目录
一、整合前的配置
1.1 导入shiro依赖
<dependency>
<groupId>org.apache.shiro</groupId>
<artifactId>shiro-core</artifactId>
<version>1.3.2</version>
</dependency>
<dependency>
<groupId>commons-logging</groupId>
<artifactId>commons-logging</artifactId>
<version>1.2</version>
</dependency>
<dependency>
<groupId>org.apache.shiro</groupId>
<artifactId>shiro-spring</artifactId>
<version>1.3.2</version>
</dependency>1.2 config配置
1.2.1 ShiroConfig（⭐）
配置shiro的一些基本配置，需要注意--设置安全管理器securityManager与你的项目有关，
这里我设置了登录时需要的自定义myRealm，和权限授权验证前的自定义uuidRealm。
package com.itqq.config;
import com.itqq.realm.MyRealm;
import com.itqq.realm.UUIDRealm;
import org.apache.shiro.realm.Realm;
import org.apache.shiro.spring.LifecycleBeanPostProcessor;
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.DependsOn;
import java.util.ArrayList;
import java.util.List;
/**
* Created with IntelliJ IDEA.
*
* @Author: sys
* @Description:shiro整合Spring的配置文件
*/
@Configuration
public class ShiroConfig {
@Autowired
private MyRealm myRealm;
@Autowired
private UUIDRealm uuidRealm;
@Bean
@DependsOn("lifecycleBeanPostProcessor")
public DefaultAdvisorAutoProxyCreator getDefaultAdvisorAutoProxyCreator() {
DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
defaultAdvisorAutoProxyCreator.setProxyTargetClass(true);
return defaultAdvisorAutoProxyCreator;
}
@Bean(name = "lifecycleBeanPostProcessor")
public static LifecycleBeanPostProcessor getLifecycleBeanPostProcessor() {
return new LifecycleBeanPostProcessor();
}
@Bean
public AuthorizationAttributeSourceAdvisor getAuthorizationAttributeSourceAdvisor() {
AuthorizationAttributeSourceAdvisor aasa = new AuthorizationAttributeSourceAdvisor();
aasa.setSecurityManager(securityManager());
return new AuthorizationAttributeSourceAdvisor();
}
// 设置安全管理器securityManager
@Bean
public DefaultWebSecurityManager securityManager() {
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
List<Realm> realms = new ArrayList<>();
realms.add(myRealm);
realms.add(uuidRealm);
securityManager.setRealms(realms);
return securityManager;
}
// 设置filter
@Bean
public ShiroFilterFactoryBean shiroFilterFactoryBean(){
ShiroFilterFactoryBean shiroFilter = new ShiroFilterFactoryBean();
shiroFilter.setSecurityManager( securityManager());
shiroFilter.setLoginUrl("/anon");
shiroFilter.setUnauthorizedUrl("/anon");
return shiroFilter;
}
// @Bean
// public MyRealm myRealm(){
// return new MyRealm();
// }
}
1.2.2 MyConfig(拦截器配置)
因为每次权限验证前都需要验证该账号是否登录，所以使用拦截器
package com.itqq.config;
import com.itqq.interceptor.LoginInterceptor;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
@Configuration
public class MyConfig implements WebMvcConfigurer {
@Autowired
private LoginInterceptor loginInterceptor;
@Override
public void addInterceptors(InterceptorRegistry registry) {
// 将loginInterceptor这个拦截器注册到Spring Boot中，并排除对/employee/login(登录)这个路径的拦截
registry.addInterceptor(loginInterceptor).excludePathPatterns("/employee/login");
}
}
3. 拦截器(LoginInterceptor)
将重复的代码抽取出来，此时，用户已经登录过一次，需要再次认证
package com.itqq.interceptor;
import com.itqq.shiro.UUIDToken;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.subject.Subject;
import org.springframework.stereotype.Component;
import org.springframework.web.servlet.HandlerInterceptor;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:使用过滤器用户在进行权限验证时必须要先认证,一个个加太麻烦
* 所以在拦截器中统一进行认证
*
*/
@Component
public class LoginInterceptor implements HandlerInterceptor {
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
try {
String token = request.getHeader("token");
// 使用Shiro框架的SecurityUtils.getSubject()方法获取当前的Subject（即用户身份）
Subject subject = SecurityUtils.getSubject();
// 将token传给UUIDRealm进行认证
subject.login(new UUIDToken(token));
}catch (Exception e){
e.printStackTrace();
}
return true;
}
}
二、认证登录
使用shiro框架自带的组件进行登录验证，不用用户的service和serviceImpl
2.1. controller
package com.itqq.controller;
import com.itqq.pojo.Employee;
import com.itqq.pojo.Result;
import com.itqq.service.EmployeeService;
import com.itqq.shiro.PhonePasswordToken;
import org.apache.shiro.SecurityUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.web.bind.annotation.*;
import java.util.UUID;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
@RestController
@RequestMapping("employee")
public class EmployeeController {
