spring篇-(ssm整合shiro)

青旅半醒 2022-11-16 04:58 269阅读 0赞

ssm整合shiro

  • 初始化项目结构
  • 启动项目

初始化项目结构

项目基于maven的ssm架构，最终打包的结果为war
结构如下图
在这里插入图片描述

项目pom文件

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  3.     <modelVersion>4.0.0</modelVersion>
  5.     <groupId>com.lhstack</groupId>
  6.     <artifactId>shiro-spring-web</artifactId>
  7.     <version>0.0.1</version>
  8.     <packaging>war</packaging>
  10.     <properties>
  11.         <maven.compiler.source>11</maven.compiler.source>
  12.         <maven.compiler.target>11</maven.compiler.target>
  13.         <spring.version>5.3.5</spring.version>
  14.         <shiro.version>1.7.1</shiro.version>
  15.         <spring-security.version>5.4.5</spring-security.version>
  16.         <jackson.version>2.12.2</jackson.version>
  17.     </properties>
  19.     <dependencies>
  21.         <!-- junit -->
  22.          <dependency>
  23.             <groupId>junit</groupId>
  24.             <artifactId>junit</artifactId>
  25.             <version>${junit.version}</version>
  26.             <scope>test</scope>
  27.         </dependency>
  29.         <!-- spring整合 junit -->
  30.         <dependency>
  31.             <groupId>org.springframework</groupId>
  32.             <artifactId>spring-test</artifactId>
  33.             <version>${spring.version}</version>
  34.         </dependency>
  36.         <!-- log4j2 -->
  37.         <dependency>
  38.             <groupId>org.apache.logging.log4j</groupId>
  39.             <artifactId>log4j-api</artifactId>
  40.             <version>${log4j.version}</version>
  41.         </dependency>
  43.         <dependency>
  44.             <groupId>org.apache.logging.log4j</groupId>
  45.             <artifactId>log4j-core</artifactId>
  46.             <version>${log4j.version}</version>
  47.         </dependency>
  49.         <!-- json序列化工具相关依赖 -->
  50.         <dependency>
  51.             <groupId>com.fasterxml.jackson.core</groupId>
  52.             <artifactId>jackson-databind</artifactId>
  53.             <version>${jackson.version}</version>
  54.         </dependency>
  56.         <dependency>
  57.             <groupId>com.fasterxml.jackson.core</groupId>
  58.             <artifactId>jackson-core</artifactId>
  59.             <version>${jackson.version}</version>
  60.         </dependency>
  62.         <dependency>
  63.             <groupId>com.fasterxml.jackson.core</groupId>
  64.             <artifactId>jackson-annotations</artifactId>
  65.             <version>${jackson.version}</version>
  66.         </dependency>
  70.         <!-- 加密工具依赖 -->
  71.         <dependency>
  72.             <groupId>org.springframework.security</groupId>
  73.             <artifactId>spring-security-crypto</artifactId>
  74.             <version>${spring-security.version}</version>
  75.         </dependency>
  78.         <!-- shiro整合spring的相关依赖 -->
  79.         <dependency>
  80.             <groupId>org.apache.shiro</groupId>
  81.             <artifactId>shiro-spring</artifactId>
  82.             <version>${shiro.version}</version>
  83.         </dependency>
  86.         <!-- servlet -->
  87.         <dependency>
  88.             <groupId>javax.servlet</groupId>
  89.             <artifactId>javax.servlet-api</artifactId>
  90.             <version>4.0.1</version>
  91.             <scope>provided</scope>
  92.         </dependency>
  94.         <!-- web -->
  95.         <dependency>
  96.             <groupId>org.springframework</groupId>
  97.             <artifactId>spring-web</artifactId>
  98.             <version>${spring.version}</version>
  99.         </dependency>
  101.         <!-- spring上下文初始依赖 -->
  102.         <dependency>
  103.             <groupId>org.springframework</groupId>
  104.             <artifactId>spring-context</artifactId>
  105.             <version>${spring.version}</version>
  106.         </dependency>
  108.         <dependency>
  109.             <groupId>org.springframework</groupId>
  110.             <artifactId>spring-core</artifactId>
  111.             <version>${spring.version}</version>
  112.         </dependency>
  114.         <dependency>
  115.             <groupId>org.springframework</groupId>
  116.             <artifactId>spring-beans</artifactId>
  117.             <version>${spring.version}</version>
  118.         </dependency>
  120.         <!-- webmvc -->
  121.         <dependency>
  122.             <groupId>org.springframework</groupId>
  123.             <artifactId>spring-webmvc</artifactId>
  124.             <version>${spring.version}</version>
  125.         </dependency>
  127.         <!-- aop相关 -->
  128.         <dependency>
  129.             <groupId>org.springframework</groupId>
  130.             <artifactId>spring-aop</artifactId>
  131.             <version>${spring.version}</version>
  132.         </dependency>
  135.         <dependency>
  136.             <groupId>org.springframework</groupId>
  137.             <artifactId>spring-aspects</artifactId>
  138.             <version>${spring.version}</version>
  139.         </dependency>
  143.     </dependencies>
  144.     <build>
  145.         <plugins>
  146.             <plugin>
  147.                 <groupId>org.apache.maven.plugins</groupId>
  148.                 <artifactId>maven-war-plugin</artifactId>
  149.                 <version>3.3.0</version>
  150.             </plugin>
  151.         </plugins>
  152.     </build>
  154. </project>

