shiro与spring的整合

最新推荐文章于 2024-02-22 17:31:29 发布

BeiyueManzi

最新推荐文章于 2024-02-22 17:31:29 发布

阅读量682

点赞数

分类专栏： javaweb 文章标签： spring shiro

本文链接：https://blog.csdn.net/BeiyueManzi/article/details/73225052

版权

javaweb 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

shiro与spring的整合

声明

这是一篇很浅的啰嗦的混乱的可行性不确定的关于shiro-spring的文章，多多指教，(^__^) 嘻嘻……

背景

话说这段时间很闲的，工作得有工作的样啊，打游戏看视频又或刷淘宝可不是我能选择的，，，我想学习shiro，正好公司的架构里有用到它，于是，，，

必要前提

使用maven构建的项目，额，当然这并不是真的一定必要的；
项目使用了spring-mvc框架

引入jar

<dependency>
    <groupId>org.apache.shiro</groupId>
    <artifactId>shiro-spring</artifactId>
    <version>1.2.2</version>
</dependency>
<dependency>
    <groupId>org.apache.shiro</groupId>
    <artifactId>shiro-ehcache</artifactId>
    <version>1.2.2</version>
</dependency>

web.xml的配置

配置一个较为特殊的过滤器，为什么这么说呢？因为用了DelegatingFilterProxy这个过滤器，，，对的，认识吗？知道它的工作原理吗？不懂，找个时间学习一下吧！这段配置的作用是使我们下一步配置的名字为shiroFilter的bean起作用的

<filter>
    <filter-name>shiroFilter</filter-name>
    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
 </filter>
 <filter-mapping>
    <filter-name>shiroFilter</filter-name>
    <url-pattern>/*</url-pattern>
    <dispatcher>REQUEST</dispatcher>
    <dispatcher>FORWARD</dispatcher>
 </filter-mapping>

配置一个名字叫shiroFilter的org.apache.shiro.spring.web.ShiroFilterFactoryBean类的bean

没理解标题的直接看下面的这段配置代码哈哈

<bean id="shiroFilter"  class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    <property name="securityManager" ref="securityManager" />
    <property name="loginUrl" value="/login" />
    <property name="successUrl" value="/index" />
    <property name="filters">
        <map>
            <entry key="authc" value-ref="authcFilter" />
            <!-- <entry key="site" value-ref="siteFilter" /> -->
            <!-- <entry key="user" value-ref="userFilter" /> -->
            <!-- <entry key="logout" value-ref="logoutFilter" /> -->
        </map>
    </property>
    <property name="filterChainDefinitions">
        <value>
            / = anon
            /wx/** = anon
            /usertest/** = anon
            /verifyCode/** = anon
            /user/saveNewAccount = anon
            /logout = anon
            /resources/** = anon
            /doc/downloadFile/**=anon
            /doc/upload = anon
            /eventEnroll/wxsave=anon
            /** = authc
        </value>
    </property>
</bean>

shiro工作流程猜想

看这个配置我们来猜想一下这个ShiroFilterFactoryBean类是干嘛使的？你也试着猜想一下，不求答案的准确性。看名字我们可以猜测出这个类是一个可以通过配置来生产shiroFilter的，嗯，shiroFilter或许是一个接口吧？！然后这个shiroFilter的作用大概是过滤所有用户请求的。。通过filterChainDefinitions属性配置那些url是不用过滤的，嗯，所谓的不用过滤大概就是不用考虑权限问题的所有人都可以访问的一些URL了。另外还有loginUrl和successUrl这两个属性，为什么要单独的配置这两个url呢？好了，我们接下来看另外一个参数————filters，看起来很像是一个map啊，可以存放多个过滤器的map。。 map的key可以随便取名，而value应该是某个？Filter类或接口的子类，依据就是下面这段配置

<bean id="authcFilter" class="com.xxx.security.GxwlFormAuthenticationFilter" />

好吧，我还是把这个类的代码都贴出来好了

import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
public class GxwlFormAuthenticationFilter extends FormAuthenticationFilter {

    @Autowired
    private GxwlSysUserService userSerivce;

    // 会话超时
    @Override
    protected boolean preHandle(ServletRequest request, ServletResponse response)
            throws Exception {
        HttpServletRequest req = (HttpServletRequest)request;
        System.out.println("[" + req.getServletPath() + "] session ID : " + SessionUtil.getSession().getId());
        if (!isLoginRequest(request, response)){
            if (SessionUtil.getCurrentUser() == null) {
                Map<String, Object> map = new HashMap<String, Object>();
                map.put("resultCode", -1);
                map.put("resultMsg", "会话超时");
                map.put("errorCode", "SessionTimeout");
                JsonUtil.writeJson(request, response, map);
                return false;
            }
        }
        // 防止重复登录导致的报错，登录前注销一次
        else {
            SecurityUtils.getSubject().logout();
        }
        return super.preHandle(request, response);
    }

