shiro

无所求则无所获

于 2018-10-09 14:24:17 发布

阅读量574

点赞数

<filter>
<filter-name>shiroFilter</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
<init-param>
<param-name>targetFilterLifecycle</param-name>
<param-value>true</param-value>
</init-param>
</filter>

<filter-mapping>
<filter-name>shiroFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
<property name="cacheManager" ref="cacheManager"/>
<property name="authenticator" ref="authenticator"></property>
<property name="realms">
   <list>
           <ref bean="jdbcRealm"/>

       </list>
</property>
<property name="rememberMeManager.cookie.maxAge" value="10"></property>
</bean>
<bean id="cacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
<property name="cacheManagerConfigFile" value="classpath:ehcache.xml"/>
</bean>
<bean id="authenticator" class="org.apache.shiro.authc.pam.ModularRealmAuthenticator">
   <property name="authenticationStrategy">
       <bean class="org.apache.shiro.authc.pam.AtLeastOneSuccessfulStrategy"></bean>
   </property>
</bean>
<bean id="jdbcRealm" class="com.atguigu.shiro.realms.ShiroRealm">
   <property name="credentialsMatcher">
       <bean class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
           <property name="hashAlgorithmName" value="MD5"></property>
           <property name="hashIterations" value="1024"></property>
       </bean>
   </property>
</bean>









<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
<bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor"/>
<bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
<property name="securityManager" ref="securityManager"/>
</bean>
<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
<property name="securityManager" ref="securityManager"/>
<property name="loginUrl" value="/login.jsp"/>
<property name="successUrl" value="/list.jsp"/>
<property name="unauthorizedUrl" value="/unauthorized.jsp"/>
<property name="filterChainDefinitionMap" ref="filterChainDefinitionMap"></property>
</bean>

<bean id="filterChainDefinitionMap" factory-bean="filterChainDefinitionMapBuilder" factory-method="buildFilterChainDefinitionMap"></bean>

<bean id="filterChainDefinitionMapBuilder" class="com.atguigu.shiro.factory.FilterChainDefinitionMapBuilder"></bean>

<bean id="shiroService" class="com.atguigu.shiro.services.ShiroService"></bean>

public class FilterChainDefinitionMapBuilder {

   public LinkedHashMap<String, String> buildFilterChainDefinitionMap(){
       LinkedHashMap<String, String> map = new LinkedHashMap<>();

       map.put("/login.jsp", "anon");
       map.put("/shiro/login", "anon");
       map.put("/shiro/logout", "logout");
       map.put("/user.jsp", "authc,roles[user]");
       map.put("/admin.jsp", "authc,roles[admin]");
       map.put("/list.jsp", "user");

       map.put("/**", "authc");

       return map;
   }

}

@Controller
@RequestMapping("/shiro")
public class ShiroHandler {

   @Autowired
   private ShiroService shiroService;

   @RequestMapping("/testShiroAnnotation")
   public String testShiroAnnotation(HttpSession session){
       session.setAttribute("key", "value12345");
       shiroService.testMethod();
       return "redirect:/list.jsp";
   }

   @RequestMapping("/login")
   public String login(@RequestParam("username") String username,
           @RequestParam("password") String password){
       Subject currentUser = SecurityUtils.getSubject();

       if (!currentUser.isAuthenticated()) {
UsernamePasswordToken token = new UsernamePasswordToken(username, password);
// rememberme
token.setRememberMe(true);
try {
   System.out.println("1. " + token.hashCode());
currentUser.login(token);
}
// ... catch more exceptions here (maybe custom ones specific to your application?
catch (AuthenticationException ae) {
//unexpected condition? error?
   System.out.println(": " + ae.getMessage());
}
}

       return "redirect:/list.jsp";
   }

}

public class ShiroRealm extends AuthorizingRealm {

   @Override
   protected AuthenticationInfo doGetAuthenticationInfo(
           AuthenticationToken token) throws AuthenticationException {
       System.out.println("[FirstRealm] doGetAuthenticationInfo");

       UsernamePasswordToken upToken = (UsernamePasswordToken) token;

       String username = upToken.getUsername();


       System.out.println("��ݿ��л�ȡ username: " + username + " ��Ӧ��û��Ϣ.");

       if("unknown".equals(username)){
           throw new UnknownAccountException("�û��!");
       }

       if("monster".equals(username)){
           throw new LockedAccountException("�û��");
       }

       Object principal = username;