log4j2配置

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <Configuration status="warn" name="MyApp" packages="">
  3.     <Appenders>
  4.         <Console name="Console" target="SYSTEM_OUT">
  5.             <PatternLayout pattern="%d{yyyy-MM-dd HH:mm:ss.SSS} [%t] %-5level %logger{36} - %msg%n" />
  6.         </Console>
  8.         <!-- info-->
  9.         <RollingRandomAccessFile name="InfoAppendLogger" fileName="logs/info/info.log" filePattern="logs/info/$${date:yyyy-MM-dd}/info-%d{yyyy-MM-dd}-%i.log">
  10.             <PatternLayout>
  11.                 <Pattern>%d %p %c{1.} [%t] %m%n</Pattern>
  12.             </PatternLayout>
  13.             <!-- 过滤日志级别 -->
  14.             <ThresholdFilter level="INFO" onMatch="ACCEPT" onMismatch="DENY"/>
  15.             <Policies>
  16.                 <TimeBasedTriggeringPolicy modulate="true" interval="1"/>
  17.                 <SizeBasedTriggeringPolicy size="50 MB"/>
  18.             </Policies>
  19.             <!-- 清理过期日志 -->
  20.             <DefaultRolloverStrategy>
  21.                 <Delete basePath="logs/info/" maxDepth="2">
  22.                     <IfFileName glob="*/*.log" />
  23.                     <IfLastModified age="7d" />
  24.                 </Delete>
  25.             </DefaultRolloverStrategy>
  26.         </RollingRandomAccessFile>
  28.         <Async name="AsyncInfoLoggerAppender">
  29.             <AppenderRef ref="InfoAppendLogger"/>
  30.         </Async>
  32.         <!-- error-->
  33.         <RollingRandomAccessFile name="ErrorAppendLogger" fileName="logs/error/error.log" filePattern="logs/error/$${date:yyyy-MM-dd}/error-%d{yyyy-MM-dd}-%i.log">
  34.             <PatternLayout>
  35.                 <Pattern>%d %p %c{1.} [%t] %m%n</Pattern>
  36.             </PatternLayout>
  37.             <ThresholdFilter level="ERROR" onMatch="ACCEPT" onMismatch="DENY"/>
  38.             <Policies>
  39.                 <TimeBasedTriggeringPolicy modulate="true" interval="1"/>
  40.                 <SizeBasedTriggeringPolicy size="50 MB"/>
  41.             </Policies>
  42.             <DefaultRolloverStrategy>
  43.                 <Delete basePath="logs/error/" maxDepth="2">
  44.                     <IfFileName glob="*/*.log" />
  45.                     <IfLastModified age="7d" />
  46.                 </Delete>
  47.             </DefaultRolloverStrategy>
  48.         </RollingRandomAccessFile>
  49.         <Async name="AsyncErrorLoggerAppender">
  50.             <AppenderRef ref="ErrorAppendLogger"/>
  51.         </Async>
  53.         <!-- warn-->
  54.         <RollingRandomAccessFile name="WarnAppendLogger" fileName="logs/warn/warn.log" filePattern="logs/warn/$${date:yyyy-MM-dd}/warn-%d{yyyy-MM-dd}-%i.log">
  55.             <PatternLayout>
  56.                 <Pattern>%d %p %c{1.} [%t] %m%n</Pattern>
  57.             </PatternLayout>
  58.             <ThresholdFilter level="WARN" onMatch="ACCEPT" onMismatch="DENY"/>
  59.             <Policies>
  60.                 <TimeBasedTriggeringPolicy modulate="true" interval="1"/>
  61.                 <SizeBasedTriggeringPolicy size="50 MB"/>
  62.             </Policies>
  63.             <DefaultRolloverStrategy>
  64.                 <Delete basePath="logs/warn/" maxDepth="2">
  65.                     <IfFileName glob="*/*.log" />
  66.                     <IfLastModified age="7d" />
  67.                 </Delete>
  68.             </DefaultRolloverStrategy>
  69.         </RollingRandomAccessFile>
  70.         <Async name="AsyncWarnLoggerAppender">
  71.             <AppenderRef ref="WarnAppendLogger"/>
  72.         </Async>
  74.         <!-- debug-->
  75.         <RollingRandomAccessFile name="DebugAppendLogger" fileName="logs/debug/debug.log" filePattern="logs/debug/$${date:yyyy-MM-dd}/debug-%d{yyyy-MM-dd}-%i.log">
  76.             <PatternLayout>
  77.                 <Pattern>%d %p %c{1.} [%t] %m%n</Pattern>
  78.             </PatternLayout>
  79.             <ThresholdFilter level="DEBUG" onMatch="ACCEPT" onMismatch="DENY"/>
  80.             <Policies>
  81.                 <TimeBasedTriggeringPolicy modulate="true" interval="1"/>
  82.                 <SizeBasedTriggeringPolicy size="50 MB"/>
  83.             </Policies>
  85.             <DefaultRolloverStrategy>
  86.                 <Delete basePath="logs/debug/" maxDepth="2">
  87.                     <IfFileName glob="*/*.log" />
  88.                     <IfLastModified age="7d" />
  89.                 </Delete>
  90.             </DefaultRolloverStrategy>
  91.         </RollingRandomAccessFile>
  93.         <Async name="AsyncDebugLoggerAppender">
  94.             <AppenderRef ref="DebugAppendLogger"/>
  95.         </Async>
  97.     </Appenders>
  98.     <Loggers>
  100.         <Root level="debug">
  101.             <AppenderRef ref="AsyncInfoLoggerAppender"/>
  102.             <AppenderRef ref="AsyncErrorLoggerAppender"/>
  103.             <AppenderRef ref="AsyncWarnLoggerAppender"/>
  104.             <AppenderRef ref="AsyncDebugLoggerAppender"/>
  105.             <AppenderRef ref="Console" />
  106.         </Root>
  107.     </Loggers>
  108. </Configuration>

