shiro授权&Shiro+jsp整合Springboot -Shiro

小咪咪 2023-09-27 16:37 178阅读 0赞

### [Shiro][]授权 ###

#### 一、授权 ####

`授权`，即访问控制，控制谁能访问哪些资源。主体进行身份认证后需要分配权限方可访问系统的资源，对于某些资源没有权限是无法访问的。

#### 二、关键对象 ####

**授权可简单理解为who对what(which)进行How操作：**

`Who，即主体（Subject）`，主体需要访问系统中的资源。

`What，即资源（Resource)`，如系统菜单、页面、按钮、类方法、系统商品信息等。资源包括`资源类型`和`资源实例`，比如`商品信息为资源类型`，类型为t01的商品为`资源实例`，编号为001的商品信息也属于资源实例。

`How，权限/许可（Permission)`，规定了主体对资源的操作许可，权限离开资源没有意义，如用户查询权限、用户添加权限、某个类方法的调用权限、编号为001用户的修改权限等，通过权限可知主体对哪些资源都有哪些操作许可。

#### 三、授权流程 ####

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-OKEnv9Pu-1630241787266)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829162154359.png)\]][img-OKEnv9Pu-1630241787266_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829162154359.png]

#### 四、授权方式 ####

*  **基于角色的访问控制**
    
     *  RBAC基于角色的访问控制（Role-Based Access Control）是以角色为中心进行访问控制
        
            if(subject.hasRole("admin")){
                    
               //操作什么资源
            }
            123
 *  **基于资源的访问控制**
    
     *  RBAC基于资源的访问控制（Resource-Based Access Control）是以资源为中心进行访问控制
        
            if(subject.isPermission("user:update:01")){
                     //资源实例
              //对01用户进行修改
            }
            if(subject.isPermission("user:update:*")){
                      //资源类型
              //对01用户进行修改
            }
            123456

#### 五、权限字符串 ####

权限字符串的规则是：**资源标识符：操作：资源实例标识符**，意思是对哪个资源的哪个实例具有什么操作，“:”是资源/操作/实例的分割符，权限字符串也可以使用\*通配符。

例子：

*  用户创建权限：user:create，或user:create:\*
 *  用户修改实例001的权限：user:update:001
 *  用户实例001的所有权限：user : \* ：001
 *  `A:B:C,A通过B来操作C`

#### 六、shiro中授权编程实现方式 ####

*  **编程式**
    
        Subject subject = SecurityUtils.getSubject();
        if(subject.hasRole(“admin”)) {
              
        	//有权限
        } else {
              
        	//无权限
        }
        123456
 *  **注解式**
    
        @RequiresRoles("admin")
        public void hello() {
              
        	//有权限
        }
        1234
 *  **标签式**
    
        JSP/GSP 标签：在JSP/GSP 页面通过相应的标签完成：
        <shiro:hasRole name="admin">
        	<!— 有权限—>
        </shiro:hasRole>
        注意: Thymeleaf 中使用shiro需要额外集成!
        12345

--------------------

#### 七、开发授权 ####

###### 1.realm的实现 ######

public class CustomMD5Realm extends AuthorizingRealm {
        
        //授权
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        
            System.out.println("===================");
            //获取主身份，也就是用户名
            String primaryPrincipal = (String) principals.getPrimaryPrincipal();
            System.out.println("身份信息："+primaryPrincipal);
            SimpleAuthorizationInfo  simpleAuthenticationInfo = new SimpleAuthorizationInfo();
            //添加角色
            simpleAuthenticationInfo.addRole("admin");
    
            simpleAuthenticationInfo.addStringPermission("user:update:*");
            simpleAuthenticationInfo.addStringPermission("product:*:*");
            return simpleAuthenticationInfo;
        }
    
        //认证
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        
            String username = (String) token.getPrincipal();//用户名
            if ("achang".equals(username)) {
        
                //数据库中存的密码
                String password = "a5adc0fc389b3236f04d1bf32e127440";//密码,123456的MD5加密
                String salt = "k2*dw";//盐
                //参数1：数据库用户名
                //参数2：数据库密码，md5+salt的密码
                //参数3：注册时的盐
                //参数4：realm名
                return new SimpleAuthenticationInfo(username,
                        password,
                        ByteSource.Util.bytes(salt),
                        this.getName());
            }
            return null;
        }
    }

###### 2.授权 ######

public class TestAuthenticatorCustomMD5Realm {
        
        public static void main(String[] args) {
        
            DefaultSecurityManager securityManager = new DefaultSecurityManager();
    
            //设置自定义的MD5+盐+hash散列的Realm
            CustomMD5Realm md5Realm = new CustomMD5Realm();
    
