shiro学习

阳光穿透心脏的1/2处 2022-09-03 15:21 167阅读 0赞

# 1、快速开始 #

准备工作：[GitHub资源][GitHub]

创建一个普通maven项目springboot-shiro,然后删除src目录,这样的话就可以在这个项目里新建很多model.

在springboot-08-shiro里新建model hello\_shiro

项目结构：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center]

1、打开 [GitHub资源][GitHub] 后，找到如图所示目录，打开pom.xml文件

<dependencies>
    
            
            <dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-core</artifactId>
                <version>1.7.1</version>
            </dependency>
    
    
            
            <dependency>
                <groupId>org.slf4j</groupId>
                <artifactId>jcl-over-slf4j</artifactId>
                <version>2.0.0-alpha2</version>
            </dependency>
            
            <dependency>
                <groupId>org.slf4j</groupId>
                <artifactId>slf4j-log4j12</artifactId>
                <version>2.0.0-alpha2</version>
            </dependency>
    
            
            <dependency>
                <groupId>log4j</groupId>
                <artifactId>log4j</artifactId>
                <version>1.2.17</version>
            </dependency>
    		<dependency>
                <groupId>mysql</groupId>
                <artifactId>mysql-connector-java</artifactId>
                <version>8.0.19</version>
            </dependency>
    
            <dependency>
                <groupId>log4j</groupId>
                <artifactId>log4j</artifactId>
                <version>1.2.17</version>
            </dependency>
    
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>druid</artifactId>
                <version>1.1.12</version>
            </dependency>
            <dependency>
                <groupId>org.mybatis.spring.boot</groupId>
                <artifactId>mybatis-spring-boot-starter</artifactId>
                <version>2.1.1</version>
    
    
        </dependencies>

2、在resources下创建log4j.properties、shiro.ini两个文件

（.ini文件需要安装插件，[idea设置使用.ini文件][idea_.ini]）

log4j.properties

log4j.rootLogger=INFO, stdout
    
    log4j.appender.stdout=org.apache.log4j.ConsoleAppender
    log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
    log4j.appender.stdout.layout.ConversionPattern=%d %p[%c] - %m %n
    
    log4j.logger.org.apache=WARN
    
    log4j.logger.org.springframework=WARN
    
    log4j.logger.org.apache.shiro=INFO
    
    log4j.logger.org.apache.shiro.util.ThreadContext=WARN
    
    log4j.logger.org.apache.shiro.cache.ehcache.EhCache=WARN

shiro.ini

[users]
    # user 'root' with password 'secret' and the 'admin' role
    root = secret, admin
    # user 'guest' with the password 'guest' and the 'guest' role
    guest = guest, guest
    # user 'presidentskroob' with password '12345' ("That's the same combination on
    # my luggage!!!" ;)), and role 'president'
    presidentskroob = 12345, president
    # user 'darkhelmet' with password 'ludicrousspeed' and roles 'darklord' and 'schwartz'
    darkhelmet = ludicrousspeed, darklord, schwartz
    # user 'lonestarr' with password 'vespa' and roles 'goodguy' and 'schwartz'
    lonestarr = vespa, goodguy, schwartz
    
    # -----------------------------------------------------------------------------
    # Roles with assigned permissions
    #
    # Each line conforms to the format defined in the
    # org.apache.shiro.realm.text.TextConfigurationRealm#setRoleDefinitions JavaDoc
    # -----------------------------------------------------------------------------
    [roles]
    # 'admin' role has all permissions, indicated by the wildcard '*'
    admin = *
    # The 'schwartz' role can do anything (*) with any lightsaber:
    schwartz = lightsaber:*
    # The 'goodguy' role is allowed to 'drive' (action) the winnebago (type) with
    # license plate 'eagle5' (instance specific id)
    goodguy = winnebago:drive:eagle5

两文件，在github位置：

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 2]  
3、找到如图位置  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 3]  
4、打开后，将里面的内容粘贴，并在idea中创建Quickstart类，将内容复制

