shiro使用jdbc的权限认证

最新推荐文章于 2023-02-22 11:29:49 发布

weixin_34250709

最新推荐文章于 2023-02-22 11:29:49 发布

阅读量129

点赞数

文章标签： python 数据库

原文链接：https://my.oschina.net/lenglingx/blog/752061

版权

2019独角兽企业重金招聘Python工程师标准>>>

添加相关依赖：

<dependency>
			<groupId>junit</groupId>
			<artifactId>junit</artifactId>
			<version>4.12</version>
			<scope>test</scope>
		</dependency>

		<dependency>
			<groupId>c3p0</groupId>
			<artifactId>c3p0</artifactId>
			<version>0.9.1.2</version>
		</dependency>
		
		<dependency>
			<groupId>mysql</groupId>
			<artifactId>mysql-connector-java</artifactId>
			<version>5.1.37</version>
		</dependency>

		<!-- shiro -->
		<dependency>
			<groupId>org.apache.shiro</groupId>
			<artifactId>shiro-core</artifactId>
			<version>1.3.0</version>
		</dependency>
		<dependency>
			<groupId>org.apache.shiro</groupId>
			<artifactId>shiro-web</artifactId>
			<version>1.3.0</version>
		</dependency>
		<dependency>
			<groupId>org.slf4j</groupId>
			<artifactId>slf4j-api</artifactId>
			<version>1.6.4</version>
		</dependency>
		<dependency>
			<groupId>org.slf4j</groupId>
			<artifactId>slf4j-log4j12</artifactId>
			<version>1.6.4</version>
		</dependency>
		<dependency>
			<groupId>commons-logging</groupId>
			<artifactId>commons-logging</artifactId>
			<version>1.2</version>
		</dependency>

添加数据库：

shiro配置文件：jdbc_realm.ini

[main]
jdbcRealm=org.apache.shiro.realm.jdbc.JdbcRealm
dataSource=com.mchange.v2.c3p0.ComboPooledDataSource
dataSource.driverClass=com.mysql.jdbc.Driver
dataSource.jdbcUrl=jdbc:mysql://localhost:3306/tshiro
dataSource.user=tshiro
dataSource.password=tshiro
jdbcRealm.dataSource=$dataSource
securityManager.realms=$jdbcRealm

测试代码：

package tshiro01;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.config.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.util.Factory;
import org.junit.Assert;
import org.junit.Test;

public class TestHelloworld {
	
	private static Log log = LogFactory.getLog(TestHelloworld.class);

	@Test
	public void testJdbcRealm() {
		// 读取shiro.ini配置文件，初始化SecurityManager工厂
		Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:jdbc_realm.ini");
		// 获取SecurityManager的实例securityManager
		SecurityManager securityManager = factory.getInstance();
		// 把SecurityManager的实例securityManager绑定到SecurityUtils
		SecurityUtils.setSecurityManager(securityManager);
		// 得到当前执行的用户
		Subject subject = SecurityUtils.getSubject();
		// 创建用户名，密码的token
		UsernamePasswordToken usernamePasswordToken = new UsernamePasswordToken("admin", "123456");

		try {
			// 身份认证和登陆
			subject.login(usernamePasswordToken);
			log.info("登陆成功！");
//			if (subject.hasRole("roleadmin")) {
//				log.info("有权限");
//				Assert.assertTrue(subject.isPermitted("druid:view"));
//			} else {
//				log.info("无权限");
//			}
		} catch (AuthenticationException e) {
			e.printStackTrace();
			log.info("登陆失败");
		}

		Assert.assertEquals(true, subject.isAuthenticated());
		// 退出登陆
		subject.logout();
	}

}

转载于:https://my.oschina.net/lenglingx/blog/752061