Shiro验证入门

**Shiro验证入门

1.加载依赖**

	<dependency>
        <groupId>junit</groupId>
        <artifactId>junit</artifactId>
        <version>4.12</version>
      </dependency>
      <dependency>
        <groupId>org.apache.shiro</groupId>
        <artifactId>shiro-core</artifactId>
        <version>1.4.0</version>
      </dependency>

2.测试文件

package com.lbl.test;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.mgt.DefaultSecurityManager;
import org.apache.shiro.realm.SimpleAccountRealm;
import org.apache.shiro.subject.Subject;
import org.junit.Before;
import org.junit.Test;
public class testz {
    SimpleAccountRealm simpleAccountRealm = new SimpleAccountRealm();
    @Before
    public void  addUser(){
    //添加一个测试账户
        simpleAccountRealm.addAccount("admin","123456");
    }
    @Test
    public void testAuthentication(){
        //1.构建securityManager环境
        DefaultSecurityManager defaultSecurityManager =   new DefaultSecurityManager();
        //将需验证信息加入管理器
        defaultSecurityManager.setRealm(simpleAccountRealm);
        //2.主题提交认证请求
        SecurityUtils.setSecurityManager(defaultSecurityManager);
        Subject subject =SecurityUtils.getSubject();

    UsernamePasswordToken token = new UsernamePasswordToken("admin","123456");
    subject.login(token);
    //验证
    System.out.println("isAuthenticated:"+subject.isAuthenticated());
    subject.logout();
    System.out.println("isAuthenticated:"+subject.isAuthenticated());
}}

3.效果
a.没有添加测试用户的情况
//未将需验证信息加入管理器 defaultSecurityManager.setRealm(simpleAccountRealm);

b.账号错误时
c.密码错误

d.正常情况 提供的验证方法
UsernamePasswordToken token = new UsernamePasswordToken(“admin”,“123456”);
subject.login(token);
//验证
System.out.println(“isAuthenticated:”+subject.isAuthenticated());
subject.logout();
System.out.println(“isAuthenticated:”+subject.isAuthenticated());

4.就小小测试，初步理解其作用，还要继续加油！