springboot中使用shiro

我会带着你远行 2022-05-28 11:49 144阅读 0赞

首先在pom文件中添加shiro的jar包

<dependency>
           <groupId>org.apache.shiro</groupId>
           <artifactId>shiro-spring</artifactId>
           <version>1.2.4</version>
       </dependency>

在项目中添加shiro的配置类ShiroConfiguration

@Configuration
    public class ShiroConfiguration { 
    
    
    
        @Bean
        public MyShiroRealm myShiroRealm(){
            MyShiroRealm myShiroRealm=new MyShiroRealm();
            myShiroRealm.setCachingEnabled(false);
            return myShiroRealm;
        }
        @Bean
        public DefaultWebSecurityManager defaultWebSecurityManager(MyShiroRealm myShiroRealm){
            DefaultWebSecurityManager securityManager=new DefaultWebSecurityManager();
            securityManager.setRealm(myShiroRealm);
            return securityManager;
        }
    
        @Bean
        public ShiroFilterFactoryBean shiroFilter(DefaultWebSecurityManager defaultWebSecurityManager){
            ShiroFilterFactoryBean shiroFilterFactoryBean=new ShiroFilterFactoryBean();
            shiroFilterFactoryBean.setLoginUrl("/login");
            shiroFilterFactoryBean.setSuccessUrl("/subLogin");
            shiroFilterFactoryBean.setSecurityManager(defaultWebSecurityManager);
            //shiroFilterFactoryBean.setUnauthorizedUrl("/login");
            Map<String,String> filerChainDefinitionMap=new LinkedHashMap<>();
            filerChainDefinitionMap.put("/logout","logout");
            filerChainDefinitionMap.put("/static/**","anon");
            filerChainDefinitionMap.put("/loginPage","anon");
            filerChainDefinitionMap.put("/login","anon");
            filerChainDefinitionMap.put("/success","anon");
            filerChainDefinitionMap.put("/**","authc");
            shiroFilterFactoryBean.setFilterChainDefinitionMap(filerChainDefinitionMap);
            return shiroFilterFactoryBean;
        }
    
    
    
    }

因为上面需要ShiroRealm我们这里自己创建一个MyShiroRealm ，这里面写的是验证登陆人的账号密码是否正确，和验证账号的权限信息。

public class MyShiroRealm extends AuthorizingRealm { 
    
        @Resource
        private TbUserDao userDao;
    
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
          ShiroUser shiroUser = (ShiroUser) principals.getPrimaryPrincipal();
    
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
            //权限表中权限拼接的set集合
            Set<String> permNames = userService.findPermNamesByUserId(shiroUser.getId());
    
            info.addStringPermissions(permNames);
    
            logger.info(String.format("用户[%s]登录成功,获取权限集合:%s", shiroUser.getLoginName(), permNames.toString()));
    
            return info;
        }
    
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
            UsernamePasswordToken token=(UsernamePasswordToken)authenticationToken;
            String userName = token.getUsername();//查看是否有此用户
            TbUser user=userDao.findTbUserByLoginName(userName);
            if(user==null) return null;
            ShiroUser shiroUser = new ShiroUser();
            try{
                shiroUser.setId(user.getId());
                shiroUser.setLoginName(user.getLoginName());
                shiroUser.setName(user.getName());
                shiroUser.setDataRange(user.getDataRange());
                if(user.getCompany() != null){
                    shiroUser.setCompanyId(user.getCompany().getId());
                    shiroUser.setCompanyName(user.getCompany().getCompanyName());
                    shiroUser.setState(user.getCompany().getState());
                }else{
                    shiroUser.setState("1");
                }
                String roleNames = "";
                for(TBRole r : user.getRoles()){
                    roleNames += ","+r.getName();
                }
                shiroUser.setRoleNames(roleNames.substring(1));
            }catch(Exception e){
                e.printStackTrace();
            }
                return new SimpleAuthenticationInfo(shiroUser,user.getPassWord(),user.getLoginName());
    
        }
            /** * 自定义Authentication对象，使得Subject除了携带用户的登录名外还可以携带更多信息. */
        public static class ShiroUser implements Serializable { 
            private static final long serialVersionUID = -1373760761780840081L;
            public Long id;
            public String loginName;
            public String name;
            public String dataRange;
            public Long companyId;
            public String companyName;
            public String roleNames;
            public String state;
            public String getDataRange() {
                return dataRange;
            }
    
            public void setDataRange(String dataRange) {
                this.dataRange = dataRange;
            }
    
            public String getName() {
                return name;
            }
    
            public String getLoginName() {
                return loginName;
            }
    
            public Long getId() {
                return id;
            }
    
            public static long getSerialversionuid() {
                return serialVersionUID;
            }
    
            public void setId(Long id) {
                this.id = id;
            }
    
            public void setLoginName(String loginName) {
                this.loginName = loginName;
            }
    
            public void setName(String name) {
                this.name = name;
            }
    
    
            public Long getCompanyId() {
                return companyId;
            }
    
            public void setCompanyId(Long companyId) {
                this.companyId = companyId;
            }
    
    
            public void setCompanyName(String companyName) {
                this.companyName = companyName;
            }
    
            public String getCompanyName() {
                return companyName;
            }
    
            public String getRoleNames() {
                return roleNames;
            }
    
            public void setRoleNames(String roleNames) {
                this.roleNames = roleNames;
            }
    
            public String getState() {
                return state;
            }
    
            public void setState(String state) {
                this.state = state;
            }
    
            /** * 本函数输出将作为默认的<shiro:principal/>输出. */
            @Override
            public String toString() {
                return loginName;
            }
    
            /** * 重载hashCode,只计算loginName; */
            @Override
            public int hashCode() {
                return Objects.hashCode(loginName);
            }
    
            /** * 重载equals,只计算loginName; */
            @Override
            public boolean equals(Object obj) {
                if (this == obj) {
                    return true;
                }
                if (obj == null) {
                    return false;
                }
                if (getClass() != obj.getClass()) {
                    return false;
                }
                ShiroUser other = (ShiroUser) obj;
                if (loginName == null) {
                    if (other.loginName != null) {
                        return false;
                    }
                } else if (!loginName.equals(other.loginName)) {
                    return false;
                }
    
                return true;
            }
    
        }
    }