            //设置自定义的realm使用hash凭证匹配器，来改变密码校验方式
            HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
            hashedCredentialsMatcher.setHashAlgorithmName("MD5");//设置hash匹配器算法
            hashedCredentialsMatcher.setHashIterations(1024);//设置散列次数
            md5Realm.setCredentialsMatcher(hashedCredentialsMatcher);
    
            securityManager.setRealm(md5Realm);
            SecurityUtils.setSecurityManager(securityManager);
            Subject subject = SecurityUtils.getSubject();
            //创建token令牌
            //用户登录使用明文密码访问
            UsernamePasswordToken token = new UsernamePasswordToken("achang", "123456");
            try {
        
                subject.login(token);//用户登录
                System.out.println("登录成功~~");
            } catch (UnknownAccountException e) {
        
                e.printStackTrace();
                System.out.println("用户名错误!!");
            }catch (IncorrectCredentialsException e){
        
                e.printStackTrace();
                System.out.println("密码错误!!!");
            }
    
            if(subject.isAuthenticated()){
        
                //基于角色权限管理
                boolean admin = subject.hasRole("admin");
                System.out.println(admin);
    
                //基于多角色权限控制,hasAllRoles只要有一个该subject不含有，就返回false
                boolean roles = subject.hasAllRoles(Arrays.asList("admin","super"));
                System.out.println(roles);
    
                //是否具有其中一个角色,返回布尔数组，含有就是t，不含有就是f
                boolean[] booleans = subject.hasRoles(Arrays.asList("admin","super","user"));
    
                // 基于权限字符串的访问控制，资源标识符:操作:资源类型
                boolean permitted = subject.isPermitted("product:create:001");
                boolean user = subject.isPermitted("user:update");
                System.out.println(permitted);
                System.out.println(user);
    
                //分别具有哪些权限
                boolean[] permitted1 = subject.isPermitted("product:create:001", "user:update");
    
                //同时具有哪些权限
                boolean permittedAll = subject.isPermittedAll("product:create:001", "user:update");
            }
        }
    
    }

### 整合SpringBoot项目实战 ###

#### 零、整合思路 ####

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-xHJzSeVC-1630241787271)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829170548416.png)\]][img-xHJzSeVC-1630241787271_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829170548416.png]

#### 一、创建springboot项目 ####

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-wYo4go1P-1630241787275)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829172104103.png)\]][img-wYo4go1P-1630241787275_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829172104103.png]

#### 二、引入shiro依赖 ####

<dependency>
      <groupId>org.apache.shiro</groupId>
      <artifactId>shiro-spring-boot-starter</artifactId>
      <version>1.5.3</version>
    </dependency>

#### 三、配置shiro环境 ####

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-ghTCyVsR-1630241787278)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829180133236.png)\]][img-ghTCyVsR-1630241787278_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829180133236.png]

###### 1.配置shiroFilterFactoryBean ######

@Configuration
    public class ShiroConfig {
        
        
        //1、shiroFilter
    	//负责拦截所有请求
        @Bean
        public ShiroFilterFactoryBean getShiroFilterFactoryBean(DefaultWebSecurityManager securityManager){
        
            ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
            //注入安全管理器
            shiroFilterFactoryBean.setSecurityManager(securityManager);
    
            //设置受限资源
            HashMap<String, String> map = new HashMap<>();
            map.put("/index.jsp","authc");//authc 请求这个资源，需要认证授权
            shiroFilterFactoryBean.setFilterChainDefinitionMap(map);
    
            //默认认证界面路径
            shiroFilterFactoryBean.setLoginUrl("/login.jsp");
    
            return shiroFilterFactoryBean;
        }
        
        //2、安全管理器
        @Bean
        public DefaultWebSecurityManager getDefaultWebSecurityManager(Realm realm){
        
            DefaultWebSecurityManager defaultWebSecurityManager = new DefaultWebSecurityManager();
            defaultWebSecurityManager.setRealm(realm);
            return defaultWebSecurityManager;
        }
        
        //3、自定义Realm
        @Bean
        @Primary
        public Realm getRealm(){
        
            return new CustomRealm();
        }
    
    }

###### 3.创建自定义realm ######

//自定义Realm
    public class CustomRealm extends AuthorizingRealm {
        
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        
            return null;
        }
    
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        
            return null;
        }
    }

###### 4.编写控制器跳转至index.html ######

@Controller
    public class IndexController {
        
        @RequestMapping("index")
        public String index(){
        
            System.out.println("跳转至主页");
            return "index";
        }
    }

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD_size_10_color_FFFFFF_t_70_g_se_x_16]

###### 5.启动springboot应用访问index ######

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD_size_13_color_FFFFFF_t_70_g_se_x_16]

*  注意:
    
     *  **默认在配置好shiro环境后默认环境中没有对项目中任何资源进行权限控制,所有现在项目中所有资源都可以通过路径访问**

###### 6.加入权限控制 ######

*  修改ShiroFilterFactoryBean配置
    
        //设置受限资源
        HashMap<String, String> map = new HashMap<>();
        map.put("/index.jsp","authc");//authc 请求这个资源，需要认证授权
        //map.put("/**","authc");
        shiroFilterFactoryBean.setFilterChainDefinitionMap(map);
        
        //默认认证界面路径
        shiroFilterFactoryBean.setLoginUrl("/login.jsp");
    
     *  **/\***\* 代表拦截项目中一切资源 **authc** 代表shiro中的一个filter的别名,详细内容看文档的shirofilter列表

###### 7.重启项目访问查看 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-TTrhbmSj-1630241787292)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829180452391.png)\]][img-TTrhbmSj-1630241787292_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829180452391.png]