    // 登录成功
    @Override
    protected boolean onLoginSuccess(AuthenticationToken token,
            Subject subject, ServletRequest request, ServletResponse response)
            throws Exception {
        Map<String, Object> map = new HashMap<String, Object>();
        map.put("resultCode", 0);
        map.put("resultMsg", "登录成功");
        map.put("errorCode", "");
        map.put("row", subject.getPrincipal());
        JsonUtil.writeJson(request, response, map);
        return false;
//      return super.onLoginSuccess(token, subject, request, response);
    }

    // 登录失败
    @Override
    protected boolean onLoginFailure(AuthenticationToken authcToken,
            AuthenticationException e, ServletRequest request,
            ServletResponse response) {
        Map<String, Object> map = new HashMap<String, Object>();
        UsernamePasswordToken token = (UsernamePasswordToken)authcToken;
        map.put("resultCode", -1);
        try {
            if (e instanceof UnknownAccountException) {
                map.put("resultMsg", "输入的用户名或密码有误");
                map.put("errorCode", "UnknownAccount");
            }
            else if (e instanceof IncorrectCredentialsException) {
                map.put("resultMsg", "输入的用户名或密码有误");
                map.put("errorCode", "IncorrectCredentials");
            }
            else if (e instanceof DisabledAccountException) {
                map.put("resultMsg", "用户【" + token.getUsername() + "】已经失效");
                map.put("errorCode", "DisabledAccount");
            }
            else {
                map.put("resultMsg", e.getClass().getName());
                map.put("errorCode", e.getClass().getName());
            }
            JsonUtil.writeJson(request, response, map);
        } catch (Exception e1) {
            e1.printStackTrace();
        }
        return false;
    //      return super.onLoginFailure(token, e, request, response);
    }

}

。。O__O “…；我们还是猜测一下这个filter是干嘛用的就好了，承认自己就是个砸砸。。通过调试模式观察（顾名思义）得出以下结论：

每一个请求都会调用preHandle方法注意是所有的请求
登入成功调用onLoginSuccess方法
登入失败调用onLoginFailure方法

类似FormAuthenticationFilter的类shiro提供了很多，至于每个类有什么特性有待研究了。就现在的分析来看，shiro这么个设计使得我们可以很容易的处理拦截到的每一个请求，很赞啊感觉。另外一个问题，这个filters属性可以配置多个filter，你觉得他们的工作顺序是怎么样的呢？我猜是按配置的先后顺序来的吧捂脸，有兴趣自己试试吧欠打有没有！

刚刚说到登入成功（认证成功）后会调用onLoginSuccess方法，反之，调用onLoginFailure方法。接下来我们是继续分析ShiroFilterFactoryBean类的另外一个配置属性securityManager呢？还是分心的去看怎么实现认证这个功能呢？我选择前者，因为说了这个参数我们大概就把后面这个问题给块收拾了，O(∩_∩)O哈哈~
看配置知道securityManager属性的值是一个bean的引用，

<!-- Shiro's main business-tier object for web-enabled applications -->
<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    <property name="realm" ref="shiroDbRealm" />
    <property name="cacheManager" ref="shiroEhcacheManager" />
</bean>

头脑运转起来，，，DefaultWebSecurityManager类是什么梗？默认web安全管理类？！这名字通俗易懂啊，但却猜不出来它都具体干啥用的，，很明显这类不是咱们写的啊，看源代码？算了先，既然拿他没辙，我们就看看他的属性吧，或许能从中折腾出个什么眉目。

realm属性

首先realm这单词我很陌生！我们还是直接看它的值吧，，是个ref，引用的是另外一个继承了org.apache.shiro.realm.AuthorizingRealm类的自定义类的实例。

<!-- 自定义Realm -->
<bean id="shiroDbRealm" class="com.xxx.security.GxwlShiroDbRealm">
</bean>

com.xxx.security.GxwlShiroDbRealm类代码
import org.apache.shiro.realm.AuthorizingRealm;
public class GxwlShiroDbRealm extends AuthorizingRealm {

    @Autowired
    private GxwlSysUserService userService;

    /**
     * 认证
     */
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException {
        UsernamePasswordToken token = (UsernamePasswordToken)authcToken;
        GxwlSysUser user = userService.findByUserName(token.getUsername());
        if (user == null) {
            throw new UnknownAccountException(); // 没找到账号
        }
        if ("disabled".equals(user.getStatus())) {
            throw new DisabledAccountException(); // 无效的账号
        }
        String username = user.getUserName();
        String salt = user.getSalt();
        SimpleAuthenticationInfo simpleAuthenticationInfo = new SimpleAuthenticationInfo(
                new GxwlShiroUser(user.getUserId(), user.getUserName(), user.getRealname()), 
                user.getPassword(),
                ByteSource.Util.bytes(username + salt),
                getName());
        return simpleAuthenticationInfo;
    }