@Autowired
private EmployeeService employeeService;
@Autowired
private RedisTemplate redisTemplate;
/**
* 登录接口
* @param token
* @return
*/
@PostMapping("login")
public Result login(@RequestBody PhonePasswordToken token) {
// 此token是前端传来的登录信息,这里是phone和password
SecurityUtils.getSubject().login(token);
String tokenString = UUID.randomUUID().toString().replace("-", "");
redisTemplate.opsForValue().set(tokenString, SecurityUtils.getSubject().getPrincipal());
return Result.success(tokenString);
}
@GetMapping("")
public Result findAll() {
return Result.success(employeeService.findAll());
}
@GetMapping("findById/{id}")
public Result findById(@PathVariable Integer id) {
return Result.success(employeeService.findById(id));
}
/**
* 添加员工
* @param employee
* @return
*/
@PostMapping("add")
public Result add(@RequestBody Employee employee) {
return employeeService.add(employee) ? Result.success("添加成功") : Result.failed("添加失败");
}
@PostMapping("update")
public Result update(@RequestBody Employee employee) {
return employeeService.update(employee) ? Result.success("修改成功") : Result.failed("修改失败");
}
@DeleteMapping("delete")
public Result delete(Integer id) {
return employeeService.delete(id) ? Result.success("删除成功") : Result.failed("删除失败");
}
@DeleteMapping("deleteids")
public Result deleteids(Integer[] ids) {
return employeeService.deleteids(ids) ? Result.success("删除成功") : Result.failed("删除失败");
}
}
2.2 service和serviceImpl（不用）
package com.itqq.service;
import com.itqq.pojo.Employee;
import com.itqq.pojo.Result;
import java.util.List;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
public interface EmployeeService {
List<Employee> findAll();
Employee findById(Integer id);
boolean add(Employee employee);
boolean update(Employee employee);
boolean delete(Integer id);
boolean deleteids(Integer[] ids);
Employee findEmployeeByName(String name);
Employee findEmployeeByPhone(Long phone);
}
增加用户信息的时候，密码进行MD5加密 ，盐是动态盐
package com.itqq.service.impl;
import com.itqq.mapper.EmployeeMapper;
import com.itqq.pojo.Employee;
import com.itqq.service.EmployeeService;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.crypto.hash.SimpleHash;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import java.util.Date;
import java.util.List;
import java.util.UUID;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
@Service
public class EmployeeServiceImpl implements EmployeeService {
@Autowired
private EmployeeMapper employeeMapper;
@Override
public List<Employee> findAll() {
return employeeMapper.findAll();
}
@Override
public Employee findById(Integer id) {
return employeeMapper.findById(id);
}
@Override
public boolean add(Employee employee) {
// 添加的时候设置动态盐
String slat = UUID.randomUUID().toString().replace("-", "");
// 密码加密存储
String password = String.valueOf(new SimpleHash("MD5", employee.getPassword(), slat, 1024));
// 获取当前登录人的id
Integer principal = (Integer) SecurityUtils.getSubject().getPrincipal();
employee.setPassword(password);
employee.setSalt(slat);
employee.setCreateTime(new Date());
employee.setCreateId(principal);
return employeeMapper.add(employee);
}
@Override
public boolean update(Employee employee) {
return employeeMapper.update(employee);
}
@Override
public boolean delete(Integer id) {
return employeeMapper.delete(id);
}
@Override
public boolean deleteids(Integer[] ids) {
return employeeMapper.deleteids(ids);
}
@Override
public Employee findEmployeeByName(String name) {
return employeeMapper.findEmployeeByName(name);
}
@Override
public Employee findEmployeeByPhone(Long phone) {
return employeeMapper.findEmployeeByPhone(phone);
}
}
2.3 mapper
package com.itqq.mapper;
import com.itqq.pojo.Employee;
import org.apache.ibatis.annotations.Mapper;
import java.util.List;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
public interface EmployeeMapper {
List<Employee> findAll();
Employee findById(Integer id);
boolean add(Employee employee);
boolean update(Employee employee);
boolean delete(Integer id);
boolean deleteids(Integer[] ids);
Employee findEmployeeByName(String name);
Employee findEmployeeByPhone(Long phone);
}
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE mapper
PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
"http://mybatis.org/dtd/mybatis-3-mapper.dtd">