web.xml配置

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd" version="4.0">
  4.     <!-- 拦截所有请求，让所有请求都走DispatcherServlet -->
  5.     <servlet>
  6.         <servlet-name>DispatcherServlet</servlet-name>
  7.         <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
  8.         <init-param>
  9.             <param-name>contextConfigLocation</param-name>
  10.             <param-value>classpath:spring-mvc.xml</param-value>
  11.         </init-param>
  12.     </servlet>
  13.     <servlet-mapping>
  14.         <servlet-name>DispatcherServlet</servlet-name>
  15.         <url-pattern>/</url-pattern>
  16.     </servlet-mapping>
  18.     <!-- 字符编码处理 -->
  19.     <filter>
  20.         <filter-name>CharacterFilter</filter-name>
  21.         <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
  22.         <init-param>
  23.             <param-name>encoding</param-name>
  24.             <param-value>UTF-8</param-value>
  25.         </init-param>
  26.         <init-param>
  27.             <param-name>forceRequestEncoding</param-name>
  28.             <param-value>true</param-value>
  29.         </init-param>
  31.         <init-param>
  32.             <param-name>forceResponseEncoding</param-name>
  33.             <param-value>true</param-value>
  34.         </init-param>
  35.     </filter>
  37.     <filter-mapping>
  38.         <filter-name>CharacterFilter</filter-name>
  39.         <url-pattern>/*</url-pattern>
  40.     </filter-mapping>
  42.     <filter>
  43.         <!--和bean里面的shiroFilterFactoryBean名称必须相同，不然不会生效,代理与filter同名的bean，让被代理的filter拥有springbean的功能-->
  44.         <filter-name>shiroFilterFactoryBean</filter-name>
  45.         <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
  46.         <init-param>
  47.             <param-name>targetFilterLifecycle</param-name>
  48.             <param-value>true</param-value>
  49.         </init-param>
  50.     </filter>
  52.     <filter-mapping>
  53.         <filter-name>shiroFilterFactoryBean</filter-name>
  54.         <url-pattern>/*</url-pattern>
  55.         <dispatcher>REQUEST</dispatcher>
  56.         <dispatcher>ERROR</dispatcher>
  57.     </filter-mapping>
  59.     <!-- 启动监听器，加载webmvc以外的配置文件，用于配置容器隔离 -->
  60.     <listener>
  61.         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
  62.     </listener>
  63.     <context-param>
  64.         <param-name>contextConfigLocation</param-name>
  65.         <param-value>classpath:application-*.xml</param-value>
  66.     </context-param>
  67. </web-app>