#### 四、常见过滤器 ####

*  注意: **shiro提供和多个默认的过滤器，我们可以用这些过滤器来配置控制指定url的权限：**

<table> 
 <thead> 
  <tr> 
   <th>配置缩写</th> 
   <th>对应的过滤器</th> 
   <th>功能</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>anon</td> 
   <td>AnonymousFilter</td> 
   <td>指定url可以匿名访问</td> 
  </tr> 
  <tr> 
   <td>authc</td> 
   <td>FormAuthenticationFilter</td> 
   <td>指定url需要form表单登录，默认会从请求中获取<code>username</code>、<code>password</code>,<code>rememberMe</code>等参数并尝试登录，如果登录不了就会跳转到loginUrl配置的路径。我们也可以用这个过滤器做默认的登录逻辑，但是一般都是我们自己在控制器写登录逻辑的，自己写的话出错返回的信息都可以定制嘛。</td> 
  </tr> 
  <tr> 
   <td>authcBasic</td> 
   <td>BasicHttpAuthenticationFilter</td> 
   <td>指定url需要basic登录</td> 
  </tr> 
  <tr> 
   <td>logout</td> 
   <td>LogoutFilter</td> 
   <td>登出过滤器，配置指定url就可以实现退出功能，非常方便</td> 
  </tr> 
  <tr> 
   <td>noSessionCreation</td> 
   <td>NoSessionCreationFilter</td> 
   <td>禁止创建会话</td> 
  </tr> 
  <tr> 
   <td>perms</td> 
   <td>PermissionsAuthorizationFilter</td> 
   <td>需要指定权限才能访问</td> 
  </tr> 
  <tr> 
   <td>port</td> 
   <td>PortFilter</td> 
   <td>需要指定端口才能访问</td> 
  </tr> 
  <tr> 
   <td>rest</td> 
   <td>HttpMethodPermissionFilter</td> 
   <td>将http请求方法转化成相应的动词来构造一个权限字符串，这个感觉意义不大，有兴趣自己看源码的注释</td> 
  </tr> 
  <tr> 
   <td>roles</td> 
   <td>RolesAuthorizationFilter</td> 
   <td>需要指定角色才能访问</td> 
  </tr> 
  <tr> 
   <td>ssl</td> 
   <td>SslFilter</td> 
   <td>需要https请求才能访问</td> 
  </tr> 
  <tr> 
   <td>user</td> 
   <td>UserFilter</td> 
   <td>需要已登录或“记住我”的用户才能访问</td> 
  </tr> 
 </tbody> 
</table>

#### 五、认证实现 ####

###### 1. 在login.jsp中开发认证界面 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-XfHNIUlP-1630241787294)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829181631215.png)\]][img-XfHNIUlP-1630241787294_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181631215.png]

###### 2. 开发controller ######

@Controller
    @RequestMapping("user")
    public class UserController {
        
        /**
        * 用来处理身份认证
        * @param username
        * @param password
        * @return
        */
        @RequestMapping("login")
        public String login(String username,String password){
        
            //获取主体对象
            Subject subject = SecurityUtils.getSubject();
            try {
        
                subject.login(new UsernamePasswordToken(username,password));
                return  "redirect:/index.jsp";
            } catch (UnknownAccountException e) {
        
                e.printStackTrace();
                System.out.println("用户名错误!");
            }catch (IncorrectCredentialsException e){
        
                e.printStackTrace();
                System.out.println("密码错误!");
            }
            return "redirect:/login.jsp";
        }
    }

*  **在认证过程中使用subject.login进行认证**

###### 3.开发realm中返回静态数据(未连接数据库) ######

@Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        
            System.out.println("==========================");
            String principal = (String) token.getPrincipal();
            if("achang".equals(principal)){
        
                return new SimpleAuthenticationInfo(principal,"123456",this.getName());
            }
            return null;
        }
    }

###### 4.启动项目以realm中定义静态数据进行认证 ######

![在这里插入图片描述][watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD_size_9_color_FFFFFF_t_70_g_se_x_16]

*  **认证功能没有md5和随机盐的认证就实现啦**

#### 六、退出认证 ####

###### 1.开发页面退出连接 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-5HLfHhTs-1630241787299)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829181723072.png)\]][img-5HLfHhTs-1630241787299_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181723072.png]

###### 2.开发controller ######

@Controller
    @RequestMapping("user")
    public class UserController {
        
      /**
        * 退出登录
        *
        */
      @RequestMapping("logout")
      public String logout(){
        
        Subject subject = SecurityUtils.getSubject();
        subject.logout();//退出用户
        return "redirect:/login.jsp";
      }
    }

###### 3.修改退出连接访问退出路径 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-Z7MA9det-1630241787300)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829181737926.png)\]][img-Z7MA9det-1630241787300_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181737926.png]

###### 4.退出之后访问受限资源立即返回认证界面 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-MQ4Ot43R-1630241787301)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829181749338.png)\]][img-MQ4Ot43R-1630241787301_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181749338.png]