（github上粘贴过来的会报错，可能是版本问题，直接用我这个就可以）

/* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, * software distributed under the License is distributed on an * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY * KIND, either express or implied. See the License for the * specific language governing permissions and limitations * under the License. */
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.*;
    import org.apache.shiro.config.IniSecurityManagerFactory;
    
    import org.apache.shiro.mgt.SecurityManager;
    import org.apache.shiro.session.Session;
    import org.apache.shiro.subject.Subject;
    import org.apache.shiro.util.Factory;
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    
    
    /** * Simple Quickstart application showing how to use Shiro's API. * * @since 0.9 RC2 */
    public class Quickstart { 
    
        private static final transient Logger log = LoggerFactory.getLogger(Quickstart.class);
    
    
        public static void main(String[] args) { 
    
            // The easiest way to create a Shiro SecurityManager with configured
            // realms, users, roles and permissions is to use the simple INI config.
            // We'll do that by using a factory that can ingest a .ini file and
            // return a SecurityManager instance:
    
            // Use the shiro.ini file at the root of the classpath
            // (file: and url: prefixes load from files and urls respectively):
            Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
            SecurityManager securityManager = factory.getInstance();
    
            // for this simple example quickstart, make the SecurityManager
            // accessible as a JVM singleton. Most applications wouldn't do this
            // and instead rely on their container configuration or web.xml for
            // webapps. That is outside the scope of this simple quickstart, so
            // we'll just do the bare minimum so you can continue to get a feel
            // for things.
            SecurityUtils.setSecurityManager(securityManager);
    
            // Now that a simple Shiro environment is set up, let's see what you can do:
    
            // get the currently executing user:
            Subject currentUser = SecurityUtils.getSubject();
    
            // Do some stuff with a Session (no need for a web or EJB container!!!)
            Session session = currentUser.getSession();
            session.setAttribute("someKey", "aValue");
            String value = (String) session.getAttribute("someKey");
            if (value.equals("aValue")) { 
                log.info("Retrieved the correct value! [" + value + "]");
            }
    
            // let's login the current user so we can check against roles and permissions:
            if (!currentUser.isAuthenticated()) { 
                UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");
                token.setRememberMe(true);
                try { 
                    currentUser.login(token);
                } catch (UnknownAccountException uae) { 
                    log.info("There is no user with username of " + token.getPrincipal());
                } catch (IncorrectCredentialsException ice) { 
                    log.info("Password for account " + token.getPrincipal() + " was incorrect!");
                } catch (LockedAccountException lae) { 
                    log.info("The account for username " + token.getPrincipal() + " is locked. " +
                            "Please contact your administrator to unlock it.");
                }
                // ... catch more exceptions here (maybe custom ones specific to your application?
                catch (AuthenticationException ae) { 
                    //unexpected condition? error?
                }
            }
    
            //say who they are:
            //print their identifying principal (in this case, a username):
            log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");
    
            //test a role:
            if (currentUser.hasRole("schwartz")) { 
                log.info("May the Schwartz be with you!");
            } else { 
                log.info("Hello, mere mortal.");
            }
    
            //test a typed permission (not instance-level)
            if (currentUser.isPermitted("lightsaber:wield")) { 
                log.info("You may use a lightsaber ring. Use it wisely.");
            } else { 
                log.info("Sorry, lightsaber rings are for schwartz masters only.");
            }
    
            //a (very powerful) Instance Level permission:
            if (currentUser.isPermitted("winnebago:drive:eagle5")) { 
                log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'. " +
                        "Here are the keys - have fun!");
            } else { 
                log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");
            }
    
            //all done - log out!
            currentUser.logout();
    
            System.exit(0);
        }
    }

5、测试运行：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 4]  
6、Quickstart分析：

import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.*;
    import org.apache.shiro.config.IniSecurityManagerFactory;
    import org.apache.shiro.mgt.SecurityManager;
    import org.apache.shiro.session.Session;
    import org.apache.shiro.subject.Subject;
    import org.apache.shiro.util.Factory;
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    
    
    /** * Simple Quickstart application showing how to use Shiro's API. * * @since 0.9 RC2 */
    public class Quickstart { 
    
        private static final transient Logger log = LoggerFactory.getLogger(Quickstart.class);
    
    
        public static void main(String[] args) { 
    
    
    
            Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
            SecurityManager securityManager = factory.getInstance();
            SecurityUtils.setSecurityManager(securityManager);
    
            // Now that a simple Shiro environment is set up, let's see what you can do:
    
            // get the currently executing user:
    
            //获取当前的用户对象， subject
            Subject currentUser = SecurityUtils.getSubject();
    
            // Do some stuff with a Session (no need for a web or EJB container!!!)
            //通过当前用户拿到session
            Session session = currentUser.getSession();
            session.setAttribute("someKey", "aValue");
            String value = (String) session.getAttribute("someKey");
            if (value.equals("aValue")) { 
    
                //打印消息，可以自己设置
                //如：log.info("log.info("Subject=> session [" + value + "]");
                log.info("Retrieved the correct value! [" + value + "]");
            }
    
            // let's login the current user so we can check against roles and permissions:
            //判断当前的用户是否被认证
            if (!currentUser.isAuthenticated()) { 
    
                //token：令牌
                UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");
                token.setRememberMe(true);//设置记住我
                try { 
                    currentUser.login(token);//执行了登陆操作
                } catch (UnknownAccountException uae) { 
                    log.info("There is no user with username of " + token.getPrincipal());
                } catch (IncorrectCredentialsException ice) { 
                    log.info("Password for account " + token.getPrincipal() + " was incorrect!");
                } catch (LockedAccountException lae) { 
                    log.info("The account for username " + token.getPrincipal() + " is locked. " +
                            "Please contact your administrator to unlock it.");
                }
                // ... catch more exceptions here (maybe custom ones specific to your application?
                catch (AuthenticationException ae) { 
                    //unexpected condition? error?
                }
            }
    
            //say who they are:
            //print their identifying principal (in this case, a username):
            //存信息的
            log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");
    
            //test a role:
            if (currentUser.hasRole("schwartz")) { 
                log.info("May the Schwartz be with you!");
            } else { 
                log.info("Hello, mere mortal.");
            }
    
            //粗粒度
            //test a typed permission (not instance-level)
            if (currentUser.isPermitted("lightsaber:wield")) { 
                log.info("You may use a lightsaber ring. Use it wisely.");
            } else { 
                log.info("Sorry, lightsaber rings are for schwartz masters only.");
            }
    
            //细粒度
            //a (very powerful) Instance Level permission:
            if (currentUser.isPermitted("winnebago:drive:eagle5")) { 
                log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'. " +
                        "Here are the keys - have fun!");
            } else { 
                log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");
            }
    
            //注销
            //all done - log out!
            currentUser.logout();
    
            //结束
            System.exit(0);
        }
    }

--------------------

# 2、在springboot中集成shiro #

准备工作：创建一个新的Spring项目。

## 1、导入shiro整合依赖 ##

<dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-spring</artifactId>
                <version>1.4.1</version>
            </dependency>

其他依赖：

<dependency>
                <groupId>org.thymeleaf</groupId>
                <artifactId>thymeleaf-spring5</artifactId>
                <version>3.0.12.RELEASE</version>
            </dependency>

## 2、编写shiro两个黑心配置 ##

ShiroConfig

package com.bing.config;
    
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    
    
    //自定义的UserRealm
    public class UserRealm extends AuthorizingRealm { 
    
    
        //授权
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { 
            System.out.println("执行了=》授权 doGetAuthorizationInfo");
            return null;
        }
    
        //认证
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException { 
            System.out.println("执行了=》认证 doGetAuthorizationInfo");
            return null;
        }
    }

UserRealm

## 3、测试 ##

1、项目结构

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 5]

2、html页面编写

index.html

<!DOCTYPE html>
    <html lang="en" xmlns:th="https://www.thymeleaf.org" xmlns:shiro="https://www.thymeleaf.org/thymeleaf-extras-shiro">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
    </head>
    <body>
    
    <h1>首页</h1>
    
    <p th:text="${msg}"></p>
    
    <hr>
    <div th:if="${session.loginUser==null}">
        <a th:href="@{/toLogin}">登陆</a>
    </div>
    
