spring集成shiro Part02

灰太狼 2022-05-15 03:50 195阅读 0赞

part01讲了如何在web中集成spring 和spring mvc,这一节说下集成shiro，当然 只是集成进去，里面具体的内容先不实现，放到下一节。  
还是先总结一下步骤：  
1.编辑web.xml，在其中加入shiro的filter  
2.编辑spring的配置文件（不是springmvc的配置文件）,这一步是关键，很多东西都会配置进去（配置这个东西的同时，会创建一些页面，例如登陆页面，登陆成功之后的页面）  
3.创建java实体类，例如Realm，还有管理资源对应权限的配置类  
我下面贴的配置文件 我会把整个都贴出来  
1.web.xml

<?xml version="1.0" encoding="UTF-8"?>
    
    <web-app version="2.4"
             xmlns="http://java.sun.com/xml/ns/j2ee"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
    
      
      <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>classpath:spring.xml</param-value>
      </context-param>
      <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
      </listener>
    
      
      <servlet>
        <servlet-name>spring</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <init-param>
          <param-name>contextConfigLocation</param-name>
          <param-value>classpath:spring-mvc.xml</param-value>
        </init-param>
      </servlet>
      <servlet-mapping>
        <servlet-name>spring</servlet-name>
        <url-pattern>/</url-pattern>
      </servlet-mapping>
    
      
      <filter>
        <filter-name>shiroFilter</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
        <init-param>
          <param-name>targetFilterLifecycle</param-name>
          <param-value>true</param-value>
        </init-param>
      </filter>
      <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/*</url-pattern>
      </filter-mapping>
    </web-app>

2.spring的配置文件

<?xml version="1.0" encoding="UTF-8"?>
    <beans
            xmlns="http://www.springframework.org/schema/beans"
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xmlns:context="http://www.springframework.org/schema/context"
    
            xsi:schemaLocation="
    http://www.springframework.org/schema/beans
    http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
    http://www.springframework.org/schema/context
            http://www.springframework.org/schema/context/spring-context-3.1.xsd">
    
        
        <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
            
            <property name="cacheManager" ref="cacheManager"/>
            
            <property name="authenticator" ref="authenticator"/>
            
            <property name="realms">
                <list>
                    <ref bean="firstRealm"/>
                    <ref bean="secondRealm"/>
                    <ref bean="authorizationRealm"/>
                </list>
            </property>
        </bean>
    
        
        <bean id="authenticator" class="org.apache.shiro.authc.pam.ModularRealmAuthenticator">
            
            <property name="authenticationStrategy">
                <bean class="org.apache.shiro.authc.pam.AtLeastOneSuccessfulStrategy"></bean>
            </property>
        </bean>
        
        <bean id="cacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
            
        </bean>
        
        <bean id="firstRealm" class="com.ithaha.shiro.realms.ShiroRealm">
            
            <property name="credentialsMatcher">
                <bean class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
                    
                    <property name="hashAlgorithmName" value="MD5"></property>
                    <property name="hashIterations" value="1024"></property>
                </bean>
            </property>
        </bean>
        
        <bean id="secondRealm" class="com.ithaha.shiro.realms.SecondShrioRealm">
            
            <property name="credentialsMatcher">
                <bean class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
                    
                    <property name="hashAlgorithmName" value="SHA1"></property>
                    <property name="hashIterations" value="1024"></property>
                </bean>
            </property>
        </bean>
        
        <bean id="authorizationRealm" class="com.ithaha.shiro.realms.AuthorizationShiroRelam">
            
            <property name="credentialsMatcher">
                
                <bean class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
                    <property name="hashAlgorithmName" value="SHA1"></property>
                    <property name="hashIterations" value="1024"></property>
                </bean>
            </property>
        </bean>
    
        
        <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
    
        
        <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"
              depends-on="lifecycleBeanPostProcessor"/>
        <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
            <property name="securityManager" ref="securityManager"/>
        </bean>
    
        
        <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
            <property name="securityManager" ref="securityManager"/>
            
            <property name="loginUrl" value="/login.jsp"/>
            
            <property name="successUrl" value="/success.jsp"/>
            
            <property name="unauthorizedUrl" value="/unauthorized.jsp"/>
            
            <property name="filterChainDefinitionMap" ref="filterChainDefinitionMap"/>
        </bean>
        
        <bean id="filterChainDefinitionMap" factory-bean="filterChainDefinitionMapBulider"
              factory-method="buildFilterChainDefinitionMap"></bean>
        <bean id="filterChainDefinitionMapBulider" class="com.ithaha.shiro.FilterChainDefinitionMapBulider"></bean>
    
    </beans>

3.实体类

package com.ithaha.shiro.realms;
    
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.realm.AuthenticatingRealm;
    
    /**
     * @author lf
     * @Title: ShiroRealm
     * @Description: 第一个Realm
     * @date 2018/8/24 9:42
     */
    public class ShiroRealm extends AuthenticatingRealm {
        //处理认证
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
            System.out.println("this is first realm authentication");
    
    
            return null;
        }
    }

package com.ithaha.shiro.realms;
    
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.realm.AuthenticatingRealm;
    
    /**
     * @author lf
     * @Title: SecondShrioRealm
     * @Description: TODO
     * @date 2018/8/24 9:44
     */
    public class SecondShrioRealm extends AuthenticatingRealm {
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
            System.out.println("this is second realm authentication");
            return null;
        }
    }

package com.ithaha.shiro.realms;
    
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    
    /**
     * @author lf
     * @Title: AuthorizationShiroRelam
     * @Description: TODO
     * @date 2018/8/24 9:46
     */
    public class AuthorizationShiroRelam extends AuthorizingRealm {
    
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
            System.out.println("this is third realm authorization");
            return null;
        }
    
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
            System.out.println("this is third realm authentication");
            return null;
        }
    }

资源权限管理类

package com.ithaha.shiro;
    
    import java.util.LinkedHashMap;
    
    /**
     * @author lf
     * @Title: FilterChainDefinitionMapBulider
     * @Description: 资源权限管理类
     * @date 2018/8/24 9:38
     */
    public class FilterChainDefinitionMapBulider {
        public LinkedHashMap<String,String> buildFilterChainDefinitionMap(){
    
            LinkedHashMap<String ,String> res = new LinkedHashMap<String, String>();
            //anon 匿名可以访问（即不用认证就可以）
            res.put("/login.jsp","anon");
            res.put("/shiro/login","anon");
            //logout 登出
            res.put("/shiro/logout","logout");
            //authc 需要认证才可以访问
            res.put("/**","authc");
            return res;
        }
    }

嗯经过上面的配置 ，你就可以试着访问一下工程中的页面了，你会发现，没有登陆过，那么你会自动跳转到login.jsp这个页面（再强调一下，这里只是集成了这些东西，还没有细化，比如，登陆页面，用户认证，授权都还没有去细化，放到下一节）

![这里写图片描述][70]

[70]: /images/20220515/7ff232ceb2bb481da22861801bdd96c7.png