    /**
     * 授权
     */
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(
            PrincipalCollection principals) {
        GxwlShiroUser user = (GxwlShiroUser)principals.getPrimaryPrincipal();
        SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
        info.addStringPermissions(userService.getUserPermissionList(user.getUserId()));
        return info;
    }

    /**
     * 设定密码校验算法与迭代次数
     */
    @PostConstruct
    public void initCredentialsMatcher() {
        HashedCredentialsMatcher matcher = new HashedCredentialsMatcher("SHA-256");
        //GxwlSysUserService.DEFAULT_HASH_INTERATIONS常量的值是64
        matcher.setHashIterations(GxwlSysUserService.DEFAULT_HASH_INTERATIONS);
        setCredentialsMatcher(matcher);
    }
}

两个生命周期方法（对了，好像叫生命周期方法有点不妥的赶脚？）：

doGetAuthenticationInfo

接收到用户请求后，如果发现其尚未被认证时调用该方法。我们用这个方法做以下两件事：

根据登入用户的用户名查找数据库，并判断用户是否已经注册或者已经失效

判断用户是否存在、账号与密码是否正确又或是否过期等等。通过抛出不同的异常来表示认证结果，比如抛出UnknownAccountException异常表示账号不存在；DisabledAccountException则表示用户是无效的，然而在这个方法里，我们并没有去做“判断用户名跟密码是否匹配，如果过不匹配时抛出IncorrectCredentialsException异常”，因为根据实际运行情况来看，这一步由shiro自行完成了？？。。。当该方法抛出了认证失败异常后，最终便会执行前面提到的GxwlFormAuthenticationFilter类的onLoginFailure方法，它的AuthenticationException e参数就是认证失败时所抛出的异常了，嗯，我们于是就可以根据异常类型来判断认证结果并返回给客户端了。

创建并返回一个AuthenticationInfo实例，当然可以是它的子类。

登入用户输入的用户名已经注册，这时就需要根据查询回来的用户信息创建一个AuthenticationInfo实例并返回，细节看自行代码了，貌似没什么可描述的了额

doGetAuthorizationInfo

需要判断用户权限时调用该方法，比如调用@RequiresPermissions(“USER_SAVE”)或@RequiresRoles注解的Controller方法时，如果每次判断权限都要调用该方法来重新获取权限是没有效率的，因此这里通常需要使用到缓存来避免这个问题，这个问题将在讲下一个属性时来解决它。

cacheManager属性

很明显是做缓存用的，对什么进行缓存呢？这里缓存的是用户权限。在这里cacheManager的ref值是”shiroEhcacheManager”,再看看shiroEhcacheManager这个bean是怎么配置的：

<!-- 用户授权信息Cache, 采用EhCache -->
<bean id="shiroEhcacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
    <property name="cacheManagerConfigFile" value="classpath:shiro/ehcache-shiro.xml" />
</bean>

还有一个ehcache-shiro.xml文件，内容是：

<?xml version="1.0" encoding="UTF-8"?>
<ehcache updateCheck="false" name="shiroCache">

    <defaultCache maxElementsInMemory="10000" eternal="false"
        timeToIdleSeconds="120" timeToLiveSeconds="120" overflowToDisk="false"
        diskPersistent="false" diskExpiryThreadIntervalSeconds="120" />

</ehcache>

嗯，至此用户授权信息的缓存就配置好了。剩下需要研究的就是ehcache-shiro.xml这个配置文件的配置选项了。

其他细节

用户表的Salt字段的值是怎么算的？这个值在注册时计算的，看代码

@Override
public void setDefaultPassword(GxwlSysUser gxwlSysUser) {
    String salt1 = gxwlSysUser.getUserName();
    //import org.apache.shiro.crypto.SecureRandomNumberGenerator;
    String salt2 = new SecureRandomNumberGenerator().nextBytes().toHex();
    String salt = salt1 + salt2;
    //PropertiesUtil.getProperty("user.defaultPassword") 获取默认密码123456
    String defaultPassword = HashUtil.sha256Hex(PropertiesUtil.getProperty("user.defaultPassword"));

    //public static final int DEFAULT_HASH_INTERATIONS = 64;
    gxwlSysUser.setPassword(HashUtil.sha256Hex(defaultPassword, salt, DEFAULT_HASH_INTERATIONS));
    gxwlSysUser.setSalt(salt2);
}

怎么登入

web页登入

html:

