shiro+Thymeleaf整合教程

最新推荐文章于 2022-03-09 13:20:45 发布

chengshi2248

最新推荐文章于 2022-03-09 13:20:45 发布

阅读量304

点赞数

文章标签： java 数据库 web.xml

原文链接：https://my.oschina.net/shanesen/blog/1843035

版权

1.web.xml

<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">

<display-name>XZDataReport</display-name>

<context-param>

<param-name>contextConfigLocation</param-name>

<param-value>classpath:ApplicationContext-*.xml</param-value>

</context-param>

<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>

</listener>

<servlet-name>springMvc</servlet-name>

<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>

<init-param>

<param-name>contextConfigLocation</param-name>

<param-value>classpath:SpringMvc.xml</param-value>

</init-param>

<load-on-startup>1</load-on-startup>

</servlet>

<servlet-mapping>

<servlet-name>springMvc</servlet-name>

<url-pattern>/*</url-pattern>

</servlet-mapping>

<!-- <servlet-mapping>

<servlet-name>springMvc</servlet-name>

<url-pattern>*.html</url-pattern>

</servlet-mapping> -->

<filter-name>CharacterEncodingFilter</filter-name>

<filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>

<init-param>

<param-name>encoding</param-name>

<param-value>utf-8</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>CharacterEncodingFilter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

<filter-name>shiroFilter</filter-name>

<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>

<init-param>

<param-name>targetFilterLifecycle</param-name>

<param-value>true</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>shiroFilter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

<session-config>

<tracking-mode>COOKIE</tracking-mode>

</session-config>

</web-app>

2.项目目录结构

SpringMvc.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"

xmlns:context="http://www.springframework.org/schema/context"

xmlns:dubbo="http://code.alibabatech.com/schema/dubbo" xmlns:mvc="http://www.springframework.org/schema/mvc"

xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd

http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-4.0.xsd

http://code.alibabatech.com/schema/dubbo http://code.alibabatech.com/schema/dubbo/dubbo.xsd

http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.0.xsd">

<context:component-scan base-package="com.syiaas.controller"></context:component-scan>

<mvc:annotation-driven />

<mvc:resources mapping="/css/**" location="/WEB-INF/css/"/>

<bean id="templateResolver"

class="org.thymeleaf.spring4.templateresolver.SpringResourceTemplateResolver">

</bean>

<bean id="templateEngine"

class="org.thymeleaf.spring4.SpringTemplateEngine">

<set>

</set>

</property>

</bean>

</bean>

<bean id="multipartResolver"

class="org.springframework.web.multipart.commons.CommonsMultipartResolver">

</bean>

</beans>

ApplicationContext-shiro.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xmlns:context="http://www.springframework.org/schema/context"

xmlns:mvc="http://www.springframework.org/schema/mvc"

xsi:schemaLocation="

http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd

http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.0.xsd

http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-4.0.xsd">

<!--

**代表任意子目录 /user/** = authc,roles[admin]

anon 不需要认证就可以访问

authc 需要认证才能访问

-->

<value>

/login.html = anon

/subLogin = anon

/logout = logout

/* = authc

</value>

</property>

</bean>

</bean>

</bean>

</bean>

</beans>

package com.syiaas.shiro.realm;

import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.crypto.hash.Md5Hash;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.util.ByteSource;

//继承 AuthorizingRealm
public class AuthRealm extends AuthorizingRealm {

   Map<String,String> userMap=new HashMap<String, String>();

   {

       //123456
       userMap.put("Mark", "283538989cef48f3d7d8a1c1bdf2008f");
       //设置自定义realm名称
       super.setName("authRealm");


   }


   //第二步：授权
   @Override
   protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
       //首先从认证信息中获取到用户
       String userName=(String) principals.getPrimaryPrincipal();
       System.out.println("授权 userName="+userName);
       //根据用户查询对应的角色
       //set集合用于存储无序(存入和取出的顺序不一定相同)元素，值不能重复。
       Set<String> roles=getRolesByUserName(userName);
       Set<String> permissions=getPermissionsByUserName(userName);

       //创建SimpleAuthorizationInfo 用于存储角色和权限
       SimpleAuthorizationInfo simpleAuthorizationInfo=new SimpleAuthorizationInfo();

       simpleAuthorizationInfo.setRoles(roles);
       simpleAuthorizationInfo.setStringPermissions(permissions);

       return simpleAuthorizationInfo;
   }

   //模拟从数据库中或者缓冲中获取用户信息对应的角色信息
   private Set<String> getRolesByUserName(String userName) {
       Set<String> sets=new HashSet<String>();
       sets.add("admin");
       sets.add("user");
       return sets;
   }