<mapper namespace="com.itqq.mapper.EmployeeMapper">
<insert id="add">
insert into sys_employee(name,password,phone,salt,status,create_id,create_time)
values(#{name},#{password},#{phone},#{salt},#{status},#{createId},#{createTime})
</insert>
<update id="update">
update sys_employee
<set>
<if test="name != null">
name = #{name},
</if>
<if test="password != null">
password = #{password},
</if>
<if test="phone != null">
phone = #{phone},
</if>
<if test="salt != null">
salt = #{salt},
</if>
<if test="status != null">
status = #{status},
</if>
<if test="createId != null">
create_id = #{createId},
</if>
<if test="createTime != null">
create_time = #{createTime},
</if>
</set>
</update>
<delete id="delete">
delete from sys_employee where id = #{id}
</delete>
<delete id="deleteids">
delete from sys_employee where id in
<foreach collection="ids" item="id" open="(" separator="," close=")">
#{id}
</foreach>
</delete>
<select id="findAll" resultType="com.itqq.pojo.Employee">
select * from sys_employee
</select>
<select id="findById" resultType="com.itqq.pojo.Employee">
select * from sys_employee where id = #{id}
</select>
<select id="findEmployeeByName" resultType="com.itqq.pojo.Employee">
select * from sys_employee where name = #{name}
</select>
<select id="findEmployeeByPhone" resultType="com.itqq.pojo.Employee">
select * from sys_employee where phone = #{phone}
</select>
</mapper>2.4 自定义的shiro和realm
package com.itqq.realm;
import com.itqq.pojo.Employee;
import com.itqq.service.EmployeeService;
import com.itqq.shiro.PhonePasswordToken;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.util.ByteSource;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.util.StringUtils;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:自定义的MyRealm用于认证使用
*/
@Component
public class MyRealm extends AuthorizingRealm {
@Autowired
private EmployeeService employeeService;
public MyRealm() {
HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
hashedCredentialsMatcher.setHashAlgorithmName("MD5");
hashedCredentialsMatcher.setHashIterations(1024);
this.setCredentialsMatcher(hashedCredentialsMatcher);
}
// 判断传入的AuthenticationToken对象是否是PhonePasswordToken类型的实例
@Override
public boolean supports(AuthenticationToken token) {
return token instanceof PhonePasswordToken;
}
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
return null;
}
// 认证
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
System.out.println("-----------------开始认证！！！！");
// 接收用户输入的账号(手机号)和密码
Long phone = (Long) token.getPrincipal();
String password = (String) token.getCredentials();
if(phone == null){
throw new AuthenticationException("账号不能为空");
}
if(!StringUtils.hasText(password)){
throw new AuthenticationException("密码不能为空");
}
// 从数据库中查询对象
Employee employee = employeeService.findEmployeeByPhone(phone);
if(employee == null){
throw new AuthenticationException("用户名不存在");
}
System.out.println(employee.getSalt());
System.out.println(employee.getName());
System.out.println(employee.getPassword());
return new SimpleAuthenticationInfo(employee.getId(),employee.getPassword(),ByteSource.Util.bytes(employee.getSalt()),getName());
}
}
自定义的shiro组件接收 前端传来的登录信息
package com.itqq.shiro;
import lombok.AllArgsConstructor;
import lombok.Data;
import lombok.NoArgsConstructor;
import org.apache.shiro.authc.AuthenticationToken;
import java.io.Serializable;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
@Data
@AllArgsConstructor
@NoArgsConstructor
public class PhonePasswordToken implements AuthenticationToken, Serializable {
private static final long serialVersionUID = -240712713650948393L;
private Long phone;
private String password;
@Override
public Object getPrincipal() {
return phone;
}
@Override
public Object getCredentials() {
return password;
}
}
三、权限授权验证
认证之后，每次权限验证前需要再次进行登录验证(具体配置见config拦截器配置)
3.1. controller（测试接口的权限）
package com.itqq.controller;
import com.itqq.pojo.Result;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authz.annotation.Logical;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.apache.shiro.authz.annotation.RequiresRoles;
import org.apache.shiro.authz.annotation.RequiresUser;
import org.apache.shiro.subject.Subject;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
/**
* Created with IntelliJ IDEA.