    <div class="loginframe">
        <form id="loginForm">
            <div class="apln">
                <div class="mt">ACCOUNT LOGIN</div>
                <div class="miss"></div>
                <div class="mc">
                    <input id="username" name="username" type="text" class="itxt" placeholder="账号">
                    <input id="password" name="password" type="password" class="itxt" placeholder="密码" style="margin-top:20px;">
                    <div id="btn_submit" class="button">登录</div>
                </div>
            </div>
        </form>
    </div>

javascript:

    <script type="text/javascript" src="${ctx}/resources/libs/${jqueryEasyui}/jquery.min.js"></script>
    <script type="text/javascript" src="${ctx}/resources/libs/jssha/sha.js"></script>

    <script type="text/javascript">
    !function($) {

        $("#username").focus();

        $(document).keypress(function(event) {
            if (event.which == 13) {
                submitForm();
            }
        });

        $('#btn_submit').on('click', submitForm);

        function validate() {
            var username = $('#username').val();
            var password = $('#password').val();
            if (!username) {
                $('#username').focus();
                return false;
            }
            if (!password) {
                $('#password').focus();
                return false;
            }
            return true;
        }

        function submitForm() {
            if (validate()) {
                var uValue = $("#username").val(),
                    pValue = $("#password").val();

                /*
                 *拷长一大段代码  主要是要提醒你下面这一行很重要 jsSHA是什么对象什么梗
                 *记得引入一个js————<script type="text/javascript" src="${ctx}/resources/libs/jssha/sha.js"></script>
                 *这个sha.js网上应该能找到吧？我试试  
                 *我已经将sha.js的所有代码贴到文章的末尾其他必要文件那一项了！呜呜   
                 */ 
                var shaObj = new jsSHA(pValue, "TEXT"),
                    pValue = shaObj.getHash("SHA-256", "HEX");

                $.ajax({
                    type: "POST",
                    url: "${ctx}/login",
                    data: {
                        username: uValue,
                        password: pValue
                    }
                }).done(function(res) {
                    $("#loginForm")[0].reset();
                    if (res.resultCode == "0") {
                        window.location.href = "${ctx}/index";
                    } else {
                        $('.miss').text(res.resultMsg)
                    }
                }).fail(function(jqXHR, textStatus, errorThrown) {
                    $("#loginForm")[0].reset();
                    $.messager.alert("温馨提示", "登录时系统出错！", "error");
                });
            }
        }

    }(window.jQuery);
    </script>

一些必要的类或文件

HashUtil

import org.apache.shiro.crypto.hash.SimpleHash;

public class HashUtil {

    public static final String MD2 = "MD2";
    public static final String MD5 = "MD5";
    public static final String SHA1 = "SHA-1";
    public static final String SHA224 = "SHA-224";
    public static final String SHA256 = "SHA-256";
    public static final String SHA384 = "SHA-384";
    public static final String SHA512 = "SHA-512";

    public static final int DEFAULT_ITERATIONS = 1;

    public static String md2Hex(String str) {
        return md2Hex(str, null, DEFAULT_ITERATIONS);
    }

    public static String md2Hex(String str, Object salt) {
        return md2Hex(str, salt, DEFAULT_ITERATIONS);
    }

    public static String md2Hex(String str, Object salt, int hashIterations) {
        return new SimpleHash(MD2, str, salt, hashIterations).toHex();
    }

    public static String md2Base64(String str) {
        return md2Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String md2Base64(String str, Object salt) {
        return md2Base64(str, salt, DEFAULT_ITERATIONS);
    }

    public static String md2Base64(String str, Object salt, int hashIterations) {
        return new SimpleHash(MD2, str, salt, hashIterations).toBase64();
    }

    public static String md5Hex(String str) {
        return md5Hex(str, null, DEFAULT_ITERATIONS);
    }

    public static String md5Hex(String str, Object salt) {
        return md5Hex(str, salt, DEFAULT_ITERATIONS);
    }

    public static String md5Hex(String str, Object salt, int hashIterations) {
        return new SimpleHash(MD5, str, salt, hashIterations).toHex();
    }

    public static String md5Base64(String str) {
        return md5Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String md5Base64(String str, Object salt) {
        return md5Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String md5Base64(String str, Object salt, int hashIterations) {
        return new SimpleHash(MD5, str, salt, hashIterations).toBase64();
    }

    public static String sha1Hex(String str) {
        return sha1Hex(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha1Hex(String str, Object salt) {
        return sha1Hex(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha1Hex(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA1, str, salt, hashIterations).toHex();
    }

    public static String sha1Base64(String str) {
        return sha1Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha1Base64(String str, Object salt) {
        return sha1Base64(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha1Base64(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA1, str, salt, hashIterations).toBase64();
    }

    public static String sha224Hex(String str) {
        return sha224Hex(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha224Hex(String str, Object salt) {
        return sha224Hex(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha224Hex(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA224, str, salt, hashIterations).toHex();
    }