       Object credentials = null; //"fc1709d0a95a6be30bc5926fdb7f22f4";
       if("admin".equals(username)){
           credentials = "038bdaf98f2037b31f1e75b5b4c9b26e";
       }else if("user".equals(username)){
           credentials = "098d2c478e9c11555ce2823231e02ec1";
       }


       String realmName = getName();

       ByteSource credentialsSalt = ByteSource.Util.bytes(username);

       SimpleAuthenticationInfo info = null; //new SimpleAuthenticationInfo(principal, credentials, realmName);

//username,password,salt,realmName
       info = new SimpleAuthenticationInfo(principal, credentials, credentialsSalt, realmName);
       return info;
   }

   public static void main(String[] args) {
       String hashAlgorithmName = "MD5";
       Object credentials = "123456";
       Object salt = ByteSource.Util.bytes("user");;
       int hashIterations = 1024;

       Object result = new SimpleHash(hashAlgorithmName, credentials, salt, hashIterations);
       System.out.println(result);
   }

   @Override
   protected AuthorizationInfo doGetAuthorizationInfo(
           PrincipalCollection principals) {

       Object principal = principals.getPrimaryPrincipal();


       Set<String> roles = new HashSet<>();
       roles.add("user");
       if("admin".equals(principal)){
           roles.add("admin");
       }


       SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(roles);

       return info;
   }
}

<!-- Sets the path to the directory where cache .data files are created.

If the path is a Java System Property it is replaced by
its value in the running VM.

The following properties are translated:
user.home - User's home directory
user.dir - User's current working directory
java.io.tmpdir - Default temp file path -->
<diskStore path="java.io.tmpdir"/>

<cache name="authorizationCache"
eternal="false"
timeToIdleSeconds="3600"
timeToLiveSeconds="0"
overflowToDisk="false"
statistics="true">
</cache>

<!--Default Cache configuration. These will applied to caches programmatically created through
the CacheManager.

The following attributes are required for defaultCache:

maxInMemory - Sets the maximum number of objects that will be created in memory
eternal - Sets whether elements are eternal. If eternal, timeouts are ignored and the element
is never expired.
timeToIdleSeconds - Sets the time to idle for an element before it expires. Is only used
if the element is not eternal. Idle time is now - last accessed time
timeToLiveSeconds - Sets the time to live for an element before it expires. Is only used
if the element is not eternal. TTL is now - creation time
overflowToDisk - Sets whether elements can overflow to disk when the in-memory cache
has reached the maxInMemory limit.

-->
<defaultCache
maxElementsInMemory="10000"
eternal="false"
timeToIdleSeconds="120"
timeToLiveSeconds="120"
overflowToDisk="true"
/>

<!--Predefined caches. Add your cache configuration settings here.
If you do not have a configuration for your cache a WARNING will be issued when the
CacheManager starts

The following attributes are required for defaultCache:

name - Sets the name of the cache. This is used to identify the cache. It must be unique.
maxInMemory - Sets the maximum number of objects that will be created in memory
eternal - Sets whether elements are eternal. If eternal, timeouts are ignored and the element
is never expired.
timeToIdleSeconds - Sets the time to idle for an element before it expires. Is only used
if the element is not eternal. Idle time is now - last accessed time
timeToLiveSeconds - Sets the time to live for an element before it expires. Is only used
if the element is not eternal. TTL is now - creation time
overflowToDisk - Sets whether elements can overflow to disk when the in-memory cache
has reached the maxInMemory limit.

-->

<!-- Sample cache named sampleCache1
This cache contains a maximum in memory of 10000 elements, and will expire
an element if it is idle for more than 5 minutes and lives for more than
10 minutes.

If there are more than 10000 elements it will overflow to the
disk cache, which in this configuration will go to wherever java.io.tmp is
defined on your system. On a standard Linux system this will be /tmp"
-->
<cache name="sampleCache1"
maxElementsInMemory="10000"
eternal="false"
timeToIdleSeconds="300"
timeToLiveSeconds="600"
overflowToDisk="true"
/>

<cache name="sampleCache2"
maxElementsInMemory="1000"
eternal="true"
timeToIdleSeconds="0"
timeToLiveSeconds="0"
overflowToDisk="false"
/> -->

</ehcache>

无所求则无所获

关注

0
点赞
踩
1

收藏

觉得还不错? 一键收藏
0
评论
shiro

&lt;!-- 1. 配置 Shiro 的 shiroFilter. 2. DelegatingFilterProxy 实际上是 Filter 的一个代理对象. 默认情况下, Spring 会到 IOC 容器中查找和 &lt;filter-name&gt; 对应的 filter bean. 也可以通过 targetBeanName 的初始化参数来配置 filter...
复制链接

扫一扫