（3）Shiro的配置项(SSM和SpringBoot配置)

今天药忘吃喽~ 2022-06-08 09:27 192阅读 0赞

## SSM篇 ##

#### Shiro的配置一般来说都是通过xml文件来实现的，当然也有SpringBoot通过配置类实现的，本节是传统的java项目通过配置文件实现。 ####

#### 各位把眼睛睁亮，开始了：： ####

#### POM文件不多说 自己添加。 ####

#### **一.web.xml中的配置。** ####

大家都知道web.xml是web程序的入口 。shiro在web.xml中的配置其实就是一个拦截器，将所有的路径都拦截，进入shiro的管理中进行处理。决定哪些放行，哪些拦截。详看代码：

<filter>
            
            <filter-name>shiroFilter</filter-name>
            <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
            <init-param>
                
                <param-name>targetFilterLifecycle</param-name>
                <param-value>true</param-value>
            </init-param>
        </filter>
    
      <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/*</url-pattern>
      </filter-mapping>

#### **二.application-shiro.xml中的配置。** ####

<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"></bean>
    
    
         
         <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor">
            
            <property name="proxyTargetClass" value="true"></property>
         </bean>
    
    
         
         <aop:aspectj-autoproxy proxy-target-class="true"></aop:aspectj-autoproxy>
    
    
    
    
    
         
          <bean id="authRealm" class="cn.tarena.ht.shiro.AuthRealm">
    
            
            <property name="CredentialsMatcher" ref="authEnctype"></property>
          </bean>
    
          
          <bean id="authEnctype" class="cn.tarena.ht.shiro.AuthCredential"></bean>
    
         
         <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
            
            <property name="realm" ref="authRealm"></property>
         </bean>
    
         
         <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
            
            <property name="securityManager" ref="securityManager"></property>
         </bean>
    
         
         <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
            
            <property name="securityManager" ref="securityManager"></property>
    
            
            <property name="loginUrl" value="/index.jsp"></property>
    
            
            <property name="FilterChainDefinitions">
                <value>
                    
                    /tologin*=anon
                    /login*=anon
                    /staticfile/**=anon
    
                    
                    /** = authc         
                </value>
            </property>
    
         </bean>

配置完了就是 自己写自定义的Realm和自定义的CredentialsMatcher  
自定义的Realm要继承AuthorizingRealm  
自定义的CredentialsMatcher要继承SimpleCredentailsMathce  
上面继承的这两个不是说非要这两个，而是这两个类更加容易实现我们的业务，同样 90%也适用你。

## SpringBoot篇 ##

shiro用SpringBoot进行配置 ，其实就是将配置文件转换成了配置类而已，大家熟悉了xml的配置，配置类的方式也相当简单。  
详细代码：

/** * 1.将shiro生命周期交给Spring管理 */
    
        @Bean(name="lifecycleBeanPostProcessor")
        public LifecycleBeanPostProcessor lifecycleBeanPostProcessor(){
            return  new LifecycleBeanPostProcessor();
        }
    
        /** * 2.为制定目标创建代理对象 */
        @Bean
        public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator(){
            DefaultAdvisorAutoProxyCreator creator=new DefaultAdvisorAutoProxyCreator();
            creator.setBeanName("lifecycleBeanPostProcessor");
            creator.setProxyTargetClass(true);
            return creator;
        }
        /** * 3.定义自定义凭证匹配器 */
        @Bean("credentialsMatcher")
        public CredentialsMatcher credentialsMatcher(){
            return new AuthCredentialsMatcher();
        }
    
        /** * 4.指定自定义的Relam */
        @Bean("authRealm")
        public AuthRealm authRealm(@Qualifier("credentialsMatcher")CredentialsMatcher credentialsMatcher){
            AuthRealm authRealm = new AuthRealm();
            authRealm.setCredentialsMatcher(credentialsMatcher);
            return authRealm;
        }
        /** * 5.配置核心安全管理器 */
        @Bean("securityManager")
        public DefaultWebSecurityManager securityManager(@Qualifier("authRealm") AuthRealm authRealm){
            DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
            securityManager.setRealm(authRealm);
            return securityManager;
        }
    
        /** * 6.配置权限管理器 */
        @Bean
        public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(@Qualifier("securityManager") DefaultWebSecurityManager securityManager) {
            AuthorizationAttributeSourceAdvisor aASA = new AuthorizationAttributeSourceAdvisor();
            aASA.setSecurityManager(securityManager);
            return aASA;
        }
    
    
        /** * 7.配置过滤器链 */
        @Bean
        public ShiroFilterFactoryBean shiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager){
            ShiroFilterFactoryBean bean = new ShiroFilterFactoryBean();
            bean.setSecurityManager(securityManager);
            bean.setLoginUrl("/");
            //设置拦截器链
            LinkedHashMap<String,String> map = new LinkedHashMap<String,String>();
            map.put("/","anon");
            map.put("/login","anon");
            map.put("/css/**","anon");
            map.put("/components/**","anon");
            map.put("/images/**","anon");
            map.put("/js/**","anon");
            map.put("/skin/**","anon");
            map.put("/**","authc");
            bean.setFilterChainDefinitionMap(map);
            return bean;
        }
    
        /** * 8.thymeleaf设置shiro标签 *注意要用到这个必须加入依赖 且高版本报错2.0以上都报错 <dependency> <groupId>com.github.theborakompanioni</groupId> <artifactId>thymeleaf-extras-shiro</artifactId> <version>1.0.2</version> </dependency> * * @return */
        @Bean
        public ShiroDialect shiroDialect() {
            return new ShiroDialect();
        }