#### 七、MD5、Salt的认证实现 ####

##### 1.开发数据库注册 #####

###### 0.开发注册界面 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-yHOM1J1E-1630241787302)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829181809127.png)\]][img-yHOM1J1E-1630241787302_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181809127.png]

###### 1.创建数据表结构 ######

SET NAMES utf8mb4;
    SET FOREIGN_KEY_CHECKS = 0;
    -- ----------------------------
    -- Table structure for t_user
    -- ----------------------------
    DROP TABLE IF EXISTS `t_user`;
    CREATE TABLE `t_user` (
        `id` int(6) NOT NULL AUTO_INCREMENT,
        `username` varchar(40) DEFAULT NULL,
        `password` varchar(40) DEFAULT NULL,
        `salt` varchar(255) DEFAULT NULL,
        PRIMARY KEY (`id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
    
    SET FOREIGN_KEY_CHECKS = 1;

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-Ygo35HLo-1630241787303)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829181838550.png)\]][img-Ygo35HLo-1630241787303_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181838550.png]

###### 2.项目引入依赖 ######

<dependency>
        <groupId>org.mybatis.spring.boot</groupId>
        <artifactId>mybatis-spring-boot-starter</artifactId>
        <version>2.1.2</version>
    </dependency>
    
    
    <dependency>
        <groupId>mysql</groupId>
        <artifactId>mysql-connector-java</artifactId>
        <version>5.1.38</version>
    </dependency>
    
    
    <dependency>
        <groupId>com.alibaba</groupId>
        <artifactId>druid</artifactId>
        <version>1.1.19</version>
    </dependency>

###### 3.配置application.properties配置文件 ######

server.port=8888
    server.servlet.context-path=/shiro
    spring.application.name=shiro
    
    spring.mvc.view.prefix=/
    spring.mvc.view.suffix=.jsp
    #新增配置
    spring.datasource.type=com.alibaba.druid.pool.DruidDataSource
    spring.datasource.driver-class-name=com.mysql.jdbc.Driver
    spring.datasource.url=jdbc:mysql://localhost:3306/shiro?characterEncoding=UTF-8
    spring.datasource.username=root
    spring.datasource.password=root
    
    
    mybatis.type-aliases-package=com.achang.springboot_jsp_shiro.entity
    mybatis.mapper-locations=classpath:com/achang/mapper/*.xml

###### 4.创建entity ######

@Data
    @Accessors(chain = true)
    @AllArgsConstructor
    @NoArgsConstructor
    public class User {
        
        private String  id;
        private String username;
        private String password;
        private String salt;
    }

###### 5.创建DAO接口 ######

@Mapper
    public interface UserDAO {
        
        void save(User user);
    }

###### 6.开发mapper配置文件 ######

<insert id="save" parameterType="User" useGeneratedKeys="true" keyProperty="id">
      insert into t_user values(#{id},#{username},#{password},#{salt})
    </insert>

###### 7.开发service接口 ######

public interface UserService {
        
        //注册用户方法
        void register(User user);
    }

###### 8.创建salt工具类 ######

public class SaltUtils {
        
        /**
         * 生成salt的静态方法
         * @param n
         * @return
         */
        public static String getSalt(int n){
        
            char[] chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz01234567890!@#$%^&*()".toCharArray();
            StringBuilder sb = new StringBuilder();
            for (int i = 0; i < n; i++) {
        
                char aChar = chars[new Random().nextInt(chars.length)];
                sb.append(aChar);
            }
            return sb.toString();
        }
    }

###### 9.开发service实现类 ######

@Service
    @Transactional
    public class UserServiceImpl implements UserService {
        
    
        @Autowired
        private UserDAO userDAO;
    
        @Override
        public void register(User user) {
        
            //处理业务调用dao
            //1.生成随机盐
            String salt = SaltUtils.getSalt(8);
            //2.将随机盐保存到数据
            user.setSalt(salt);
            //3.明文密码进行md5 + salt + hash散列
            Md5Hash md5Hash = new Md5Hash(user.getPassword(),salt,1024);
            user.setPassword(md5Hash.toHex());
            userDAO.save(user);
        }
    }

###### 10.开发Controller ######

@Controller
    @RequestMapping("user")
    public class UserController {
        
    
        @Autowired
        private UserService userService;
    
        /**
         * 用户注册
         */
        @RequestMapping("register")
        public String register(User user) {
        
            try {
        
                userService.register(user);
                return "redirect:/login.jsp";
            }catch (Exception e){
        
                e.printStackTrace();
                return "redirect:/register.jsp";
            }
        }
    }

###### 11.启动项目进行注册 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-baGJKq4o-1630241787307)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829184802860.png)\]][img-baGJKq4o-1630241787307_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829184802860.png]

--------------------

##### 2.开发数据库认证 #####

###### 0.开发DAO ######

@Mapper
    public interface UserDAO {
        
    
        void save(User user);
    		//根据身份信息认证的方法
        User findByUserName(String username);
    }

###### 1.开发mapper配置文件 ######

<select id="findByUserName" parameterType="String" resultType="User">
      select id,username,password,salt from t_user
      where username = #{username}
    </select>