   //模拟从数据库中或者缓冲中获取用户信息对应的权限信息
       private Set<String> getPermissionsByUserName(String userName) {
           Set<String> sets=new HashSet<String>();
           sets.add("user:delete");
           sets.add("user:add");
           return sets;
       }

   //第一步：认证
   @Override
   protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {

       //1.从主体传过来的认证信息中,获得用户名
       String userName=(String) token.getPrincipal();
       //2.通过用户名到数据库中获取凭证
       String password=getPasswordByUserName(userName);

       System.out.println("认证 userName="+userName+"====password=="+password);

       if(password==null){
           return null;
       }
       //若存在构造一个用户认证信息实体类 SimpleAuthenticationInfo 参数(用户名,密码,realmName)
       SimpleAuthenticationInfo authenticationInfo=new SimpleAuthenticationInfo("Mark",password,"authRealm");
       //设置盐值
       authenticationInfo.setCredentialsSalt(ByteSource.Util.bytes("Mark"));
       return authenticationInfo;
   }
//模拟从数据库或缓冲中查询账号所对应的密码
   private String getPasswordByUserName(String userName) {
       return userMap.get(userName);

   }

//   @Test
//   public void getMd5(){
//       //参数密码+盐值
//       Md5Hash md5Hash=new Md5Hash("123456","Mark");
//       System.out.println(md5Hash);
//
//   }

}

package com.syiaas.controller;
import java.text.ParseException;
import java.util.List;

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.ExcessiveAttemptsException;
import org.apache.shiro.authc.IncorrectCredentialsException;
import org.apache.shiro.authc.UnknownAccountException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.ResponseBody;

import com.syiaas.dao.ExhibitionInfoDao;
import com.syiaas.dao.WuserDao;
import com.syiaas.pojo.Pie;
import com.syiaas.pojo.Shoes;
import com.syiaas.pojo.Userinfo;
import com.syiaas.utils.Constants;
import com.syiaas.utils.DataSourceHolder;

@Controller
public class TestController {


   @Autowired
   private ExhibitionInfoDao exhibitionInfoDao;

   @Autowired
   private WuserDao wuserDao;

   @RequestMapping(value = "/thymeleaf", method=RequestMethod.GET)
public String thymeleaf(Model model) throws Exception {
model.addAttribute("test","helloworld");
return "demo";
}

@RequestMapping(value = { "/saveProduct" }, method = RequestMethod.POST)
public String saveprodcut(Model model, @ModelAttribute(value = "shoe") Shoes shoe) throws ParseException {

   System.out.println(shoe.getName()+"==="+shoe.getAvailableFrom()+"==="+shoe.getPrice());
return "footer";
}

//跳转登录页
// @RequestMapping(value = "/login", method=RequestMethod.GET)
// public String login(Model model) throws Exception {
//
// return "login";
// }


   //测试shiro
@RequestMapping(value="/subLogin",method=RequestMethod.POST,produces = "application/json; charset=UTF-8")
   //@ResponseBody
   public String subLogin(Model model,Userinfo user){

       System.out.println("name="+user.getUsername()+"===password="+user.getPassword());

       //1.得到Subject及获取到前端页面输入的用户名/密码身份验证Token（即用户身份/凭证）
Subject subject=SecurityUtils.getSubject();
UsernamePasswordToken token=new UsernamePasswordToken(user.getUsername(),user.getPassword());

// try {
//
//   //2、登录，即身份验证
//   subject.login(token);
//   System.out.println(subject.isAuthenticated());
//   //是否具备某一个角色
//   System.out.println("角色=="+subject.hasRole("admin"));
//   } catch (AuthenticationException e) {
//   //身份验证失败,返回登录页
//       System.out.println(e.getMessage());
//       //return e.getMessage();
//   }
//
//
//       return "demo";
String error = null;
try {
subject.login(token);

} catch (UnknownAccountException e) {
error = "用户名/密码错误";
} catch (IncorrectCredentialsException e) {
error = "用户名/密码错误";
} catch (ExcessiveAttemptsException e) {
// TODO: handle exception
error = "登录失败多次，账户锁定10分钟";
} catch (AuthenticationException e) {
// 其他错误，比如锁定，如果想单独处理请单独catch处理
error = "其他错误：" + e.getMessage();
}

if (error != null) {// 出错了，返回登录页面
   model.addAttribute("error", error);
   System.out.println("error=="+error);
//return "login";
} else {// 登录成功
   System.out.println(subject.isAuthenticated());
return "demo";
}
       return null;