这个
框架整合可以分为以下几个步骤：
1. 集成 Spring Boot：在 pom.xml 文件中添加 Spring Boot 依赖，创建 Spring Boot 启动类。
2. 集成 MyBatis Plus：在 pom.xml 文件中添加 MyBatis Plus 依赖，配置数据源和 MyBatis Plus 相关配置。
3. 集成
Shiro：在 pom.xml 文件中添加
Shiro 依赖，创建
Shiro 配置类，配置
Shiro 的 Realm 和 SecurityManager。
4. 集成
JWT：在 pom.xml 文件中添加 j
jwt 依赖，创建
JWT 工具类，用于生成和解析
JWT。
下面是一个简单的示例代码，你可以根据你的实际需求进行调整：
1. pom.xml 文件中添加依赖：
```xml
<!-- Spring Boot -->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<!-- MyBatis Plus -->
<dependency>
<groupId>com.baomidou</groupId>
<artifactId>mybatis-plus-boot-starter</artifactId>
<version>${mybatis-plus.version}</version>
</dependency>
<!--
Shiro -->
<dependency>
<groupId>org.apache.
shiro</groupId>
<artifactId>
shiro-spring</artifactId>
<version>${
shiro.version}</version>
</dependency>
<!-- j
jwt -->
<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>j
jwt-api</artifactId>
<version>${j
jwt.version}</version>
</dependency>
<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>j
jwt-impl</artifactId>
<version>${j
jwt.version}</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>j
jwt-jackson</artifactId>
<version>${j
jwt.version}</version>
<scope>runtime</scope>
</dependency>
```
2. 创建 Spring Boot 启动类：
```
java
@
SpringBootApplication
public class Application {
public static void main(String[] args) {
SpringApplication.run(Application.class, args);
}
}
```
3. 配置 MyBatis Plus：
```
java
@Configuration
@MapperScan("com.example.mapper")
public class MyBatisPlusConfig {
@Bean
public PaginationInterceptor paginationInterceptor() {
return new PaginationInterceptor();
}
}
```
4. 配置
Shiro：
```
java
@Configuration
public class
ShiroConfig {
@Bean
public
ShiroFilterFactoryBean
shiroFilter(SecurityManager securityManager) {
ShiroFilterFactoryBean
shiroFilter = new
ShiroFilterFactoryBean();
shiroFilter.setSecurityManager(securityManager);
shiroFilter.setUnauthorizedUrl("/401");
Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
filterChainDefinitionMap.put("/login", "anon");
filterChainDefinitionMap.put("/401", "anon");
filterChainDefinitionMap.put("/**", "
jwt");
shiroFilter.setFilterChainDefinitionMap(filterChainDefinitionMap);
Map<String, Filter> filters = new LinkedHashMap<>();
filters.put("
jwt", new
JwtFilter());
shiroFilter.setFilters(filters);
return
shiroFilter;
}
@Bean
public DefaultWebSecurityManager securityManager(Realm realm) {
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
securityManager.setRealm(realm);
return securityManager;
}
@Bean
public Realm realm() {
return new UserRealm();
}
}
```
5. 创建
JWT 工具类：
```
java
public class
JwtUtil {
private static final String SECRET_KEY = "your_secret_key";
private static final long EXPIRATION_TIME = 3600_000; // 1 hour
public static String generateToken(String username) {
Date now = new Date();
Date expiration = new Date(now.getTime() + EXPIRATION_TIME);
return
Jwts.builder()
.setSubject(username)
.setIssuedAt(now)
.setExpiration(expiration)
.signWith(SignatureAlgorithm.HS512, SECRET_KEY)
.compact();
}
public static String getUsernameFromToken(String token) {
Claims claims =
Jwts.parser()
.setSigningKey(SECRET_KEY)
.parseClaimsJws(token)
.getBody();
return claims.getSubject();
}
public static boolean validateToken(String token) {
try {
Jwts.parser().setSigningKey(SECRET_KEY).parseClaimsJws(token);
return true;
} catch (
JwtException e) {
return false;
}
}
}
```
6. 创建
JwtFilter：
```
java
public class
JwtFilter extends AuthenticatingFilter {
@Override
protected AuthenticationToken createToken(ServletRequest servletRequest, ServletResponse servletResponse) {
HttpServletRequest request = (HttpServletRequest) servletRequest;
String token = request.getHeader("Authorization");
if (StringUtils.isBlank(token)) {
return null;
}
return new
JwtToken(token);
}
@Override
protected boolean onAccessDenied(ServletRequest servletRequest, ServletResponse servletResponse) throws Exception {
HttpServletResponse response = (HttpServletResponse) servletResponse;
response.setCharacterEncoding("UTF-8");
response.setContentType("application/json; charset=utf-8");
response.setStatus(HttpStatus.UNAUTHORIZED.value());
response.getWriter().write("{\"code\":401,\"message\":\"未登录或登录已过期，请重新登录\"}");
return false;
}
@Override
protected boolean isAccessAllowed(ServletRequest servletRequest, ServletResponse servletResponse, Object o) throws Exception {
HttpServletRequest request = (HttpServletRequest) servletRequest;
String token = request.getHeader("Authorization");
if (StringUtils.isBlank(token)) {
return false;
}
return
JwtUtil.validateToken(token);
}
}
```
7. 创建
JwtToken：
```
java
public class
JwtToken implements AuthenticationToken {
private final String token;
public
JwtToken(String token) {
this.token = token;
}
@Override
public Object getPrincipal() {
return
JwtUtil.getUsernameFromToken(token);
}
@Override
public Object getCredentials() {
return token;
}
}
```
8. 创建 UserRealm：
```
java
public class UserRealm extends AuthorizingRealm {
@Autowired
private UserService userService;
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
return null;
}
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
String username = (String) authenticationToken.getPrincipal();
User user = userService.getByUsername(username);
if (user == null) {
throw new UnknownAccountException("账号不存在");
}
return new SimpleAuthenticationInfo(user.getUsername(), user.getPassword(), getName());
}
}
```
这样，简单的 Spring Boot +
Shiro +
JWT + MyBatis Plus
整合就完成了。你可以根据具体的需求，对代码进行修改和优化。
本文详细介绍了如何在 Shiro 和 SpringBoot 框架中集成 JWT，用于权限管理和认证。通过JWTUtil工具类生成和校验token，实现用户登录、权限控制和异常处理。文章提供源码链接，包括用户角色分类、权限注解使用，以及不同角色可访问的接口示例。
最低0.47元/天 解锁文章
660
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