    <div shiro:hasPermission="user:add">
        <a th:href="@{/user/add}">add</a>
    </div>
    
    <div shiro:hasPermission="user:update">
        <a th:href="@{/user/update}">update</a>
    </div>
    
    
    </body>
    </html>

add.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
    </head>
    <body>
    <h1>添加一个用户</h1>
    </body>
    </html>

update.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
    </head>
    <body>
    <h1>修改一个用户</h1>
    </body>
    </html>

3、MyController

package com.bing.controller;
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.IncorrectCredentialsException;
    import org.apache.shiro.authc.UnknownAccountException;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.subject.Subject;
    import org.springframework.stereotype.Controller;
    import org.springframework.ui.Model;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.ResponseBody;
    
    import javax.servlet.http.HttpSession;
    
    
    @Controller
    public class MyController { 
    
        @RequestMapping({ "/","/index"})
        public String toIndex(Model model){ 
            model.addAttribute("msg","hello,shiro");
            return "index";
        }
    
        @RequestMapping("/user/add")
        public String add(){ 
            return "user/add";
        }
    
        @RequestMapping("/user/update")
        public String update(){ 
            return "user/update";
        }
    
        @RequestMapping("/toLogin")
        public String toLogin(){ 
            return "login";
        }
    
        @RequestMapping("/login")
        public String login(String username, String password, Model model, HttpSession session){ 
    
            //获取当前用户
            Subject subject= SecurityUtils.getSubject();
            //封装用户的登陆数据
            UsernamePasswordToken token=new UsernamePasswordToken(username,password);
    
            try{ 
                subject.login(token);//执行登陆的方法
                session.setAttribute("loginUser",username);//设置session
                return "index";
            }catch (UnknownAccountException e){ //用户名不存在
                model.addAttribute("msg","用户名错误");
                return "login";
            }catch (IncorrectCredentialsException e){ //密码不存在
                model.addAttribute("msg","密码错误");
                return "login";
            }
    
        }
    
        @RequestMapping("/noauth")
        @ResponseBody
        public String unauthorized(){ 
            return "未经授权禁止访问";
    
        }
    
    
    }

测试结果：

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 6]

# 3、shiro实现登录拦截和用户认证 #

## 1、添加登录页面 ##

<!DOCTYPE html>
    <html lang="en" xmlns:th="https://www.thymeleaf.org">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
    </head>
    <body>
    <h1>登陆</h1>
    <hr>
    <p style="color: red" th:text="${msg}"></p>
    <form th:action="@{/login}">
        <p>用户名：<input type="text" name="username"></p>
        <p>密码：<input type="password" name="password"></p>
        <p><input type="submit"></p>
    </form>
    </body>
    </html>

## 2、ShiroConfig ##

package com.bing.config;
    
    import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    import java.util.LinkedHashMap;
    import java.util.Map;
    
    @Configuration
    public class ShiroConfig { 
    
        //3、ShiroFilterFactoryBean
        @Bean
        public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("defaultWebSecurityManager")DefaultWebSecurityManager defaultWebSecurityManager){ 
            ShiroFilterFactoryBean bean = new ShiroFilterFactoryBean();
    
            //设置安全管理器
            bean.setSecurityManager(defaultWebSecurityManager);
    
    
            //添加shiro的内置过滤器
            /* anon:无需认证就能访问 authc:必须认证才能访问 user:必须拥有记住我功能才能访问 perms:拥有某个资源的权限才能访问 role:拥有某个角色权限才能访问 */
            //拦截
            Map<String,String> filterMap =new LinkedHashMap<>();
    
            //授权
            filterMap.put("/user/add","perms[user:add]");
            filterMap.put("/user/update","perms[user:update]");
    
    // filterMap.put("/user/add","authc");
    // filterMap.put("/user/update","authc");
    
            //设置登陆的请求
            bean.setLoginUrl("/toLogin");
    
            //设置未授权的请求
            bean.setUnauthorizedUrl("/noauth");
    
            bean.setFilterChainDefinitionMap(filterMap);
    
    
            return bean;
        }
    
        //2、DefaultWebSecurityManager
        @Bean
        public DefaultWebSecurityManager defaultWebSecurityManager(@Qualifier("userRealm") UserRealm userRealm){ 
            DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
    