    public static String sha224Base64(String str) {
        return sha224Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha224Base64(String str, Object salt) {
        return sha224Base64(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha224Base64(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA224, str, salt, hashIterations).toBase64();
    }

    public static String sha256Hex(String str) {
        return sha256Hex(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha256Hex(String str, Object salt) {
        return sha256Hex(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha256Hex(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA256, str, salt, hashIterations).toHex();
    }

    public static String sha256Base64(String str) {
        return sha256Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha256Base64(String str, Object salt) {
        return sha256Base64(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha256Base64(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA256, str, salt, hashIterations).toBase64();
    }

    public static String sha384Hex(String str) {
        return sha384Hex(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha384Hex(String str, Object salt) {
        return sha384Hex(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha384Hex(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA384, str, salt, hashIterations).toHex();
    }

    public static String sha384Base64(String str) {
        return sha384Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha384Base64(String str, Object salt) {
        return sha384Base64(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha384Base64(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA384, str, salt, hashIterations).toBase64();
    }

    public static String sha512Hex(String str) {
        return sha512Hex(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha512Hex(String str, Object salt) {
        return sha512Hex(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha512Hex(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA512, str, salt, hashIterations).toHex();
    }

    public static String sha512Base64(String str) {
        return sha512Base64(str, null, DEFAULT_ITERATIONS);
    }

    public static String sha512Base64(String str, Object salt) {
        return sha512Base64(str, salt, DEFAULT_ITERATIONS);
    }

    public static String sha512Base64(String str, Object salt, int hashIterations) {
        return new SimpleHash(SHA512, str, salt, hashIterations).toBase64();
    }
}

sha.js

/*
 A JavaScript implementation of the SHA family of hashes, as
 defined in FIPS PUB 180-2 as well as the corresponding HMAC implementation
 as defined in FIPS PUB 198a

 Copyright Brian Turek 2008-2013
 Distributed under the BSD License
 See http://caligatio.github.com/jsSHA/ for more information

