Java权限管理系统之代码实现（二）

      一、概述

1、本Java代码的实现基于上篇Java权限管理系统之数据库设计描述的数据库设计基础之上，后端采用Springboot+shiro+mybatis整合实现用户登录认证和权限配置。

2、Shiro简介：Apache Shiro是Java的一个安全框架。Shiro可以非常容易的开发出足够好的应用，其不仅可以在JavaSE环境，也可以用在JavaEE环境。Shiro可以帮助我们完成：认证，授权，加密，会话管理，与Web集成，缓存等。基本功能如下图所示：

二、实现

      （1）添加依赖包（项目中存在其它的应用，故而存在较多的jar包）

<dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <!-- mysql的依赖jar包 -->
        <dependency>
            <groupId>mysql</groupId>
            <artifactId>mysql-connector-java</artifactId>
            <version>5.1.45</version>
        </dependency>
    <!-- json需要的jar包 -->
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-core</artifactId>
            <version>2.8.11</version>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-annotations</artifactId>
            <version>2.8.11</version>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-databind</artifactId>
            <version>2.8.11</version>
        </dependency>
        <dependency>
            <groupId>net.sf.json-lib</groupId>
            <artifactId>json-lib</artifactId>
            <version>2.4</version>
            <classifier>jdk15</classifier>
        </dependency>
        <dependency>
            <groupId>org.apache.commons</groupId>
            <artifactId>commons-lang3</artifactId>
            <version>3.6</version>
        </dependency>
        <!--mybatis与springboot整合依赖-->
        <dependency>
            <groupId>org.mybatis.spring.boot</groupId>
            <artifactId>mybatis-spring-boot-starter</artifactId>
            <version>1.1.1</version>
        </dependency>
        <!-- 导入mybatis相关的依赖 -->
        <dependency>
            <groupId>com.alibaba</groupId>
            <artifactId>druid</artifactId>
            <version>1.0.9</version>
        </dependency>
        <!--省略get与set写法-->
        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
        </dependency>
        <!-- shiro与spring整合依赖 -->
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-spring</artifactId>
            <version>1.4.0</version>
        </dependency>
        <!-- thymel对shiro的扩展坐标 -->
        <dependency>
            <groupId>com.github.theborakompanioni</groupId>
            <artifactId>thymeleaf-extras-shiro</artifactId>
            <version>2.0.0</version>
        </dependency>
        <!-- 导入thymeleaf依赖 -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-thymeleaf</artifactId>
        </dependency>
        <dependency>
            <groupId>taglibs</groupId>
            <artifactId>standard</artifactId>
            <version>1.1.2</version>
        </dependency>
        <dependency>
            <groupId>commons-beanutils</groupId>
            <artifactId>commons-beanutils</artifactId>
            <version>1.9.3</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
            <exclusions>
                <exclusion>
                    <groupId>org.junit.vintage</groupId>
                    <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
            </exclusions>
        </dependency>
        <dependency>
            <groupId>com.vaadin.external.google</groupId>
            <artifactId>android-json</artifactId>
            <version>0.0.20131108.vaadin1</version>
            <scope>compile</scope>
        </dependency>
    </dependencies>

    （2）properties文件配置

server.port=9999
spring.datasource.url=jdbc:mysql://localhost:3306/Permission
spring.datasource.username=root
spring.datasource.password=123456
spring.datasource.driver-class-name=com.mysql.jdbc.Driver
spring.datasource.type=com.alibaba.druid.pool.DruidDataSource
mybatis.type-aliases-package=com.itheima.domain
spring.profiles.active=dev
logging.config=classpath:logback1-core.xml
spring.thymeleaf.prefix=classpath:/web/
spring.thymeleaf.suffix=.html
spring.thymeleaf.mode=LEGACYHTML5

       （3）假定已经实现了登录功能，根据不同用户权限得到不同的导航菜单。

         后端实现

            menu类

@Setter
@Getter
public class MenuVo {
    private String id;
    private String name;
    private String url;
    private String pId;
    private boolean open;
    private boolean checked;
}

       权限实体类

@Setter
@Getter
public class Function {
    private Integer func_id;
    private String func_name;
    private String func_url;
    private String func_code;
    private Integer parent_id;
    private Integer func_type;
    private Integer status;
    private Integer sort_num;
    private String create_time;
    private String update_time;
}

     接口层

@Mapper
public interface IFunctionMapper {
    /**
     * 根据用户的id查找权限菜单
     * @param userId
     * @return
     */
    @Select("select\n" +
            "\t\t\tdistinct\n" +
            "\t\t\tf.func_id,\n" +
            "\t\t\tf.func_name,\n" +
            "\t\t\tf.func_url,\n" +
            "\t\t\tf.func_code,\n" +
            "\t\t\tf.parent_id,\n" +
            "\t\t\tf.func_type,\n" +
            "\t\t\tf.status,\n" +
            "\t\t\tf.sort_num,\n" +
            "\t\t\tf.create_time,\n" +
            "\t\t\tf.update_time\n" +
            "\t\tfrom tb_roles r,tb_functions f,tb_role_function rf where r.role_id =\n" +
            "\t\trf.role_id and f.func_id = rf.func_id and r.role_id in(\n" +
            "\t\tselect r.role_id from tb_users u,tb_roles r,tb_user_role ur where u.user_id\n" +
            "\t\t= ur.user_id and r.role_id = ur.role_id and f.func_type=1 and u.user_id = #{userId});")
    List<Function> findMenu(@Param("userId")int userId);
}

    服务层

public List<MenuVo> findMenu(int userId) {
        List<MenuVo> menus = new ArrayList<MenuVo>();
        List<Function> functions = functionMapper.findMenu(userId);
        if(functions != null && functions.size() > 0){
            for(Function f : functions){
                MenuVo mv = new MenuVo();
                mv.setId(f.getFunc_id().toString());
                mv.setName(f.getFunc_name());
                mv.setUrl(f.getFunc_url());
                if(f.getParent_id() != null)
                {
                    mv.setpId(f.getParent_id().toString());
                    mv.setOpen(false);
                }else{
                    mv.setOpen(true);
                }
                mv.setChecked(false);
                menus.add(mv);
            }
        }
        return menus;
    }

        控制器

    @ResponseBody
    @RequestMapping("/menu.do")
    public List<MenuVo> findMenu(HttpServletRequest request){
        List<MenuVo> menus = new ArrayList<MenuVo>();
        //获取当前用户信息
        User user = (User) SecurityUtils.getSubject().getPrincipal();
        if(user != null){
            menus = menuService.findMenu(user.getUser_id());
        }
        return menus;
    }