shiro 配置相关的使用

我就是我 2022-12-11 05:23 112阅读 0赞

**shiro 作为一套成熟的权限管理框架，之前好好学了一下，在补充点内容吧**

package com.wds.site.test.shiro;
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.config.IniSecurityManagerFactory;
    import org.apache.shiro.session.Session;
    import org.apache.shiro.subject.Subject;
    import org.apache.shiro.util.Factory;
    import org.junit.Test;
    
    
    
    /**
     * @author 作者:jcl
     * @createDate 创建时间：2018年11月28日 上午10:09:27
     */
    public class ShiroTest { 
    	
    	
    	@Test
    	public void test(){ 
    		
    		//SecurityManager 工厂,加载配置文件中权限配置信息
    		Factory<org.apache.shiro.mgt.SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
    		
    		// 创建一个权限的对象，并绑定权限对象
    		org.apache.shiro.mgt.SecurityManager securityManager = factory.getInstance();
    		
    		SecurityUtils.setSecurityManager(securityManager);
    		
    		
    		Subject subject = SecurityUtils.getSubject();
    		
    		Session session  = subject.getSession();
    		
    		UsernamePasswordToken  userToken = new UsernamePasswordToken("root","123");
    		
    		
    		userToken.setRememberMe(true);
    		
    		try{ 
    			// 用户登录
    			subject.login(userToken);
    			// 
    			String username = subject.getPrincipal().toString();
    			
    			System.out.println(username);
    			
    			
    			boolean isRole = subject.hasRole("admin");
    			
    			System.out.println(isRole);
    			boolean isPer = subject.isPermitted("xiaoming:run");
    			System.out.println(isPer);
    			
    			subject.logout();
    					
    		}catch(Exception e){ 
    			
    			
    		}
    		
    	}
    
    }

相关shiro 的spring配置

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    	xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.0.xsd"
    	default-lazy-init="true">
    
    	<description>Shiro Configuration</description>
    
        
    	<context:property-placeholder ignore-unresolvable="true" location="classpath:credit.properties" />
    	
    	
    	<bean name="shiroFilterChainDefinitions" class="java.lang.String">
    		<constructor-arg>
    			<value>
    				
    				${adminPath}/api/** = anon
    				/staAAtic/** = anon
    				/userfRRRiles/** = anon
    				${adminPath}/credit/supplierCollXXXXection/viewXXXform= anon
    				${adminPath}/cor/blackIXXXXnfo/dealView = anon
    				${adminPath}/cXXas = cXas
    				${adminPath}/loXXgin = auXXthc
    				${adminPath}/loXXgout = loXXgout
    				${adminPath}/** = user
    
    				/ReportXXServer/** = user
    			</value>
    		</constructor-arg>
    	</bean>
    	
    	
    	<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    		<property name="securityManager" ref="securityManager" />
    		<property name="loginUrl" value="${adminPath}/login" />
    		<property name="successUrl" value="${adminPath}?login" />
    		<property name="filters">
                <map>
                    <entry key="cas" value-ref="casFilter"/>
                    <entry key="authc" value-ref="formAuthenticationFilter"/>
                </map>
            </property>
    		<property name="filterChainDefinitions">
    			<ref bean="shiroFilterChainDefinitions"/>
    		</property>
    	</bean>
    	
    	  
    	<bean id="casFilter" class="org.apache.shiro.cas.CasFilter">  
    		<property name="failureUrl" value="${adminPath}/login"/>
    	</bean>
    	
    	
    	<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    		<property name="realm" ref="systemAuthorizingRealm" />
    		<property name="sessionManager" ref="sessionManager" />
    		<property name="cacheManager" ref="shiroCacheManager" />
    	</bean>
    	
    	
    	<bean id="sessionManager" class="com.wds.site.common.security.shiro.session.SessionManager"> 
    		<property name="sessionDAO" ref="sessionDAO"/>
    		
    		
    		<property name="globalSessionTimeout" value="${session.sessionTimeout}"/>
    		
    		
    		<property name="sessionValidationInterval" value="${session.sessionTimeoutClean}"/>
    
     		<property name="sessionValidationSchedulerEnabled" value="true"/>
     		
    		<property name="sessionIdCookie" ref="sessionIdCookie"/>
    		<property name="sessionIdCookieEnabled" value="true"/>
    	</bean>
    	
    	
    	<bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
    	    <constructor-arg name="name" value="credit.session.id"/>
    	</bean>
    
    	
    
    
    
    
    	<bean id="sessionDAO" class="com.wds.site.common.security.shiro.session.CacheSessionDAO">
    		<property name="sessionIdGenerator" ref="idGen" />
    		
    		<property name="cacheManager" ref="shiroCacheManager" />
    	</bean>
    	
    	
    
    	<bean id="shiroCacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
    		<property name="cacheManager" ref="cacheManager"/>
    	</bean>
    	
    	
    	<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
    	
    	
    	<bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor">
    		<property name="proxyTargetClass" value="true" />
    	</bean>
    	<bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
        	<property name="securityManager" ref="securityManager"/>
    	</bean>
    	
    </beans>