 Several functions taken from Paul Johnston
*/
'use strict';(function(T){function z(a,c,b){var g=0,f=[0],h="",l=null,h=b||"UTF8";if("UTF8"!==h&&"UTF16"!==h)throw"encoding must be UTF8 or UTF16";if("HEX"===c){if(0!==a.length%2)throw"srcString of HEX type must be in byte increments";l=B(a);g=l.binLen;f=l.value}else if("ASCII"===c||"TEXT"===c)l=J(a,h),g=l.binLen,f=l.value;else if("B64"===c)l=K(a),g=l.binLen,f=l.value;else throw"inputFormat must be HEX, TEXT, ASCII, or B64";this.getHash=function(a,c,b,h){var l=null,d=f.slice(),n=g,p;3===arguments.length?
"number"!==typeof b&&(h=b,b=1):2===arguments.length&&(b=1);if(b!==parseInt(b,10)||1>b)throw"numRounds must a integer >= 1";switch(c){case "HEX":l=L;break;case "B64":l=M;break;default:throw"format must be HEX or B64";}if("SHA-1"===a)for(p=0;p<b;p++)d=y(d,n),n=160;else if("SHA-224"===a)for(p=0;p<b;p++)d=v(d,n,a),n=224;else if("SHA-256"===a)for(p=0;p<b;p++)d=v(d,n,a),n=256;else if("SHA-384"===a)for(p=0;p<b;p++)d=v(d,n,a),n=384;else if("SHA-512"===a)for(p=0;p<b;p++)d=v(d,n,a),n=512;else throw"Chosen SHA variant is not supported";
return l(d,N(h))};this.getHMAC=function(a,b,c,l,s){var d,n,p,m,w=[],x=[];d=null;switch(l){case "HEX":l=L;break;case "B64":l=M;break;default:throw"outputFormat must be HEX or B64";}if("SHA-1"===c)n=64,m=160;else if("SHA-224"===c)n=64,m=224;else if("SHA-256"===c)n=64,m=256;else if("SHA-384"===c)n=128,m=384;else if("SHA-512"===c)n=128,m=512;else throw"Chosen SHA variant is not supported";if("HEX"===b)d=B(a),p=d.binLen,d=d.value;else if("ASCII"===b||"TEXT"===b)d=J(a,h),p=d.binLen,d=d.value;else if("B64"===
b)d=K(a),p=d.binLen,d=d.value;else throw"inputFormat must be HEX, TEXT, ASCII, or B64";a=8*n;b=n/4-1;n<p/8?(d="SHA-1"===c?y(d,p):v(d,p,c),d[b]&=4294967040):n>p/8&&(d[b]&=4294967040);for(n=0;n<=b;n+=1)w[n]=d[n]^909522486,x[n]=d[n]^1549556828;c="SHA-1"===c?y(x.concat(y(w.concat(f),a+g)),a+m):v(x.concat(v(w.concat(f),a+g,c)),a+m,c);return l(c,N(s))}}function s(a,c){this.a=a;this.b=c}function J(a,c){var b=[],g,f=[],h=0,l;if("UTF8"===c)for(l=0;l<a.length;l+=1)for(g=a.charCodeAt(l),f=[],2048<g?(f[0]=224|
(g&61440)>>>12,f[1]=128|(g&4032)>>>6,f[2]=128|g&63):128<g?(f[0]=192|(g&1984)>>>6,f[1]=128|g&63):f[0]=g,g=0;g<f.length;g+=1)b[h>>>2]|=f[g]<<24-h%4*8,h+=1;else if("UTF16"===c)for(l=0;l<a.length;l+=1)b[h>>>2]|=a.charCodeAt(l)<<16-h%4*8,h+=2;return{value:b,binLen:8*h}}function B(a){var c=[],b=a.length,g,f;if(0!==b%2)throw"String of HEX type must be in byte increments";for(g=0;g<b;g+=2){f=parseInt(a.substr(g,2),16);if(isNaN(f))throw"String of HEX type contains invalid characters";c[g>>>3]|=f<<24-g%8*4}return{value:c,
binLen:4*b}}function K(a){var c=[],b=0,g,f,h,l,r;if(-1===a.search(/^[a-zA-Z0-9=+\/]+$/))throw"Invalid character in base-64 string";g=a.indexOf("=");a=a.replace(/\=/g,"");if(-1!==g&&g<a.length)throw"Invalid '=' found in base-64 string";for(f=0;f<a.length;f+=4){r=a.substr(f,4);for(h=l=0;h<r.length;h+=1)g="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".indexOf(r[h]),l|=g<<18-6*h;for(h=0;h<r.length-1;h+=1)c[b>>2]|=(l>>>16-8*h&255)<<24-b%4*8,b+=1}return{value:c,binLen:8*b}}function L(a,
c){var b="",g=4*a.length,f,h;for(f=0;f<g;f+=1)h=a[f>>>2]>>>8*(3-f%4),b+="0123456789abcdef".charAt(h>>>4&15)+"0123456789abcdef".charAt(h&15);return c.outputUpper?b.toUpperCase():b}function M(a,c){var b="",g=4*a.length,f,h,l;for(f=0;f<g;f+=3)for(l=(a[f>>>2]>>>8*(3-f%4)&255)<<16|(a[f+1>>>2]>>>8*(3-(f+1)%4)&255)<<8|a[f+2>>>2]>>>8*(3-(f+2)%4)&255,h=0;4>h;h+=1)b=8*f+6*h<=32*a.length?b+"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(l>>>6*(3-h)&63):b+c.b64Pad;return b}function N(a){var c=
