菜鸟学习shiro之入门的简单登录认证和身份认证1

àì夳堔傛蜴生んèń 2022-05-18 01:42 173阅读 0赞

最近学习了四郎，学的是天南海北，一头雾水，概念懂了，实践呐，就很是缺乏，于是跟着慕课网的视频教程敲敲代码

果然加深了理解，话不多说，直接看代码

Maven的依赖：

<dependencies>
       <dependency>
          <groupId>log4j</groupId>
          <artifactId>log4j</artifactId>
          <version>1.2.17</version>
       </dependency>
    
    
    
       
       <dependency>
          <groupId>org.aspectj</groupId>
          <artifactId>aspectjrt</artifactId>
          <version>1.6.11</version>
       </dependency>
       <dependency>
          <groupId>org.aspectj</groupId>
          <artifactId>aspectjweaver</artifactId>
          <version>1.6.12</version>
       </dependency>
       <dependency>
          <groupId>cglib</groupId>
          <artifactId>cglib</artifactId>
          <version>2.2.2</version>
       </dependency>
    
       
       <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-core</artifactId>
          <version>1.2.2</version>
       </dependency>
       <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-spring</artifactId>
          <version>1.2.2</version>
       </dependency>
       
       <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-ehcache</artifactId>
          <version>1.2.2</version>
       </dependency>
    
       
       <dependency>
          <groupId>org.springframework</groupId>
          <artifactId>spring-context-support</artifactId>
       </dependency>
    
    
       <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-web</artifactId>
          <version>1.2.1</version>
       </dependency>
    
    
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-tomcat</artifactId>
       </dependency>
    
    
    
       
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-devtools</artifactId>
       </dependency>
    
    
    
       
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-thymeleaf</artifactId>
       </dependency>
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-web</artifactId>
       </dependency>
    
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-test</artifactId>
          <scope>test</scope>
       </dependency>
    
       <dependency>
          <groupId>mysql</groupId>
          <artifactId>mysql-connector-java</artifactId>
          <version>5.1.45</version>
       </dependency>
    
    
       
       <dependency>
          <groupId>commons-io</groupId>
          <artifactId>commons-io</artifactId>
          <version>2.4</version>
       </dependency>
       <dependency>
          <groupId>antlr</groupId>
          <artifactId>antlr</artifactId>
          <version>2.7.7</version>
          <scope>test</scope>
       </dependency>
       <dependency>
          <groupId>antlr</groupId>
          <artifactId>antlr</artifactId>
          <version>2.7.7</version>
          <scope>test</scope>
       </dependency>
       <dependency>
          <groupId>com.alibaba</groupId>
          <artifactId>druid</artifactId>
          <version>1.1.9</version>
          <scope>test</scope>
       </dependency>
    </dependencies>

代码：

import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.mgt.DefaultSecurityManager;
    import org.apache.shiro.realm.SimpleAccountRealm;
    import org.apache.shiro.subject.Subject;
    import org.junit.Before;
    import org.junit.Test;
    import org.junit.runner.RunWith;
    import org.springframework.boot.test.context.SpringBootTest;
    import org.springframework.test.context.junit4.SpringRunner;
    
    @RunWith(SpringRunner.class)
    @SpringBootTest
    public class AuthenticationTest {
        // 这个是shiro提供的简单的账户信息类，供保存用户信息的以便进行验证
        SimpleAccountRealm simpleAccountRealm = new SimpleAccountRealm();
    
        @Before
        public void addUser() {
            simpleAccountRealm.addAccount("Mark","123456","admin","user");
        }
    
        @Test
        public void testAuthenticationTest() {
    
            // 1.构建SecurityManager环境
            DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager();
            // 这个是内置的用户信息包括姓名，密码，权限，就是传过来的信息与它对比
            defaultSecurityManager.setRealm(simpleAccountRealm);
    
            // 2.主体提交认证请求
            SecurityUtils.setSecurityManager(defaultSecurityManager);
            Subject subject = SecurityUtils.getSubject();
    
            // 这个是需要认证的信息
            UsernamePasswordToken token = new UsernamePasswordToken("Mark","123456");
            subject.login(token);
    
            System.out.println("isAuthenticated="+subject.isAuthenticated());
    
            //subject.logout();
    
            System.out.println("isAuthenticated="+subject.isAuthenticated());
    
            subject.checkRoles("admin","user");
        }
    
    }
    总体流程就是1.构建SecurityManager的环境，然后2.就类比如一个服务器端，Realm为数据库中的用户的信息，3.统一把信息部署到Subject实现容器或者封装对象中，4.客户端把要验证的信息在Subject容器中进行比对，这时所有的结果都在Subject的方法中查看。