spring-mvc.xml配置

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/mvc https://www.springframework.org/schema/mvc/spring-mvc.xsd http://www.springframework.org/schema/context https://www.springframework.org/schema/context/spring-context.xsd">
  4.     <!-- 开启mvc注解驱动,同WebMvcConfigurer -->
  5.     <mvc:annotation-driven>
  6.         <mvc:message-converters>
  7.             <!-- 配置json序列化转换器 -->
  8.             <bean class="org.springframework.http.converter.json.MappingJackson2HttpMessageConverter">
  9.                 <property name="defaultCharset" value="UTF-8" />
  10.             </bean>
  11.         </mvc:message-converters>
  12.     </mvc:annotation-driven>
  14.     <!-- 视图解析器 -->
  15.     <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
  16.         <property name="prefix" value="/WEB-INF/" />
  17.         <property name="suffix" value=".jsp" />
  18.     </bean>
  20.     <!-- controller包扫描工具，用于扫描controller接口，spring-mvc需要配置此功能 -->
  21.     <context:component-scan base-package="com.lhstack.spring.shiro.controller">
  22.         <context:include-filter type="annotation" expression="org.springframework.stereotype.Controller"/>
  23.     </context:component-scan>
  24. </beans>

shiro相关配置
application-shiro.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
  4.     <!-- shiro核心过滤器，所有的功能都来自于这个类 -->
  5.     <bean name="shiroFilterFactoryBean" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
  6.         <property name="securityManager" ref="webSecurityManager" />
  7.         <!-- 如果在filterChainDefinitionMap配置了如 key=login value=login,那登录成功之后会回调这个地址 -->
  8.         <property name="successUrl" value="/" />
  9.         <!-- 未登录重定向的地址 -->
  10.         <property name="loginUrl" value="/login.jsp" />
  11.         <!-- 登录成功，但是访问地址未授权，重定向地址 -->
  12.         <property name="unauthorizedUrl" value="/405.jsp" />
  13.         <!-- 配置路由规则，key为路由，value为规则 -->
  14.         <!-- anon 不做任何处理，logout 退出登录 login 登录 authc 需要授权 其他过滤器功能可以在org.apache.shiro.web.filter.mgt.DefaultFilter类中查看 -->
  15.         <property name="filterChainDefinitionMap">
  16.             <map>
  17.                 <entry key="/login.jsp" value="anon" />
  18.                 <entry key="/login" value="anon" />
  19.                 <entry key="/session" value="anon" />
  20.                 <entry key="/**" value="authc" />
  21.             </map>
  22.         </property>
  23.     </bean>
  25.     <!-- 密码匹配器，自定义 -->
  26.     <bean name="bcryPasswordMatcher" class="com.lhstack.spring.shiro.matcher.BcryPasswordMatcher" >
  27.         <property name="passwordEncoder" ref="bCryptPasswordEncoder" />
  28.     </bean>
  30.     <!-- realm，需要自己实现 -->
  31.     <bean name="testRealm" class="com.lhstack.spring.shiro.realm.TestRealm">
  32.         <property name="passwordEncoder" ref="bCryptPasswordEncoder" />
  33.         <!-- 注入密码匹配器 -->
  34.         <property name="credentialsMatcher" ref="bcryPasswordMatcher" />
  35.     </bean>
  37.     <!-- webSecurityManager,shiroFilterFactoryBean需要此类，用于管理授权认证的操作 -->
  38.     <bean name="webSecurityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager" >
  39.         <property name="realm" ref="testRealm" />
  40.         <property name="sessionManager" ref="webSessionManager" />
  41.     </bean>
  43.     <!-- 自定义session管理器，用来持久session，可扩展实现分布式session -->
  44.     <bean name="localSessionDao" class="com.lhstack.spring.shiro.session.LocalSessionDao" />
  46.     <!-- 初始化realm，会回调realm的onInit方法-->
  47.     <bean class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />
  49.     <!-- session管理器，管理session -->
  50.     <bean name="webSessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">
  51.         <!-- 取消sessionid重写功能，防止页面报错 -->
  52.         <property name="sessionIdUrlRewritingEnabled" value="false"/>
  53.         <property name="sessionDAO" ref="localSessionDao" />
  54.     </bean>
  56.     <!-- 密码编码匹配工具 -->
  57.     <bean name="bCryptPasswordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder" />
  59.     <!-- 开启aop支持 注解鉴权需要aop功能支持 -->
  60.     <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" />
  62.     <!-- 开启shiro注解权限的功能 -->
  63.     <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor" />
  66. </beans>

