SpringBoot项目使用Shiro

一：添加Shiro的依赖

		<dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-spring</artifactId>
            <version>1.5.2</version>
        </dependency>

二：添加实体类User.java

三：编写service、dao、mapper

public interface UserService {
    User findByName(String name);
}

@Service
public class UserServiceImpl implements UserService {
    @Resource
    UserMapper userMapper;
    @Override
    public User findByName(String name) {
        return userMapper.findByName(name);
    }
}

public interface UserMapper {
    User findByName(String name);
}

	<select id="findByName" resultType="com.smarthome.entity.User">
        SELECT * FROM user where name = #{name}
    </select>

四：编写配置类

package com.smarthome.config;

import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import java.util.HashMap;
import java.util.Map;

@Configuration
public class ShiroConfig {

    //将自己的验证方式加入容器
    @Bean
    public MyShiroRealm myShiroRealm() {
        MyShiroRealm myShiroRealm = new MyShiroRealm();
        return myShiroRealm;
    }

    //权限管理，配置主要是Realm的管理认证
    @Bean(name = "securityManager")
    public DefaultWebSecurityManager securityManager() {
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        securityManager.setRealm(myShiroRealm());
        return securityManager;
    }

    //Filter工厂，设置对应的过滤条件和跳转条件
    @Bean("shiroFilterFactoryBean")
    public ShiroFilterFactoryBean shiroFilterFactoryBean() {
        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
        shiroFilterFactoryBean.setSecurityManager(securityManager());
        Map<String,String> map = new HashMap<String, String>();
        //登出
        map.put("/logout","logout");
        //对所有用户认证
        map.put("/**","authc");
        //登录
        shiroFilterFactoryBean.setLoginUrl("/login");
        //首页
        shiroFilterFactoryBean.setSuccessUrl("/index");
        //错误页面，认证不通过跳转
        shiroFilterFactoryBean.setUnauthorizedUrl("/error");
        shiroFilterFactoryBean.setFilterChainDefinitionMap(map);
        return shiroFilterFactoryBean;
    }

    @Bean
    public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor() {
        AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
        authorizationAttributeSourceAdvisor.setSecurityManager(securityManager());
        return authorizationAttributeSourceAdvisor;
    }
}

五：编写认证授权类

package com.smarthome.config;

import com.smarthome.entity.User;
import com.smarthome.service.UserService;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.springframework.beans.factory.annotation.Autowired;

/**
 * @author 张泰清
 * @Description:
 * @date 2020/4/8 21:42
 **/
public class MyShiroRealm extends AuthorizingRealm {

    @Autowired
    UserService userService;

    //授权
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
        String name= (String) principalCollection.getPrimaryPrincipal();
        User user = userService.findByName(name);
        SimpleAuthorizationInfo simpleAuthorizationInfo=new SimpleAuthorizationInfo();
        simpleAuthorizationInfo.addRole("admin");
        simpleAuthorizationInfo.addStringPermission("see");

        return simpleAuthorizationInfo;
    }

    //认证
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
        if (authenticationToken.getPrincipal()==null) {
            return null;
        }
        String name= (String) authenticationToken.getPrincipal();
        User user = userService.findByName(name);
        if (user == null){
            return null;
        }else {
            SimpleAuthenticationInfo simpleAuthenticationInfo=new SimpleAuthenticationInfo(name,user.getPassword(),getName());
            return simpleAuthenticationInfo;
        }
    }
}

六：接下来编写一个首页和登录页面就可以写controller了

@Controller
public class IndexController {
    @Autowired
    UserService userService;
    @RequiresRoles("admin")
    @RequiresPermissions("see")
    @GetMapping({"/index","/","index.html"})
    public String indexPage(){
        return "index";
    }
    @GetMapping("/login")
    public String login(User user){
        System.out.println("登入账号"+user.getName());
        Subject currentUser= SecurityUtils.getSubject();
        if (!currentUser.isAuthenticated()) {
            //获取token
            UsernamePasswordToken token=new UsernamePasswordToken(user.getName(),user.getPassword());
            try {
                //该方法会将token中的账号和密码发送给安全管理器，安全管理器又会交给realm，realm中会进行认证和授权
                currentUser.login(token);
                System.out.println("认证成功");
                return "/index";
            } catch (Exception e) {
                System.out.println("认证失败");
            }
        }
        return "/login";
    }

登录成功才能跳转到首页即成功。