*
* @Author:syq
* @Description:授权测试
*/
@RestController
@RequestMapping("welcome")
public class WelcomeController {
/*
1. 游客接口
2. 认证接口
3. 游客/认证接口
4. 授权接口
*/
@GetMapping("1.do")
public Result m1(){
return Result.success("1.游客接口！！！");
}
// @RequiresUser需要用户认证才能访问的方法或类,要token
@RequiresUser
@GetMapping("2.do")
public Result m2(/*@RequestHeader String token*/){
Subject subject = SecurityUtils.getSubject();
// subject.login(new UUIDToken(token));
return Result.success("2.认证接口！！！" + subject.getPrincipals());
}
@RequestMapping("3.do")
public Result m3(){
Subject subject = SecurityUtils.getSubject();
if(subject.isAuthenticated()){
return Result.success("3.认证接口！！！" + subject.getPrincipals());
}else{
return Result.failed("3.游客接口！！！");
}
}
// @RequiresRoles注解，表示该接口需要在具有特定角色的用户才能访问
@RequiresRoles("管理员")
@RequestMapping("4.do")
public Result m4(){
Subject subject = SecurityUtils.getSubject();
return Result.success("4-1.授权角色接口" + subject.getPrincipals());
}
@RequiresPermissions("sys:employee:insert")
@RequestMapping("5.do")
public Result m5(){
Subject subject = SecurityUtils.getSubject();
return Result.success("5-2.授权权限接口" + subject.getPrincipals());
}
// @RequiresRoles({"管理员","管理员2"})--两个角色都要满足
@RequiresRoles(value = {"管理员","超级管理员"},logical = Logical.OR)//只用满足一个条件
@RequestMapping("6.do")
public Result m6(){
Subject subject = SecurityUtils.getSubject();
return Result.success("6-2.授权权限接口" + subject.getPrincipals());
}
}
service和serviceImpl和上述一样这里就不在赘述
3.2 自定义的shiro和realm
将当前账号有关的角色信息和权限信息添加到shiro组件中，用于判断
package com.itqq.realm;
import com.itqq.mapper.PermissionMapper;
import com.itqq.service.EmployeeService;
import com.itqq.service.PermissionService;
import com.itqq.service.RoleService;
import com.itqq.shiro.UUIDToken;
import lombok.extern.slf4j.Slf4j;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.stereotype.Component;
import org.springframework.util.StringUtils;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
@Component
@Slf4j
public class UUIDRealm extends AuthorizingRealm {
@Autowired
private RedisTemplate redisTemplate;
@Autowired
private RoleService roleService;
@Autowired
private PermissionService permissionService;
//用于判断传入的AuthenticationToken对象是否是UUIDToken的实例。如果是，则返回true，表示支持该令牌；否则返回false，表示不支持该令牌。
@Override
public boolean supports(AuthenticationToken token) {
return token instanceof UUIDToken;
}
// 该函数调用了roleService.findRoleNameByEmployeeId(id)方法，
// 将返回值添加到info对象的roles属性中。
// findRoleNameByEmployeeId方法根据员工ID查找对应的职位名称
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
Integer id = (Integer) principalCollection.getPrimaryPrincipal();
log.info("id:{}",id);
SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
info.addRoles(roleService.findRoleNameByEmployeeId(id));
info.addStringPermissions(permissionService.findPermissionNameByEmployeeId(id));
return info;
}
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
// 从令牌中提取UUID作为凭证
String uuid = (String) token.getCredentials();
if(!StringUtils.hasText(uuid)){
throw new RuntimeException("token不能为空");
}
// 从resdis中获取员工id
Integer id = (Integer)redisTemplate.opsForValue().get(uuid);
if(id == null){
throw new RuntimeException("token已经失效");
}
// 构建认证信息对象，包含用户ID、UUID和名称
// 将员工id,uuid(生成的),名称送去校验
return new SimpleAuthenticationInfo(id,uuid,getName());
}
}
package com.itqq.shiro;
import lombok.AllArgsConstructor;
import lombok.Data;
import lombok.NoArgsConstructor;
import org.apache.shiro.authc.AuthenticationToken;
import java.io.Serializable;
/**
* Created with IntelliJ IDEA.