###### 2.开发Service接口 ######

public interface UserService {
        
        //注册用户方法
        void register(User user);
        //根据用户名查询业务的方法
        User findByUserName(String username);
    }

###### 3.开发Service实现类 ######

@Service("userService")
    @Transactional
    public class UserServiceImpl implements UserService {
        
        @Autowired
        private UserDAO userDAO;
        @Override
        public User findByUserName(String username) {
        
            return userDAO.findByUserName(username);
        }
    }

###### 4.开发在工厂中获取bean对象的工具类 ######

@Component
    public class ApplicationContextUtils implements ApplicationContextAware {
        
    
        private static ApplicationContext context;
    
        @Override
        public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
        
            this.context = applicationContext;
        }
    
    
        //根据bean名字获取工厂中指定bean 对象
        public static Object getBean(String beanName){
        
            return context.getBean(beanName);
        }
    }

###### 5.修改自定义realm ######

@Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        
            System.out.println("==========================");
    
            //根据身份信息
            String principal = (String) token.getPrincipal();
            //在工厂中获取service对象
            UserService userService = (UserService) ApplicationContextUtils.getBean("userService");
    				//根据身份信息查询
            User user = userService.findByUserName(principal);
    
            if(!ObjectUtils.isEmpty(user)){
        
                //返回数据库信息
                return new SimpleAuthenticationInfo(user.getUsername(),
                                                    user.getPassword(),
                                                    ByteSource.Util.bytes(user.getSalt()),
                                                    this.getName());
            }
            return null;
        }

###### 6.修改ShiroConfig中realm使用凭证匹配器以及hash散列 ######

@Bean
    public Realm getRealm(){
        
      CustomerRealm customerRealm = new CustomerRealm();
      //设置hashed凭证匹配器
      HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
      //设置md5加密
      credentialsMatcher.setHashAlgorithmName("MD5");
      //设置散列次数
      credentialsMatcher.setHashIterations(1024);
      customerRealm.setCredentialsMatcher(credentialsMatcher);
      return customerRealm;
    }

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-roAsWIgs-1630241787310)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829185550482.png)\]][img-roAsWIgs-1630241787310_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829185550482.png]

#### 八、授权实现 ####

###### 0.页面资源授权 ######

<%@taglib prefix="shiro" uri="http://shiro.apache.org/tags" %>
    
    <shiro:hasAnyRoles name="user,admin">
            <li><a href="">用户管理</a>
                <ul>
                    <shiro:hasPermission name="user:add:*">
                    <li><a href="">添加</a></li>
                    </shiro:hasPermission>
                    <shiro:hasPermission name="user:delete:*">
                        <li><a href="">删除</a></li>
                    </shiro:hasPermission>
                    <shiro:hasPermission name="user:update:*">
                        <li><a href="">修改</a></li>
                    </shiro:hasPermission>
                    <shiro:hasPermission name="user:find:*">
                        <li><a href="">查询</a></li>
                    </shiro:hasPermission>
                </ul>
            </li>
            </shiro:hasAnyRoles>
            <shiro:hasRole name="admin">
                <li><a href="">商品管理</a></li>
                <li><a href="">订单管理</a></li>
                <li><a href="">物流管理</a></li>
            </shiro:hasRole>

###### 1.代码方式授权 ######

@RequestMapping("save")
    public String save(){
        
      System.out.println("进入方法");
      //获取主体对象
      Subject subject = SecurityUtils.getSubject();
      //代码方式
      if (subject.hasRole("admin")) {
        
        System.out.println("保存订单!");
      }else{
        
        System.out.println("无权访问!");
      }
      //基于权限字符串
      //....
      return "redirect:/index.jsp";
    }

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-9GE9Ax7T-1630241787311)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829191431949.png)\]][img-9GE9Ax7T-1630241787311_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829191431949.png]

###### 2.方法调用授权 ######

*  @RequiresRoles 用来基于角色进行授权
 *  @RequiresPermissions 用来基于权限进行授权

@RequiresRoles(value={
        "admin","user"})//用来判断角色  同时具有 admin user
    @RequiresPermissions("user:update:01") //用来判断权限字符串
    @RequestMapping("save")
    public String save(){
        
      System.out.println("进入方法");
      return "redirect:/index.jsp";
    }

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-1NjOujnM-1630241787313)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829191538311.png)\]][img-1NjOujnM-1630241787313_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829191538311.png]

--------------------

###### 3.授权数据持久化 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-eWE4PmGa-1630241787314)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829191552362.png)\]][img-eWE4PmGa-1630241787314_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829191552362.png]

SET NAMES utf8mb4;
    SET FOREIGN_KEY_CHECKS = 0;
    