            //关联
            securityManager.setRealm(userRealm);
    
            return securityManager;
        }
    
    
        //1、创建realm对象， 需要自定义类
        @Bean
        public UserRealm userRealm(){ 
            return new UserRealm();
        }
    
    
    }

## 3、UserRealm ##

package com.bing.config;
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.*;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import org.apache.shiro.subject.Subject;
    
    
    //自定义的UserRealm
    public class UserRealm extends AuthorizingRealm { 
    
    
        //授权
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { 
            System.out.println("执行了=》授权 doGetAuthorizationInfo");
            return null;
        }
    
        //认证
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException { 
    
            System.out.println("执行了=》认证 doGetAuthorizationInfo");
    
    
            String name = "root";
            String password = "123456";
    
            UsernamePasswordToken userToken = (UsernamePasswordToken) token;
    
            if(userToken.getUsername().equals(name)){ 
                return null;//抛出异常 UnknownAccountException
            }
    
            //密码认证
            return new SimpleAuthenticationInfo("",password,"");
        }
    }

## 4、MyController ##

package com.bing.controller;
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.IncorrectCredentialsException;
    import org.apache.shiro.authc.UnknownAccountException;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.subject.Subject;
    import org.springframework.stereotype.Controller;
    import org.springframework.ui.Model;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.ResponseBody;
    
    import javax.servlet.http.HttpSession;
    
    
    @Controller
    public class MyController { 
    
        @RequestMapping({ "/","/index"})
        public String toIndex(Model model){ 
            model.addAttribute("msg","hello,shiro");
            return "index";
        }
    
        @RequestMapping("/user/add")
        public String add(){ 
            return "user/add";
        }
    
        @RequestMapping("/user/update")
        public String update(){ 
            return "user/update";
        }
    
        @RequestMapping("/toLogin")
        public String toLogin(){ 
            return "login";
        }
    
    
        //这块功能是固定代码。
        @RequestMapping("/login")
        public String login(String username, String password, Model model, HttpSession session){ 
    
            //获取当前用户
            Subject subject= SecurityUtils.getSubject();
            //封装用户的登陆数据
            UsernamePasswordToken token = new UsernamePasswordToken(username,password);
    
            try{ 
                subject.login(token);//执行登陆的方法
                session.setAttribute("loginUser",username);//设置session
                return "index";
            }catch (UnknownAccountException e){ //用户名不存在
                model.addAttribute("msg","用户名错误");
                return "login";
            }catch (IncorrectCredentialsException e){ //密码不存在
                model.addAttribute("msg","密码错误");
                return "login";
            }
    
        }
    
        @RequestMapping("/noauth")
        @ResponseBody
        public String unauthorized(){ 
            return "未经授权禁止访问";
    
        }
    
    
    }

经过测试，功能完善。

# 4、整合Mybatis #

因为程序运行不出来的原因，（烦死了，就是运行不出来，还找不到解决办法）所以shrio的内容就只写到这里，大家想继续的可以移步  
[跟着狂神学Shiro(SpringBoot整合Shiro)][Shiro_SpringBoot_Shiro]

[GitHub]: https://github.com/apache/shiro
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center]: /images/20220829/84891a37db1d4d31aa061de239ce7fec.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20220829/fe25d5d05666480f89eb3193d25509e3.png
[idea_.ini]: https://blog.csdn.net/weixin_44096353/article/details/119525244?spm=1001.2014.3001.5501
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 2]: /images/20220829/983a727241134e0fbecf060c1e596d91.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 3]: /images/20220829/2f7f8993c26e4c7cbb8403e931c52414.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 4]: /images/20220829/cba7aca59a9a46bfb7401eae9f5f4ac0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 5]: /images/20220829/0b654092e9b943a4bb232cd8c2ef59be.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA5NjM1Mw_size_16_color_FFFFFF_t_70_pic_center 6]: /images/20220829/c4b24a4c54cd4dd59877502ed4c0cc12.png
[Shiro_SpringBoot_Shiro]: https://blog.csdn.net/qq_40649503/article/details/109481354