非常感谢您的提问，我可以为您提供以下基于
shiro安全认证的
springboot程序的代码示例:
1. 添加依赖
```xml
<dependency>
<groupId>org.apache.
shiro</groupId>
<artifactId>
shiro-
spring-
boot-web-starter</artifactId>
<version>1.6.0</version>
</dependency>
```
2. 配置
shiro
```java
@Configuration
public class
ShiroConfig {
// 配置
shiro过滤器
@Bean
public
FilterRegistrationBean<Delegating
FilterProxy> delegating
FilterProxy(){
FilterRegistrationBean<Delegating
FilterProxy>
filterRegistrationBean = new
FilterRegistrationBean<>();
filterRegistrationBean.set
Filter(new Delegating
FilterProxy("
shiroFilterFactoryBean"));
filterRegistrationBean.addUrlPatterns("/*");
return
filterRegistrationBean;
}
// 配置
shiro
@Bean(name = "
shiroFilterFactoryBean")
public
ShiroFilterFactoryBean
shiroFilterFactoryBean(SecurityManager securityManager){
ShiroFilterFactoryBean
shiroFilterFactoryBean = new
ShiroFilterFactoryBean();
shiroFilterFactoryBean.setSecurityManager(securityManager);
shiroFilterFactoryBean.setLoginUrl("/login");
shiroFilterFactoryBean.setUnauthorizedUrl("/error/403");
Map<String, String>
filterChain
DefinitionMap = new LinkedHash
Map<>();
filterChain
DefinitionMap.put("/logout", "logout");
filterChain
DefinitionMap.put("/static/**", "anon");
filterChain
DefinitionMap.put("/login", "anon");
filterChain
DefinitionMap.put("/error/**", "anon");
filterChain
DefinitionMap.put("/**", "authc");
shiroFilterFactoryBean.set
FilterChain
DefinitionMap(
filterChain
DefinitionMap);
return
shiroFilterFactoryBean;
}
// 配置SecurityManager
@Bean
public SecurityManager securityManager(AuthRealm authRealm){
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
securityManager.setRealm(authRealm);
return securityManager;
}
// 配置Realm
@Bean
public AuthRealm authRealm(HashedCredentialsMatcher hashedCredentialsMatcher){
AuthRealm authRealm = new AuthRealm();
authRealm.setCacheManager(new MemoryConstrainedCacheManager());
authRealm.setCredentialsMatcher(hashedCredentialsMatcher);
return authRealm;
}
// 配置凭证匹配器
@Bean
public HashedCredentialsMatcher hashedCredentialsMatcher(){
HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
hashedCredentialsMatcher.setHashAlgorithmName("md5");
hashedCredentialsMatcher.setHashIterations(2);
return hashedCredentialsMatcher;
}
}
```
3. 实现自定义Realm
```java
public class AuthRealm extends AuthenticatingRealm {
@Autowired
private UserService userService;
// 验证用户身份
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
UsernamePasswordToken token = (UsernamePasswordToken) authenticationToken;
String username = token.getUsername();
User user = userService.getUserByUsername(username);
if(user == null){
throw new UnknownAccountException();
}
return new SimpleAuthenticationInfo(user, user.getPassword(), ByteSource.Util.bytes(user.getSalt()), getName());
}
// 授权
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
User user = (User) principalCollection.getPrimaryPrincipal();
authorizationInfo.addRole(user.getRole());
authorizationInfo.addStringPermission(user.getPermission());
return authorizationInfo;
}
}
```
4. 实现登录接口
```java
@RestController
public class LoginController {
@Post
Mapping("/login")
public Result login(String username, String password){
Subject subject = SecurityUtils.getSubject();
UsernamePasswordToken token = new UsernamePasswordToken(username, password);
try{
subject.login(token);
}catch (UnknownAccountException e){
return Result.fail("用户名不存在");
}catch (IncorrectCredentialsException e){
return Result.fail("密码错误");
}
return Result.success();
}
@Get
Mapping("/logout")
public Result logout(){
Subject subject = SecurityUtils.getSubject();
subject.logout();
return Result.success();
}
}
```
以上便是基于
shiro安全认证的
springboot程序的代码示例，希望能够对您有所帮助。如果您有其他问题，欢迎继续提问。
2万+
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