    -- ----------------------------
    -- Table structure for t_pers
    -- ----------------------------
    DROP TABLE IF EXISTS `t_pers`;
    CREATE TABLE `t_pers` (
        `id` int(6) NOT NULL AUTO_INCREMENT,
        `name` varchar(80) DEFAULT NULL,
        `url` varchar(255) DEFAULT NULL,
        PRIMARY KEY (`id`)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Table structure for t_role
    -- ----------------------------
    DROP TABLE IF EXISTS `t_role`;
    CREATE TABLE `t_role` (
        `id` int(6) NOT NULL AUTO_INCREMENT,
        `name` varchar(60) DEFAULT NULL,
        PRIMARY KEY (`id`)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Table structure for t_role_perms
    -- ----------------------------
    DROP TABLE IF EXISTS `t_role_perms`;
    CREATE TABLE `t_role_perms` (
        `id` int(6) NOT NULL,
        `roleid` int(6) DEFAULT NULL,
        `permsid` int(6) DEFAULT NULL,
        PRIMARY KEY (`id`)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Table structure for t_user
    -- ----------------------------
    DROP TABLE IF EXISTS `t_user`;
    CREATE TABLE `t_user` (
        `id` int(6) NOT NULL AUTO_INCREMENT,
        `username` varchar(40) DEFAULT NULL,
        `password` varchar(40) DEFAULT NULL,
        `salt` varchar(255) DEFAULT NULL,
        PRIMARY KEY (`id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Table structure for t_user_role
    -- ----------------------------
    DROP TABLE IF EXISTS `t_user_role`;
    CREATE TABLE `t_user_role` (
        `id` int(6) NOT NULL,
        `userid` int(6) DEFAULT NULL,
        `roleid` int(6) DEFAULT NULL,
        PRIMARY KEY (`id`)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
    
    SET FOREIGN_KEY_CHECKS = 1;

--------------------

###### 4.创建dao方法 ######

//根据用户名查询所有角色
    User findRolesByUserName(String username);
    //根据角色id查询权限集合
    List<Perms> findPermsByRoleId(String id);

###### 5.mapper实现 ######

<resultMap id="userMap" type="User">
          <id column="uid" property="id"/>
          <result column="username" property="username"/>
          
          <collection property="roles" javaType="list" ofType="Role">
            <id column="id" property="id"/>
            <result column="rname" property="name"/>
          </collection>
        </resultMap>
    
        <select id="findRolesByUserName" parameterType="String" resultMap="userMap">
          SELECT u.id uid,u.username,r.id,r.NAME rname
          FROM t_user u
          LEFT JOIN t_user_role ur
          ON u.id=ur.userid
          LEFT JOIN t_role r
          ON ur.roleid=r.id
          WHERE u.username=#{username}
        </select>
    
        <select id="findPermsByRoleId" parameterType="String" resultType="Perms">
          SELECT p.id,p.NAME,p.url,r.NAME
          FROM t_role r
          LEFT JOIN t_role_perms rp
          ON r.id=rp.roleid
          LEFT JOIN t_perms p ON rp.permsid=p.id
          WHERE r.id=#{id}
        </select>

###### 6.Service接口 ######

//根据用户名查询所有角色
    User findRolesByUserName(String username);
    //根据角色id查询权限集合
    List<Perms> findPermsByRoleId(String id);

###### 7.Service实现 ######

@Override
    public List<Perms> findPermsByRoleId(String id) {
        
      return userDAO.findPermsByRoleId(id);
    }
    
    @Override
    public User findRolesByUserName(String username) {
        
      return userDAO.findRolesByUserName(username);
    }

###### 8.修改自定义realm ######

public class CustomerRealm extends AuthorizingRealm {
        
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        
            //获取身份信息
            String primaryPrincipal = (String) principals.getPrimaryPrincipal();
            System.out.println("调用授权验证: "+primaryPrincipal);
            //根据主身份信息获取角色 和 权限信息
            UserService userService = (UserService) ApplicationContextUtils.getBean("userService");
            User user = userService.findRolesByUserName(primaryPrincipal);
            //授权角色信息
            if(!CollectionUtils.isEmpty(user.getRoles())){
        
                SimpleAuthorizationInfo simpleAuthorizationInfo = new SimpleAuthorizationInfo();
                user.getRoles().forEach(role->{
        
                    simpleAuthorizationInfo.addRole(role.getName());
                    //权限信息
                    List<Perms> perms = userService.findPermsByRoleId(role.getId());
                    if(!CollectionUtils.isEmpty(perms)){
        
                        perms.forEach(perm->{
        
                            simpleAuthorizationInfo.addStringPermission(perm.getName());
                        });
                    }
                });
                return simpleAuthorizationInfo;
            }
            return null;
        }
    }

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-5TazQnjR-1630241787316)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829193107912.png)\]][img-5TazQnjR-1630241787316_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829193107912.png]

###### 9.启动测试 ######

#### 九、使用CacheManager ####

##### 1.Cache 作用 #####

*  Cache 缓存: **计算机内存中一段数据**
 *  作用: **用来减轻DB的访问压力,从而提高系统的查询效率**
 *  流程:

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-WGDp0tmU-1630241787317)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829201933978.png)\]][img-WGDp0tmU-1630241787317_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829201933978.png]

##### 2.使用shiro中默认EhCache实现缓存 #####

本地缓存

###### ①引入依赖 ######

<dependency>
      <groupId>org.apache.shiro</groupId>
      <artifactId>shiro-ehcache</artifactId>
      
