shiro 在spring框架中集成shiro

最新推荐文章于 2022-10-16 22:53:22 发布

imxlw00

最新推荐文章于 2022-10-16 22:53:22 发布

阅读量463

点赞数

分类专栏： # shiro 文章标签： shiro

本文链接：https://blog.csdn.net/imxlw00/article/details/86489683

版权

shiro 专栏收录该内容

7 篇文章 0 订阅

订阅专栏

spring版本5.0.12
shiro版本 1.3.2

1、web.xml

 <!--配置shiro-->
    <filter>
        <filter-name>shiroFilter</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
        <init-param>
            <param-name>targetFilterLifecycle</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>

    <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

2、集成Shiro

在Spring中集成Shiro时，Shiro中的相应Bean的定义以及他们的关系也需要通过Spring IoC容器实现，配置如下

 <bean class="com.tf.myshiro.web.service.CustomRealm" id="customRealm">
        <property name="credentialsMatcher" ref="credentialsMatcher" />
    </bean>

    <bean class="org.apache.shiro.authc.credential.HashedCredentialsMatcher" id="credentialsMatcher">
        <property name="hashAlgorithmName" value="md5" />
        <property name="hashIterations" value="1" />
    </bean>
    <!-- 创建SecurityManager -->
    <bean class="org.apache.shiro.web.mgt.DefaultWebSecurityManager" id="securityManager">
        <property name="realm" ref="customRealm" />
    </bean>

    <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">

        <property name="securityManager" ref="securityManager" />
        <property name="loginUrl" value="login.html" />
        <property name="unauthorizedUrl" value="403.html" />
        <property name="filterChainDefinitions">
            <value>
                <!-- 从上往下开始匹配 -->
                /login.html = anon
                /subLogin.do= anon
                /login.jsp = anon
                <!--/testRole = roles["admin"]-->
                <!--/testRole1 = roles["admin", "admin1"]-->
                <!--/testPerms = perms["user:delete"]-->
                <!--/testPerms1 = perms["user:delete", "user:update"]-->
                <!--/testRole = roles["admin", "admin1"]-->
                <!--/testRole1 = rolesOr["admin", "admin1"]-->
                /* = authc
            </value>
        </property>
    </bean>

3、UserController

@Controller
public class UserController {
    @RequestMapping(value = "/subLogin", method = RequestMethod.POST)//,produces = "text/html;charset=UTF-8")
    @ResponseBody
    public String subLogin(User user) {

        Subject subject = SecurityUtils.getSubject();
        UsernamePasswordToken token = new UsernamePasswordToken(user.getUsername(),
                user.getPassword());

        try {
            if (user.getRememberMe() != null)
                token.setRememberMe(user.getRememberMe());
            subject.login(token);
        } catch (AuthenticationException e) {
            return e.getMessage();
        }

        if (subject.hasRole("admin")) {
            return "有admin权限";
        }

//        return "登录成功";
        return "无admin权限";
    }
}

4、html

<!DOCTYPE html>
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <title>Login</title>
</head>
<body>
<form action="subLogin.do" method="post">
    <div>
        <label>用户名：</label>
        <input type="text" name="username">
    </div>
    <div>
        <label>密码：</label>
        <input type="password" name="password">
    </div>
    <div>
        <label>记住我：</label>
        <input type="checkbox" name="rememberMe">
    </div>
    <div>
        <input type="submit" value="登录">
    </div>
</form>
</body>
</html>

imxlw00

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
shiro 在spring框架中集成shiro

spring版本5.0.12shiro版本 1.3.21、web.xml &lt;!--配置shiro--&gt; &lt;filter&gt; &lt;filter-name&gt;shiroFilter&lt;/filter-name&gt; &lt;filter-class&gt;org.springframework.web.filter.D...
复制链接

扫一扫