsMatcher() {
            MyRetryLimitCredentialsMatcher hashedCredentialsMatcher = new MyRetryLimitCredentialsMatcher();
            return hashedCredentialsMatcher;
        }
    
        /**
         * 配置shiro redisManager
         *
         * @return
         */
        @Bean
        public RedisManager redisManager() {
            RedisManager redisManager = new RedisManager();
            redisManager.setHost(host);
            redisManager.setPort(port);
            redisManager.setExpire(1800);// 配置缓存过期时间
            //redisManager.setTimeout(1800);
            redisManager.setPassword(password);
            return redisManager;
        }
    
        /**
         * cacheManager 缓存 redis实现
         * 使用的是shiro-redis开源插件
         *
         * @return
         */
        public RedisCacheManager rediscacheManager() {
            RedisCacheManager redisCacheManager = new RedisCacheManager();
            redisCacheManager.setRedisManager(redisManager());
            return redisCacheManager;
        }
    
    
        /**
         * RedisSessionDAO shiro sessionDao层的实现 通过redis
         	* 使用的是shiro-redis开源插件
         */
        @Bean
        public RedisSessionDAO redisSessionDAO() {
            RedisSessionDAO redisSessionDAO = new RedisSessionDAO();
            redisSessionDAO.setRedisManager(redisManager());
            return redisSessionDAO;
        }
    
        @Bean
        public SessionDAO sessionDAO() {
            if (Constant.CACHE_TYPE_REDIS.equals(cacheType)) {
                return redisSessionDAO();
            } else {
                return new MemorySessionDAO();
            }
        }
    
        /**
         * shiro session的管理
         */
        @Bean
        public DefaultWebSessionManager sessionManager() {
            DefaultWebSessionManager sessionManager = new DefaultWebSessionManager();
            sessionManager.setGlobalSessionTimeout(tomcatTimeout * 1000);
            sessionManager.setSessionDAO(sessionDAO());
            Collection<SessionListener> listeners = new ArrayList<SessionListener>();
            listeners.add(new BDSessionListener());
            sessionManager.setSessionListeners(listeners);
            return sessionManager;
        }
    
        @Bean
        public EhCacheManager ehCacheManager() {
            EhCacheManager em = new EhCacheManager();
            em.setCacheManager(cacheManager());
            return em;
        }
    
        @Bean("cacheManager2")
        CacheManager cacheManager(){
            return CacheManager.create();
        }
    
    
    }

package com.bootdo.system.config;
    
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
    import org.springframework.context.annotation.Configuration;
    
    import com.bootdo.system.shiro.CustomToken;
    import com.bootdo.system.shiro.LoginType;
    
    @Configuration
    public class MyRetryLimitCredentialsMatcher extends HashedCredentialsMatcher {
    	@Override
        public boolean doCredentialsMatch(AuthenticationToken authcToken, AuthenticationInfo info) {
            CustomToken tk = (CustomToken) authcToken;
            if(tk.getType().equals(LoginType.NOPASSWD)){
                return true;
            }
            
            boolean matches = doCredentialsMatch(authcToken, info);
            return matches;
        }
    	
    }

[Spring boot Shiro]: https://blog.csdn.net/ljh1993531/article/details/82591524