{outputUpper:!1,b64Pad:"="};try{a.hasOwnProperty("outputUpper")&&(c.outputUpper=a.outputUpper),a.hasOwnProperty("b64Pad")&&(c.b64Pad=a.b64Pad)}catch(b){}if("boolean"!==typeof c.outputUpper)throw"Invalid outputUpper formatting option";if("string"!==typeof c.b64Pad)throw"Invalid b64Pad formatting option";return c}function U(a,c){return a<<c|a>>>32-c}function u(a,c){return a>>>c|a<<32-c}function t(a,c){var b=null,b=new s(a.a,a.b);return b=32>=c?new s(b.a>>>c|b.b<<32-c&4294967295,b.b>>>c|b.a<<32-c&4294967295):
new s(b.b>>>c-32|b.a<<64-c&4294967295,b.a>>>c-32|b.b<<64-c&4294967295)}function O(a,c){var b=null;return b=32>=c?new s(a.a>>>c,a.b>>>c|a.a<<32-c&4294967295):new s(0,a.a>>>c-32)}function V(a,c,b){return a^c^b}function P(a,c,b){return a&c^~a&b}function W(a,c,b){return new s(a.a&c.a^~a.a&b.a,a.b&c.b^~a.b&b.b)}function Q(a,c,b){return a&c^a&b^c&b}function X(a,c,b){return new s(a.a&c.a^a.a&b.a^c.a&b.a,a.b&c.b^a.b&b.b^c.b&b.b)}function Y(a){return u(a,2)^u(a,13)^u(a,22)}function Z(a){var c=t(a,28),b=t(a,
34);a=t(a,39);return new s(c.a^b.a^a.a,c.b^b.b^a.b)}function $(a){return u(a,6)^u(a,11)^u(a,25)}function aa(a){var c=t(a,14),b=t(a,18);a=t(a,41);return new s(c.a^b.a^a.a,c.b^b.b^a.b)}function ba(a){return u(a,7)^u(a,18)^a>>>3}function ca(a){var c=t(a,1),b=t(a,8);a=O(a,7);return new s(c.a^b.a^a.a,c.b^b.b^a.b)}function da(a){return u(a,17)^u(a,19)^a>>>10}function ea(a){var c=t(a,19),b=t(a,61);a=O(a,6);return new s(c.a^b.a^a.a,c.b^b.b^a.b)}function R(a,c){var b=(a&65535)+(c&65535);return((a>>>16)+(c>>>
16)+(b>>>16)&65535)<<16|b&65535}function fa(a,c,b,g){var f=(a&65535)+(c&65535)+(b&65535)+(g&65535);return((a>>>16)+(c>>>16)+(b>>>16)+(g>>>16)+(f>>>16)&65535)<<16|f&65535}function S(a,c,b,g,f){var h=(a&65535)+(c&65535)+(b&65535)+(g&65535)+(f&65535);return((a>>>16)+(c>>>16)+(b>>>16)+(g>>>16)+(f>>>16)+(h>>>16)&65535)<<16|h&65535}function ga(a,c){var b,g,f;b=(a.b&65535)+(c.b&65535);g=(a.b>>>16)+(c.b>>>16)+(b>>>16);f=(g&65535)<<16|b&65535;b=(a.a&65535)+(c.a&65535)+(g>>>16);g=(a.a>>>16)+(c.a>>>16)+(b>>>
16);return new s((g&65535)<<16|b&65535,f)}function ha(a,c,b,g){var f,h,l;f=(a.b&65535)+(c.b&65535)+(b.b&65535)+(g.b&65535);h=(a.b>>>16)+(c.b>>>16)+(b.b>>>16)+(g.b>>>16)+(f>>>16);l=(h&65535)<<16|f&65535;f=(a.a&65535)+(c.a&65535)+(b.a&65535)+(g.a&65535)+(h>>>16);h=(a.a>>>16)+(c.a>>>16)+(b.a>>>16)+(g.a>>>16)+(f>>>16);return new s((h&65535)<<16|f&65535,l)}function ia(a,c,b,g,f){var h,l,r;h=(a.b&65535)+(c.b&65535)+(b.b&65535)+(g.b&65535)+(f.b&65535);l=(a.b>>>16)+(c.b>>>16)+(b.b>>>16)+(g.b>>>16)+(f.b>>>
16)+(h>>>16);r=(l&65535)<<16|h&65535;h=(a.a&65535)+(c.a&65535)+(b.a&65535)+(g.a&65535)+(f.a&65535)+(l>>>16);l=(a.a>>>16)+(c.a>>>16)+(b.a>>>16)+(g.a>>>16)+(f.a>>>16)+(h>>>16);return new s((l&65535)<<16|h&65535,r)}function y(a,c){var b=[],g,f,h,l,r,s,u=P,t=V,v=Q,d=U,n=R,p,m,w=S,x,q=[1732584193,4023233417,2562383102,271733878,3285377520];a[c>>>5]|=128<<24-c%32;a[(c+65>>>9<<4)+15]=c;x=a.length;for(p=0;p<x;p+=16){g=q[0];f=q[1];h=q[2];l=q[3];r=q[4];for(m=0;80>m;m+=1)b[m]=16>m?a[m+p]:d(b[m-3]^b[m-8]^b[m-
14]^b[m-16],1),s=20>m?w(d(g,5),u(f,h,l),r,1518500249,b[m]):40>m?w(d(g,5),t(f,h,l),r,1859775393,b[m]):60>m?w(d(g,5),v(f,h,l),r,2400959708,b[m]):w(d(g,5),t(f,h,l),r,3395469782,b[m]),r=l,l=h,h=d(f,30),f=g,g=s;q[0]=n(g,q[0]);q[1]=n(f,q[1]);q[2]=n(h,q[2]);q[3]=n(l,q[3]);q[4]=n(r,q[4])}return q}function v(a,c,b){var g,f,h,l,r,t,u,v,z,d,n,p,m,w,x,q,y,C,D,E,F,G,H,I,e,A=[],B,k=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,
1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,
