Shiro的认证整合SSH

- 日理万妓 2022-05-13 16:57 186阅读 0赞

完整项目代码：[https://download.csdn.net/download/zeal9s/10744751][https_download.csdn.net_download_zeal9s_10744751]

**1.新建或者导入一个SSH项目**  
项目模块图如下  
![在这里插入图片描述][70]  
![在这里插入图片描述][70 1]  
**2.导入shiro依赖到pom.xml**  
pom.xml

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
    	<modelVersion>4.0.0</modelVersion>
    	<groupId>SSH_02</groupId>
    	<artifactId>SSH_02</artifactId>
    	<packaging>war</packaging>
    	<version>0.0.1-SNAPSHOT</version>
    	<name>SSH_02 Maven Webapp</name>
    	<url>http://maven.apache.org</url>
    	<properties>
    		<spring.version>4.3.10.RELEASE</spring.version>
    	</properties>
    	<dependencies>
    		<dependency>
    			<groupId>junit</groupId>
    			<artifactId>junit</artifactId>
    			<version>4.12</version>
    			<scope>test</scope>
    		</dependency>
    		
    		<dependency>
    			<groupId>javax.servlet</groupId>
    			<artifactId>javax.servlet-api</artifactId>
    			<version>4.0.0-b07</version>
    			<scope>provided</scope>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.apache.struts</groupId>
    			<artifactId>struts2-core</artifactId>
    			<version>2.3.33</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-context</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.apache.struts</groupId>
    			<artifactId>struts2-spring-plugin</artifactId>
    			<version>2.5.12</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.apache.logging.log4j</groupId>
    			<artifactId>log4j-core</artifactId>
    			<version>2.8.2</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.hibernate</groupId>
    			<artifactId>hibernate-core</artifactId>
    			<version>5.2.10.Final</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>mysql</groupId>
    			<artifactId>mysql-connector-java</artifactId>
    			<version>5.1.43</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>com.mchange</groupId>
    			<artifactId>c3p0</artifactId>
    			<version>0.9.5.2</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-orm</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-aspects</artifactId>
    			<version>${spring.version}</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.apache.shiro</groupId>
    			<artifactId>shiro-core</artifactId>
    			<version>1.3.2</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.apache.shiro</groupId>
    			<artifactId>shiro-web</artifactId>
    			<version>1.3.2</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.apache.shiro</groupId>
    			<artifactId>shiro-spring</artifactId>
    			<version>1.3.2</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>commons-logging</groupId>
    			<artifactId>commons-logging</artifactId>
    			<version>1.2</version>
    		</dependency>
    	</dependencies>
    	<build>
    		<finalName>SSH_02</finalName>
    	</build>
    </project>

**3.新建shiro包和MyRealm类**  
MyRealm.java

package com.zs.shiro;
    
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.SimpleAuthenticationInfo;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    
    public class MyRealm extends AuthorizingRealm { 
    
    	// 授权
    	@Override
    	protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) { 
    		// TODO Auto-generated method stub
    		return null;
    	}
    
    	// 认证
    	@Override
    	protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException { 
    		// 创建认证的令牌
    		UsernamePasswordToken usernamePasswordToken = (UsernamePasswordToken) token;
    		// 用户名输入的名称和密码
    		String uname = usernamePasswordToken.getUsername();
    		String pwd = new String(usernamePasswordToken.getPassword());
    		// 数据库查询出的用户名密码
    		String dbpwd = "1234";
    		System.out.println("用户名输入的名称和密码\t" + uname + "\t" + pwd);
    		SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(uname, dbpwd, getName());
    		return info;
    	}
    
    }

**4.新建applicationContext-shiro.xml**

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd">
    	
    	<bean id="shiroFilterFactoryBean" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    		
    		<property name="securityManager" ref="securityManager"></property>
    		
    		<property name="loginUrl" value="/login.jsp"></property>
    		
    		<property name="successUrl" value="/success.jsp"></property>
    		
    		<property name="filterChainDefinitions">
    		     <value>
    		     
    		     /login.jsp=anon
    		     
    		     /success.jsp=authc
    		     </value>
    		</property>
    	</bean>
    
    
    
    	
    	<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    		<property name="realm" ref="myRealm"></property>
    	</bean>
    
    	
    	<bean id="myRealm" class="com.zs.shiro.MyRealm"></bean>
    
    
    </beans>

**5.在web.xml添加shiro在spring的过滤器**

<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd" >
    
    <web-app>
    	<display-name>Archetype Created Web Application</display-name>
    	
    	
    	<context-param>
    		<param-name>contextConfigLocation</param-name>
    		<param-value>classpath:applicationContext-*.xml</param-value>
    	</context-param>
    	
