Shiro框架 Subject、SecurityManager、线程之间的关系

最新推荐文章于 2023-02-21 17:25:02 发布

谢耀眼

最新推荐文章于 2023-02-21 17:25:02 发布

阅读量1.2k

点赞数 3

分类专栏：一个被转后台的Android开发文章标签： Shiro Subject SecurityManager

本文链接：https://blog.csdn.net/qq_29951983/article/details/102613098

版权

文章目录

Subject与SecurityManager之间的关系

Subject对象的创建

Subject的创建是在过滤器中进行创建的，之后我会出过滤器相关的文章

try {
   
            final ServletRequest request = prepareServletRequest(servletRequest, servletResponse, chain);
            final ServletResponse response = prepareServletResponse(request, servletResponse, chain);

            final Subject subject = createSubject(request, response);

            //noinspection unchecked
            subject.execute(new Callable() {
   
                public Object call() throws Exception {
   
                    updateSessionLastAccessTime(request, response);
                    executeChain(request, response, chain);
                    return null;
                }
            });
        } catch (ExecutionException ex) {
   
            t = ex.getCause();
        } catch (Throwable throwable) {
   
            t = throwable;
        }

在createSubject(request, response); 中会根据request和response参数来进行创建。

创建的方式是采用构造者模式

public static class Builder extends Subject.Builder {
   

        public Builder(ServletRequest request, ServletResponse response) {
   
            this(SecurityUtils.getSecurityManager(), request, response);
        }
        public Builder(SecurityManager securityManager, ServletRequest request, ServletResponse response) {
   
            super(securityManager);
            if (request == null) {
   
                throw new IllegalArgumentException("ServletRequest argument cannot be null.");
            }
            if (response == null) {
   
                throw new IllegalArgumentException("ServletResponse argument cannot be null.");
            }
            setRequest(request);
            setResponse