SSM+Maven+Shiro权限-1login登录

深藏阁楼爱情的钟 2024-04-19 14:25 49阅读 0赞

## Shiro权限-1login登录 ##

**1.添加shiro依赖**

<dependency>
          <groupId>commons-logging</groupId>
          <artifactId>commons-logging</artifactId>
          <version>1.2</version>
        </dependency>
        <dependency>
          <groupId>org.slf4j</groupId>
          <artifactId>slf4j-nop</artifactId>
          <version>1.7.24</version>
        </dependency>
        <dependency>
          <groupId>commons-collections</groupId>
          <artifactId>commons-collections</artifactId>
          <version>3.2.1</version>
        </dependency>
        <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-core</artifactId>
          <version>1.4.0</version>
        </dependency>
        <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-web</artifactId>
          <version>1.4.0</version>
        </dependency>
        <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-ehcache</artifactId>
          <version>1.4.0</version>
        </dependency>
        <dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-spring</artifactId>
          <version>1.4.0</version>
        </dependency>

**2.创建shiro配置文件–application-shiro.xml–约束文件**

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xmlns:context="http://www.springframework.org/schema/context"
           xmlns:aop="http://www.springframework.org/schema/aop"
           xmlns:tx="http://www.springframework.org/schema/tx"
           xsi:schemaLocation="http://www.springframework.org/schema/beans
            http://www.springframework.org/schema/beans/spring-beans.xsd
            http://www.springframework.org/schema/context
            http://www.springframework.org/schema/context/spring-context.xsd
        http://www.springframework.org/schema/aop
        http://www.springframework.org/schema/aop/spring-aop.xsd
         http://www.springframework.org/schema/tx
            http://www.springframework.org/schema/tx/spring-tx.xsd
    ">
    </beans>

**3.在web.xml中配置过滤器拦截所有请求**

<filter>
        <filter-name>shiroFilter</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
        <init-param>
          <param-name>targetFilterLifecycle</param-name>
          <param-value>true</param-value>
        </init-param>
      </filter>
      <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/*</url-pattern> </filter-mapping>

**4.在spring中放行请求，放行静态资源，login界面，和login请求**

<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
            <property name="securityManager" ref="securityManager"/>
    
            
            <property name="filterChainDefinitions">
                <value>
                    
                    /static/** = anon /login.jsp = anon  /**=authc </value> </property> </bean>  <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager"> </bean>

**5.在核心的spring中引入shiro**

**6.新建自定义Realm继承AuthorizingRealm并实现方法**

**7.在shiro的xml配置中将自定义Realm交个spring管理，并且向securityManager注入realm**

<bean id="manageRealm" class="com.dongpo.web.realm.ManageRealm">
    
        </bean>
    
        
        <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
            <property name="realm" ref="manageRealm"/>
        </bean>
    </beans>

**8.在Realm中的doGetAuthenticationInfo方法中执行认证，如下**

protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException { 
            //拿到用户信息
            String manageName = (String)token.getPrincipal();
            Manager manager = managerService.getManagerByName(manageName);
            System.out.println("查找的用户"+manager);
            String password = (String)token.getCredentials();
            //向数据库中查找用户
            if(manager==null)
                return null;
            //向认证信息中传入-主体，密码，盐，当前对象名称this.getName()
            SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(
                    manager,manager.getM_password(),this.getName()
            );
            return info;
        }

**9.这时是否认证成功，需要 用过滤器来监听**  
自定义form监听器 继承FormAuthenticationFilter，并且在shiro配置监听器，

<bean id="formFilter" class="com.dongpo.web.filter.MyFormFilter">
    
        </bean>

在shiro过滤器中引入这个过滤器

监听认证成功和认证失败，响应给浏览器

//认证成功
        protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, ServletResponse response) throws Exception { 
            response.setCharacterEncoding("utf-8");
            AjaxRes ajaxRes = new AjaxRes();
            ajaxRes.setSuccess(true);
            ajaxRes.setMsg("认证成功");
            String s = new ObjectMapper().writeValueAsString(ajaxRes);
            response.getWriter().print(s);
            return false;
        }
    
        //认证失败
        protected boolean onLoginFailure(AuthenticationToken token, AuthenticationException e, ServletRequest request, ServletResponse response) { 
            response.setCharacterEncoding("utf-8");
            AjaxRes ajaxRes = new AjaxRes();
            ajaxRes.setSuccess(false);
            ajaxRes.setMsg("认证失败");
            String s = null;
            try { 
                s = new ObjectMapper().writeValueAsString(ajaxRes);
                response.getWriter().print(s);
            } catch (Exception e1) { 
                e1.printStackTrace();
            }
            return false;
        }