    	<filter>
    	    <filter-name>shiroFilterFactoryBean</filter-name>
    	    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    	</filter>
    	
    	<filter>
    		<filter-name>struts2</filter-name>
    		<filter-class>org.apache.struts2.dispatcher.ng.filter.StrutsPrepareAndExecuteFilter</filter-class>
    	</filter>
    	
    	<filter-mapping>
    	    <filter-name>shiroFilterFactoryBean</filter-name>
    	    <url-pattern>/*</url-pattern>
    	</filter-mapping>
    	<filter-mapping>
    		<filter-name>struts2</filter-name>
    		<url-pattern>*.action</url-pattern>
    	</filter-mapping>
    	
    	<listener>
    	    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    	</listener>
    </web-app>

**6.新建login.jsp和success.jsp**  
login.jsp

<%@ page language="java" contentType="text/html; charset=UTF-8"
        pageEncoding="UTF-8"%>
    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <title>Insert title here</title>
    </head>
    <body>
    <form action="testAction_login.action" method="post">
    用户名：<input type="text" name="uname"><br>
    密    码：<input type="password" name="pwd"><br>
    <input type="submit" value="登录">
    </form>
    </body>
    </html>

success.jsp

<%@ page language="java" contentType="text/html; charset=UTF-8"
        pageEncoding="UTF-8"%>
    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <title>Insert title here</title>
    </head>
    <body>
    认证成功之后才能进入的页面！
    </body>
    </html>

**7.新建TestAction,并且在spring注入属性和在struts里面配置action**  
TestAction.java

package com.ssh.action;
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.mgt.SecurityManager;
    import org.apache.shiro.subject.Subject;
    
    import com.opensymphony.xwork2.ActionSupport;
    
    /** * * @ClassName: TestAction * @Description:测试页面收集的用户名和密码认证是否通过 * @author 小思 * @date 2018年8月29日 下午2:43:48 * */
    public class TestAction extends ActionSupport { 
    	private SecurityManager  securityManager;
    	// 收集login.jsp页面的用户名和密码
    	private String uname;
    	private String pwd;
    	public String getUname() { 
    		return uname;
    	}
    	public void setUname(String uname) { 
    		this.uname = uname;
    	}
    	public String getPwd() { 
    		return pwd;
    	}
    	public void setPwd(String pwd) { 
    		this.pwd = pwd;
    	}
    	
    	public SecurityManager getSecurityManager() { 
    		return securityManager;
    	}
    	public void setSecurityManager(SecurityManager securityManager) { 
    		this.securityManager = securityManager;
    	}
    	
    	//登录
    	public String login() { 
    		//利用帮助类将安全管理者添加到当前的安全管理环境中
    		SecurityUtils.setSecurityManager(securityManager);
    		//获取安全管理的项目
    		Subject subject = SecurityUtils.getSubject();
    		//定义返回类型
    		String ret="SUCCESS";
    		//创建保存用户用户名和密码的令牌(用户名和密码是页面收集的，是用户在页面上填写的)
    		UsernamePasswordToken usernamePasswordToken=new UsernamePasswordToken(uname,pwd);
    		//保存认证结果
    		boolean authenticated=false;
    		try { 
    			subject.login(usernamePasswordToken);
    			authenticated=subject.isAuthenticated();
    		} catch (Exception e) { 
    			//认证失败，则返回原登录页面
    			ret="login";
    		}
    		System.out.println("认证结果："+authenticated);
    		return ret;
    	}
    
    }

**8.运行login.jsp在服务器**  
（1）认证成功：输入admin 和 1234之后认证成功，页面调转到success.jsp，服务器和浏览器不关闭，此用户就能访问success.jsp  
（2）认证失败：输入admin 和 123456之后认证失败，页面调转到login.jsp，没有认证成功，该用户就不能访问success.jsp页面  
![在这里插入图片描述][70 2]

**说在最后的话：编写实属不易，若喜欢或者对你有帮助记得点赞+关注或者收藏哦~**

[https_download.csdn.net_download_zeal9s_10744751]: https://download.csdn.net/download/zeal9s/10744751
[70]: /images/20220504/9b79ff171491453a8296001d649efe46.png
[70 1]: /images/20220504/2f6cf0bff88e41dd92814bdd6dddf1ac.png
[70 2]: /images/20220504/849475c0d06f4d1b879bda9af464146b.png