TestRealm.java

  1. package com.lhstack.spring.shiro.realm;
  3. import org.apache.shiro.authc.AuthenticationException;
  4. import org.apache.shiro.authc.AuthenticationInfo;
  5. import org.apache.shiro.authc.AuthenticationToken;
  6. import org.apache.shiro.authc.SimpleAuthenticationInfo;
  7. import org.apache.shiro.authz.AuthorizationInfo;
  8. import org.apache.shiro.authz.SimpleAuthorizationInfo;
  9. import org.apache.shiro.realm.AuthorizingRealm;
  10. import org.apache.shiro.subject.PrincipalCollection;
  11. import org.springframework.security.crypto.password.PasswordEncoder;
  13. import java.util.Collections;
  15. public class TestRealm extends AuthorizingRealm { 
  17.     //模拟盐值的功能
  18.     public static final String SALT = "asxkdhz1568462416575";
  20.     //密码工具
  21.     private PasswordEncoder passwordEncoder;
  23.     public void setPasswordEncoder(PasswordEncoder passwordEncoder) { 
  24.         this.passwordEncoder = passwordEncoder;
  25.     }
  27.     @Override
  28.     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { 
  29.         return new SimpleAuthorizationInfo(Collections.singleton("ADMIN"));
  30.     }
  32.     @Override
  33.     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException { 
  34.         String username = (String) authenticationToken.getPrincipal();
  35.         char[] passwordArray = (char[]) authenticationToken.getCredentials();
  36.         String password = new String(passwordArray);
  37.         //用户输入的密码，然后进行盐值处理加编码
  38.         String encoder = passwordEncoder.encode(password + SALT);
  39.         //返回用户的信息，然后将处理过后的用户输入的密码设置进去
  40.         return new 
  41.       SimpleAuthenticationInfo(username,encoder,this.getName());
  42.     }
  43. }

BcryPasswordMatcher.java

  1. package com.lhstack.spring.shiro.matcher;
  3. import org.apache.shiro.authc.AuthenticationInfo;
  4. import org.apache.shiro.authc.AuthenticationToken;
  5. import org.apache.shiro.authc.credential.CredentialsMatcher;
  6. import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
  7. import org.springframework.security.crypto.password.PasswordEncoder;
  9. public class BcryPasswordMatcher implements CredentialsMatcher { 
  11.     private PasswordEncoder passwordEncoder;
  13.     public void setPasswordEncoder(PasswordEncoder passwordEncoder) { 
  14.         this.passwordEncoder = passwordEncoder;
  15.     }
  17.     /** * 这是simple Matcher的源码，是equals的，比较传入的密码和realm返回的对象的密码，一般进行编码之后，就不一样了，所以需要自定义实现matcher * public boolean doCredentialsMatch(AuthenticationToken token, AuthenticationInfo info) { * Object tokenCredentials = this.getCredentials(token); * Object accountCredentials = this.getCredentials(info); * return this.equals(tokenCredentials, accountCredentials); * } * 正常操作，密码比较应该用这个类来实现，如果在realm里面能完成匹配，则这里默认返回true就行了 * @param authenticationToken * @param authenticationInfo * @return */
  18.     @Override
  19.     public boolean doCredentialsMatch(AuthenticationToken authenticationToken, AuthenticationInfo authenticationInfo) { 
  20.         //获取刚刚realm返回的处理过后的用户输入的密码
  21.         String password = (String) authenticationInfo.getCredentials();
  22.         //这里应该是数据库的密码，由authenticationInfo.authenticationInfo.getPrincipals().getPrimaryPrincipal()获取，这个对象的信息由Realm返回的SimpleAuthenticationInfo里面的第一个参数获得，如new SimpleAuthenticationInfo(userInfo,password,Realm.this.getName());获取到的就是userInfo，里面对应应存在用户在数据库的密码和盐值，然后matches第一个参数就是没有编码过后的用户密码和盐值处理过后的值
  23.         return passwordEncoder.matches("123456asxkdhz1568462416575",password);
  24.     }
  26. }

