Shiro实现用户认证

1.编写登录controller

    @RequestMapping("/login")
    public String login(String username,String password,Model model){
        //获取当前用户
        Subject subject = SecurityUtils.getSubject();
        //封装用户登录数据 token令牌
        UsernamePasswordToken token = new UsernamePasswordToken(username, password);
        try{
            subject.login(token);//执行登录方法，如果没有异常就说明OK了
            return "/index";//注意！！！此处返回
        }catch (UnknownAccountException e){//用户名不存在
            model.addAttribute("msg","用户名错误");
            return "login";
        }catch (IncorrectCredentialsException e){//密码不存在
            model.addAttribute("msg","密码错误");
            return "login";
        }
    }

2.进行登录认证

    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
        System.out.println("执行了=>认证 doGetAuthorizationInfo");
        //用户名 密码 数据库中获取
        String name = "root";
        String password = "root";

        UsernamePasswordToken userToken = (UsernamePasswordToken)authenticationToken;//强制转换成登录的UsernamePasswordToken
        if (!userToken.getUsername().equals(name)){
            return null;//抛出分常 UnknownAccountException
        }
        return new SimpleAuthenticationInfo("",password,"");
    }