*
* @Author: syq
* @Description:
*/
@Data
@AllArgsConstructor
@NoArgsConstructor
public class UUIDToken implements AuthenticationToken, Serializable {
private static final long serialVersionUID = 8884806189738587998L;
private String uuid;
@Override
public Object getPrincipal() {
return uuid;
}
@Override
public Object getCredentials() {
return uuid;
}
}
四、动态菜单的实现
4.1 目标效果
数据库设计
动态菜单需要根据查看用户的所有权限，主要是要进行树状显示查询
4.2 查询所有的权限
1. Controller
// 查询全部数据
List<Permission> findByParentId(Integer id);2. service和serviceImpl
List<Permission> findAll(); public List<Permission> findAll() {
return permissionMapper.findByParentId(0);
}3. mapper
// 查询全部数据
List<Permission> findByParentId(Integer id);先运行findByParentId,运行一次后,结果映射又递归调用此时将id赋值parentId
<resultMap id="permission" type="Permission">
<id column="id" property="id"/>
<result column="name" property="name"/>
<result column="path" property="path"/>
<result column="permission" property="permission"/>
<result column="icon" property="icon"/>
<result column="parent_id" property="parentId"/>
<result column="create_id" property="createId"/>
<result column="create_time" property="createTime"/>
<result column="index" property="index"/>
<collection property="children" ofType="Permission" select="findByParentId" column="id"></collection>
</resultMap>
<select id="findByParentId" resultMap="permission">
select * from sys_permission where parent_id = #{parentId}
</select>4.3 不同的用户显示不同的菜单(权限)
1. controller
// 获取当前用户的菜单
@RequiresUser
@GetMapping("menu")
public Result findMenu(){
return Result.success(permissionService.findMenu());
}2. service和serviceImpl
List<Permission> findMenu(public List<Permission> findMenu() {
Integer eid = (Integer) SecurityUtils.getSubject().getPrincipal();
return permissionMapper.findMenu(eid, 0);
}3. mapper
// 根据不同的用户查询数据
List<Permission> findMenu(@Param("eid") Integer eid,@Param("parentId") Integer parentId);<resultMap id="permission1" type="Permission">
<id column="id" property="id"/>
<result column="name" property="name"/>
<result column="path" property="path"/>
<result column="permission" property="permission"/>
<result column="icon" property="icon"/>
<result column="parent_id" property="parentId"/>
<result column="create_id" property="createId"/>
<result column="create_time" property="createTime"/>
<result column="index" property="index"/>
<collection property="children" ofType="Permission" select="findMenu" column="{eid=eid,parentId=id}"></collection>
</resultMap>
<select id="findMenu" resultMap="permission1">
SELECT DISTINCT p.*,eid from sys_permission p
LEFT JOIN sys_role_permission rp on p.id = rp.pid
LEFT JOIN sys_employee_role er on er.rid = rp.rid
where eid = #{eid} and parent_id = #{parentId} and permission is null
order by p.index asc
</select>4. pojo
@Data
public class Permission implements Serializable {
private static final long serialVersionUID = -9189388242103298381L;
private Integer id;
private String name;
private String permission;
private String path;
private String icon;
private Integer parentId;
private Integer createId;
@JsonFormat(pattern = "yyyy-MM-dd HH:mm:ss", timezone = "GMT+8")
private Timestamp createTime;
private Integer index;
private List<Permission> children;
}总结完毕!!!
2425
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