      <version>1.5.3</version>
    </dependency>

###### ②开启缓存 ######

//3.创建自定义realm
        @Bean
        public Realm getRealm(){
        
            CustomerRealm customerRealm = new CustomerRealm();
            //修改凭证校验匹配器
            HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
            //设置加密算法为md5
            credentialsMatcher.setHashAlgorithmName("MD5");
            //设置散列次数
            credentialsMatcher.setHashIterations(1024);
            customerRealm.setCredentialsMatcher(credentialsMatcher);
    
            //开启缓存管理器
            customerRealm.setCachingEnabled(true);//开启全局缓存
            customerRealm.setAuthenticationCacheingEnabled(true);//开启认证缓存
            customerRealm.setAuthorizationCachingEnabled(true);//开启授权缓存
            customerRealm.setCacheManager(new EhCacheManager());
            
            return customerRealm;
        }

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-h1MuhvmD-1630241787319)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829201947448.png)\]][img-h1MuhvmD-1630241787319_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829201947448.png]

###### ③启动刷新页面进行测试 ######

*  注意:如果控制台没有任何sql展示说明缓存已经开启

--------------------

##### 3.shiro中使用Redis作为缓存实现 #####

###### ①引入redis依赖 ######

<dependency>
      <groupId>org.springframework.boot</groupId>
      <artifactId>spring-boot-starter-data-redis</artifactId>
    </dependency>

###### ②配置redis连接 ######

spring.redis.port=6379
    spring.redis.host=localhost
    spring.redis.database=0

###### 3.启动redis服务 ######

➜  bin ls
    dump.rdb        redis-check-aof redis-cli       redis-server    redis.conf
    redis-benchmark redis-check-rdb redis-sentinel  redis-trib.rb
    ➜  bin ./redis-server redis.conf

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-56jS39G6-1630241787320)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829202002646.png)\]][img-56jS39G6-1630241787320_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829202002646.png]

###### 4.开发RedisCacheManager ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-c1Rbaxmz-1630241787322)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829204829243.png)\]][img-c1Rbaxmz-1630241787322_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829204829243.png]

public class RedisCacheManager implements CacheManager {
        
        @Override
        public <K, V> Cache<K, V> getCache(String cacheName) throws CacheException {
        
            System.out.println("缓存名称: "+cacheName);
            return new RedisCache<K,V>(cacheName);
        }
    }

###### 5.开RedisCache实现 ######

public class RedisCache<K,V> implements Cache<K,V> {
        
    
        private String cacheName;
    
        public RedisCache() {
        
        }
    
        public RedisCache(String cacheName) {
        
            this.cacheName = cacheName;
        }
    
        @Override
        public V get(K k) throws CacheException {
        
            System.out.println("获取缓存:"+ k);
            return (V) getRedisTemplate().opsForHash().get(this.cacheName,k.toString());
        }
    
        @Override
        public V put(K k, V v) throws CacheException {
        
            System.out.println("设置缓存key: "+k+" value:"+v);
            getRedisTemplate().opsForHash().put(this.cacheName,k.toString(),v);
            return null;
        }
    
        @Override
        public V remove(K k) throws CacheException {
        
            return (V) getRedisTemplate().opsForHash().delete(this.cacheName,k.toString());
        }
    
        @Override
        public v remove(k k) throws CacheException {
        
            return (v) getRedisTemplate().opsForHash().delete(this.cacheName,k.toString());
        }
    
        @Override
        public void clear() throws CacheException {
        
            getRedisTemplate().delete(this.cacheName);
        }
    
        @Override
        public int size() {
        
            return getRedisTemplate().opsForHash().size(this.cacheName).intValue();
        }
    
        @Override
        public Set<k> keys() {
        
            return getRedisTemplate().opsForHash().keys(this.cacheName);
        }
    
        @Override
        public Collection<v> values() {
        
            return getRedisTemplate().opsForHash().values(this.cacheName);
        }
    
        private RedisTemplate getRedisTemplate(){
        
            RedisTemplate redisTemplate = (RedisTemplate) ApplicationContextUtils.getBean("redisTemplate");
            redisTemplate.setKeySerializer(new StringRedisSerializer());
            redisTemplate.setHashKeySerializer(new StringRedisSerializer());
            return redisTemplate;
        }
    
    
        //封装获取redisTemplate
        private RedisTemplate getRedisTemplate(){
        
            RedisTemplate redisTemplate = (RedisTemplate) ApplicationContextUtils.getBean("redisTemplate");
            redisTemplate.setKeySerializer(new StringRedisSerializer());
            redisTemplate.setHashKeySerializer(new StringRedisSerializer());
            return redisTemplate;
        }
    }

###### 6.启动项目测试发现报错 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-185WwvIG-1630241787324)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829203814530.png)\]][img-185WwvIG-1630241787324_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829203814530.png]

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-FHB6oCCy-1630241787325)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829203830614.png)\]][img-FHB6oCCy-1630241787325_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829203830614.png]

*  错误解释: **由于shiro中提供的simpleByteSource实现没有实现序列化,所有在认证时出现错误信息**
 *  解决方案: **需要自动salt实现序列化**
    