LocalSessionDao.java
验证session存储功能

  1. package com.lhstack.spring.shiro.session;
  3. import org.apache.shiro.session.Session;
  4. import org.apache.shiro.session.UnknownSessionException;
  5. import org.apache.shiro.session.mgt.SimpleSession;
  6. import org.apache.shiro.session.mgt.eis.AbstractSessionDAO;
  8. import java.io.Serializable;
  9. import java.util.Collection;
  10. import java.util.HashMap;
  11. import java.util.Map;
  13. /** * @author lhstack */
  14. public class LocalSessionDao extends AbstractSessionDAO { 
  16.     private final Map<Serializable,Session> map = new HashMap<>();
  18.     @Override
  19.     protected Serializable doCreate(Session session) { 
  20.         Serializable serializable = this.generateSessionId(session);
  21.         if(session instanceof SimpleSession){ 
  22.             ((SimpleSession) session).setId(serializable);
  23.         }
  24.         map.put(serializable,session);
  25.         return serializable;
  26.     }
  29.     @Override
  30.     protected Session doReadSession(Serializable serializable) { 
  31.         return map.get(serializable);
  32.     }
  35.     @Override
  36.     public void update(Session session) throws UnknownSessionException { 
  37.         map.put(session.getId(),session);
  38.     }
  41.     @Override
  42.     public void delete(Session session) { 
  43.         map.remove(session.getId());
  44.     }
  47.     @Override
  48.     public Collection<Session> getActiveSessions() { 
  49.         return map.values();
  50.     }
  51. }

TestController.java

  1. package com.lhstack.spring.shiro.controller;
  3. import org.apache.shiro.SecurityUtils;
  4. import org.apache.shiro.authc.UsernamePasswordToken;
  5. import org.apache.shiro.session.mgt.eis.SessionDAO;
  6. import org.springframework.beans.factory.annotation.Autowired;
  7. import org.springframework.http.MediaType;
  8. import org.springframework.stereotype.Controller;
  9. import org.springframework.web.bind.annotation.*;
  10. import java.io.IOException;
  11. import java.util.Map;
  13. /** * @author lhstack */
  14. @RequestMapping
  15. @Controller
  16. public class TestController { 
  18.     @Autowired
  19.     private SessionDAO sessionDAO;
  22.     @GetMapping(value = "session")
  23.     @ResponseBody
  24.     public Object hello(){ 
  25.         return sessionDAO.getActiveSessions();
  26.     }
  28.     @GetMapping("index")
  29.     public String index(){ 
  30.         return "index";
  31.     }
  33.     @PostMapping("login")
  34.     public String login(@RequestParam(name = "username") String username,
  35.                         @RequestParam(name = "password") String password) throws IOException { 
  36.         SecurityUtils.getSubject().login(new UsernamePasswordToken(username,password));
  37.         return "redirect:index";
  38.     }
  39. }

启动项目

我这里使用的是本地tomcat启动
在这里插入图片描述
访问页面，如localhost:8080/xxx，会自动跳转到登录页面
在这里插入图片描述
输入密码admin 密码1234567，会弹出异常页面，这里因为没有配置异常处理器，所以会使用springmvc默认的异常处理器，会打印出异常信息
意思就是密码匹配异常
在这里插入图片描述
输入正确的用户名和密码
就会跳转登录成功的页面，因为这里没有使用shiro的login，由通过Subject.login()实现，所以会按照controller里面的逻辑实现跳转
在这里插入图片描述

发表评论

表情：
评论列表 （有 0 条评论，269人围观）

还没有评论，来说两句吧...

相关阅读

    相关 shiro整合到ssm

    第一次学习shiro，记录下，欢迎指出存在的问题。至于里面的sql查询，只是单纯起到效果，有空再去优化数据结构与查询语句。 1.首先导入jar包 <!-- Sp

    清疚清疚/ 0 赞/ 178 阅读

    相关 SSM_Shiro 整合

    [SSM初始框架（非MAVEN）][SSM_MAVEN] 下载下来的使用的数据库是sql server. 如需更改请修改目录下config.proper

    女爷i女爷i/ 0 赞/ 283 阅读

    相关 ssm项目整合shiro

    之前有一篇文章是简单的介绍shiro的，但是现在需要整合到ssm的项目中，下面是步骤： 1、数据库中创建五张表，分别是用户表t\_user、角色表t\_role、权限表t\

    小灰灰小灰灰/ 0 赞/ 344 阅读