以下是基于SSM+Shiro+
Ajax+MD5的登录的详细代码：
1. 前端页面代码
login.jsp
```html
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<title>登录</title>
<script src="https://cdn.bootcss.com/jquery/3.4.1/jquery.min.js"></script>
</head>
<body>
<h1>登录</h1>
<form id="loginForm">
<div>
<label>用户名:</label>
<input type="text" name="username" required>
</div>
<div>
<label>密码:</label>
<input type="password" name="password" required>
</div>
<div>
<label>验证码:</label>
<input type="text" name="captcha" required>
<img id="captchaImg" src="/captcha.jpg" alt="验证码" onclick="this.src='/captcha.jpg?'+Math.random()">
</div>
<div>
<input type="submit" value="登录">
</div>
</form>
<script>
$(function() {
$('#loginForm').submit(function(event) {
event.preventDefault();
var formData = $(this).serialize();
$.
ajax({
url: '/login',
type: 'POST',
data: formData,
dataType: 'json',
success: function(result) {
if (result.success) {
window.location.href = '/home';
} else {
alert(result.message);
$('#captchaImg').click();
}
},
error: function() {
alert('服务器错误，请稍后再试！');
}
});
});
});
</script>
</body>
</html>
```
2. 后端代码
UserController.
java
```
java
@Controller
public class UserController {
@Autowired
private UserService userService;
@RequestMapping("/login")
@ResponseBody
public Result login(@RequestParam("username") String username,
@RequestParam("password") String password,
@RequestParam("captcha") String captcha,
Http
Session session) {
// 验证码校验
String realCaptcha = (String)
session.getAttribute("captcha");
if (!captcha.equalsIgnoreCase(realCaptcha)) {
return new Result("验证码错误！", false);
}
// 用户名密码校验
User user = userService.findByUsername(username);
if (user == null) {
return new Result("用户不存在！", false);
}
String md5Password = MD5Util.md5(password, user.getSalt());
if (!md5Password.equals(user.getPassword())) {
return new Result("密码错误！", false);
}
// 登录成功，将用户信息保存到
Session中
session.setAttribute("user", user);
return new Result("登录成功！", true);
}
}
```
UserService.
java
```
java
@Service
public class UserServiceImpl implements UserService {
@Autowired
private UserMapper userMapper;
@Override
public User findByUsername(String username) {
return userMapper.findByUsername(username);
}
}
```
UserMapper.xml
```xml
<mapper namespace="com.example.mapper.UserMapper">
<select id="findByUsername" parameterType="
java.lang.String" resultType="com.example.entity.User">
select * from user where username=#{username}
</select>
</mapper>
```
UserMapper.
java
```
java
public interface UserMapper {
User findByUsername(String username);
}
```
MD5Util.
java
```
java
public class MD5Util {
public static String md5(String str, String salt) {
try {
MessageDigest md5 = MessageDigest.getInstance("MD5");
byte[] bytes = md5.digest((str + salt).getBytes("utf-8"));
StringBuilder sb = new StringBuilder();
for (byte b : bytes) {
String hex = Integer.toHexString(b & 0xff);
if (hex.length() == 1) {
sb.append("0");
}
sb.append(hex);
}
return sb.toString();
} catch (Exception e) {
throw new RuntimeException(e);
}
}
}
```
ShiroConfig.
java
```
java
@Configuration
public class ShiroConfig {
@Autowired
private UserService userService;
@Bean
public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager) {
ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
shiroFilterFactoryBean.setSecurityManager(securityManager);
shiroFilterFactoryBean.setLoginUrl("/login");
shiroFilterFactoryBean.setUnauthorizedUrl("/403");
Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
filterChainDefinitionMap.put("/login", "anon");
filterChainDefinitionMap.put("/logout", "logout");
filterChainDefinitionMap.put("/**", "authc");
shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
return shiroFilterFactoryBean;
}
@Bean
public SecurityManager securityManager() {
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
securityManager.setRealm(realm());
return securityManager;
}
@Bean
public UserRealm realm() {
UserRealm realm = new UserRealm();
realm.setCredentialsMatcher(credentialsMatcher());
return realm;
}
@Bean
public HashedCredentialsMatcher credentialsMatcher() {
HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
credentialsMatcher.setHashAlgorithmName("MD5");
credentialsMatcher.setHashIterations(1);
return credentialsMatcher;
}
public class UserRealm extends AuthorizingRealm {
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
return authorizationInfo;
}
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
UsernamePasswordToken upToken = (UsernamePasswordToken) token;
String username = upToken.getUsername();
User user = userService.findByUsername(username);
if (user == null) {
throw new UnknownAccountException("用户不存在！");
}
SimpleAuthenticationInfo authenticationInfo = new SimpleAuthenticationInfo(user.getUsername(), user.getPassword(), ByteSource.Util.bytes(user.getSalt()), getName());
return authenticationInfo;
}
}
}
```
3. 实体类代码
User.
java
```
java
public class User implements Serializable {
private Long id;
private String username;
private String password;
private String salt;
// getter/setter方法省略
}
```
4. 配置文件代码
application.properties
```properties
server.port=8080
spring.datasource.url=jdbc:mysql://localhost:3306/test?useUnicode=true&characterEncoding=utf-8&serverTimezone=Asia/Shanghai
spring.datasource.username=root
spring.datasource.password=root
spring.datasource.driver-class-name=com.mysql.jdbc.Driver
mybatis.mapper-locations=classpath:mapper/*.xml
mybatis.type-aliases-package=com.example.entity
shiro.loginUrl=/login
```
以上是基于SSM+Shiro+
Ajax+MD5的登录的详细代码，其中包括了前端页面代码、后端代码、实体类代码和配置文件代码。该代码实现了基本的登录功能，包括了用户名密码校验、验证码校验、MD5加密等功能。可以根据需求进行修改和扩展。
1767
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