2361852424,2428436474,2756734187,3204031479,3329325298];d=[3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428];f=[1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225];if("SHA-224"===b||"SHA-256"===b)n=64,g=(c+65>>>9<<4)+15,w=16,x=1,e=Number,q=R,y=fa,C=S,D=ba,E=da,F=Y,G=$,I=Q,H=P,d="SHA-224"===b?d:f;else if("SHA-384"===b||"SHA-512"===b)n=80,g=(c+128>>>10<<5)+31,w=32,x=2,e=s,q=ga,y=ha,C=ia,D=ca,E=ea,F=Z,G=aa,I=X,H=W,k=[new e(k[0],
3609767458),new e(k[1],602891725),new e(k[2],3964484399),new e(k[3],2173295548),new e(k[4],4081628472),new e(k[5],3053834265),new e(k[6],2937671579),new e(k[7],3664609560),new e(k[8],2734883394),new e(k[9],1164996542),new e(k[10],1323610764),new e(k[11],3590304994),new e(k[12],4068182383),new e(k[13],991336113),new e(k[14],633803317),new e(k[15],3479774868),new e(k[16],2666613458),new e(k[17],944711139),new e(k[18],2341262773),new e(k[19],2007800933),new e(k[20],1495990901),new e(k[21],1856431235),
new e(k[22],3175218132),new e(k[23],2198950837),new e(k[24],3999719339),new e(k[25],766784016),new e(k[26],2566594879),new e(k[27],3203337956),new e(k[28],1034457026),new e(k[29],2466948901),new e(k[30],3758326383),new e(k[31],168717936),new e(k[32],1188179964),new e(k[33],1546045734),new e(k[34],1522805485),new e(k[35],2643833823),new e(k[36],2343527390),new e(k[37],1014477480),new e(k[38],1206759142),new e(k[39],344077627),new e(k[40],1290863460),new e(k[41],3158454273),new e(k[42],3505952657),
new e(k[43],106217008),new e(k[44],3606008344),new e(k[45],1432725776),new e(k[46],1467031594),new e(k[47],851169720),new e(k[48],3100823752),new e(k[49],1363258195),new e(k[50],3750685593),new e(k[51],3785050280),new e(k[52],3318307427),new e(k[53],3812723403),new e(k[54],2003034995),new e(k[55],3602036899),new e(k[56],1575990012),new e(k[57],1125592928),new e(k[58],2716904306),new e(k[59],442776044),new e(k[60],593698344),new e(k[61],3733110249),new e(k[62],2999351573),new e(k[63],3815920427),new e(3391569614,
3928383900),new e(3515267271,566280711),new e(3940187606,3454069534),new e(4118630271,4000239992),new e(116418474,1914138554),new e(174292421,2731055270),new e(289380356,3203993006),new e(460393269,320620315),new e(685471733,587496836),new e(852142971,1086792851),new e(1017036298,365543100),new e(1126000580,2618297676),new e(1288033470,3409855158),new e(1501505948,4234509866),new e(1607167915,987167468),new e(1816402316,1246189591)],d="SHA-384"===b?[new e(3418070365,d[0]),new e(1654270250,d[1]),new e(2438529370,
d[2]),new e(355462360,d[3]),new e(1731405415,d[4]),new e(41048885895,d[5]),new e(3675008525,d[6]),new e(1203062813,d[7])]:[new e(f[0],4089235720),new e(f[1],2227873595),new e(f[2],4271175723),new e(f[3],1595750129),new e(f[4],2917565137),new e(f[5],725511199),new e(f[6],4215389547),new e(f[7],327033209)];else throw"Unexpected error in SHA-2 implementation";a[c>>>5]|=128<<24-c%32;a[g]=c;B=a.length;for(p=0;p<B;p+=w){c=d[0];g=d[1];f=d[2];h=d[3];l=d[4];r=d[5];t=d[6];u=d[7];for(m=0;m<n;m+=1)A[m]=16>m?
new e(a[m*x+p],a[m*x+p+1]):y(E(A[m-2]),A[m-7],D(A[m-15]),A[m-16]),v=C(u,G(l),H(l,r,t),k[m],A[m]),z=q(F(c),I(c,g,f)),u=t,t=r,r=l,l=q(h,v),h=f,f=g,g=c,c=q(v,z);d[0]=q(c,d[0]);d[1]=q(g,d[1]);d[2]=q(f,d[2]);d[3]=q(h,d[3]);d[4]=q(l,d[4]);d[5]=q(r,d[5]);d[6]=q(t,d[6]);d[7]=q(u,d[7])}if("SHA-224"===b)a=[d[0],d[1],d[2],d[3],d[4],d[5],d[6]];else if("SHA-256"===b)a=d;else if("SHA-384"===b)a=[d[0].a,d[0].b,d[1].a,d[1].b,d[2].a,d[2].b,d[3].a,d[3].b,d[4].a,d[4].b,d[5].a,d[5].b];else if("SHA-512"===b)a=[d[0].a,
d[0].b,d[1].a,d[1].b,d[2].a,d[2].b,d[3].a,d[3].b,d[4].a,d[4].b,d[5].a,d[5].b,d[6].a,d[6].b,d[7].a,d[7].b];else throw"Unexpected error in SHA-2 implementation";return a}"function"===typeof define&&typeof define.amd?define(function(){return z}):"undefined"!==typeof exports?"undefined"!==typeof module&&module.exports?module.exports=exports=z:exports=z:T.jsSHA=z})(this);