     *  自定义salt实现序列化
        
            //自定义salt实现  实现序列化接口
            public class MyByteSource extends SimpleByteSource implements Serializable {
                    
                public MyByteSource(String string) {
                    
                    super(string);
                }
            }
     *  在realm中使用自定义salt
        
            @Override
            protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
                    
              System.out.println("==========================");
              //根据身份信息
              String principal = (String) token.getPrincipal();
              //在工厂中获取service对象
              UserService userService = (UserService) ApplicationContextUtils.getBean("userService");
              User user = userService.findByUserName(principal);
              if(!ObjectUtils.isEmpty(user)){
                    
                return new SimpleAuthenticationInfo(user.getUsername(),user.getPassword(), 
                                                  new MyByteSource(user.getSalt()),this.getName());
              }
              return null;
            }
        
        ![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-CryA0cnE-1630241787327)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829203955716.png)\]][img-CryA0cnE-1630241787327_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829203955716.png]

###### 7.再次启动测试,发现可以成功放入redis缓存 ######

![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-fwcd5N9R-1630241787328)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829204004723.png)\]][img-fwcd5N9R-1630241787328_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829204004723.png]

--------------------

##### 4. 加入验证码验证 #####

###### 0.开发页面加入验证码 ######

*  开发控制器
    
        @RequestMapping("getImage")
        public void getImage(HttpSession session, HttpServletResponse response) throws IOException {
              
          //生成验证码
          String code = VerifyCodeUtils.generateVerifyCode(4);
          //验证码放入session
          session.setAttribute("code",code);
          //验证码存入图片
          ServletOutputStream os = response.getOutputStream();
          response.setContentType("image/png");
          VerifyCodeUtils.outputImage(220,60,os,code);
        }
 *  放行验证码
    
    ![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-S3cdPJXH-1630241787330)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829205225523.png)\]][img-S3cdPJXH-1630241787330_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829205225523.png]
 *  开发页面
    
    ![\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-GkaAwMF7-1630241787331)(C:/Users/PePe/AppData/Roaming/Typora/typora-user-images/image-20210829205232784.png)\]][img-GkaAwMF7-1630241787331_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829205232784.png]
 *  修改认证流程
    
        @RequestMapping("login")
            public String login(String username, String password,String code,HttpSession session) {
              
                //比较验证码
                String codes = (String) session.getAttribute("code");
                try {
              
                    if (codes.equalsIgnoreCase(code)){
              
                        //获取主体对象
                        Subject subject = SecurityUtils.getSubject();
                            subject.login(new UsernamePasswordToken(username, password));
                            return "redirect:/index.jsp";
                    }else{
              
                        throw new RuntimeException("验证码错误!");
                    }
                } catch (UnknownAccountException e) {
              
                    e.printStackTrace();
                    System.out.println("用户名错误!");
                } catch (IncorrectCredentialsException e) {
              
                    e.printStackTrace();
                    System.out.println("密码错误!");
                }catch (Exception e){
              
                    e.printStackTrace();
                    System.out.println(e.getMessage());
                }
                return "redirect:/login.jsp";
            }
 *  **修改salt不能序列化的问题**
    
        //自定义salt实现  实现序列化接口
        public class MyByteSource implements ByteSource,Serializable {
              
        
            private  byte[] bytes;
            private String cachedHex;
            private String cachedBase64;
        
            //加入无参数构造方法实现序列化和反序列化
            public MyByteSource(){
              
        
            }
        
            public MyByteSource(byte[] bytes) {
              
                this.bytes = bytes;
            }
        
            public MyByteSource(char[] chars) {
              
                this.bytes = CodecSupport.toBytes(chars);
            }
        
            public MyByteSource(String string) {
              
                this.bytes = CodecSupport.toBytes(string);
            }
        
            public MyByteSource(ByteSource source) {
              
                this.bytes = source.getBytes();
            }
        
            public MyByteSource(File file) {
              
                this.bytes = (new MyByteSource.BytesHelper()).getBytes(file);
            }
        
            public MyByteSource(InputStream stream) {
              
                this.bytes = (new MyByteSource.BytesHelper()).getBytes(stream);
            }
        
            public static boolean isCompatible(Object o) {
              
                return o instanceof byte[] || o instanceof char[] || o instanceof String || o instanceof ByteSource || o instanceof File || o instanceof InputStream;
            }
        
            public byte[] getBytes() {
              
                return this.bytes;
            }
        
            public boolean isEmpty() {
              
                return this.bytes == null || this.bytes.length == 0;
            }
        
            public String toHex() {
              
                if (this.cachedHex == null) {
              
                    this.cachedHex = Hex.encodeToString(this.getBytes());
                }
        
                return this.cachedHex;
            }
        
            public String toBase64() {
              
                if (this.cachedBase64 == null) {
              
                    this.cachedBase64 = Base64.encodeToString(this.getBytes());
                }
        
                return this.cachedBase64;
            }
        
            public String toString() {
              
                return this.toBase64();
            }
        
            public int hashCode() {
              
                return this.bytes != null && this.bytes.length != 0 ? Arrays.hashCode(this.bytes) : 0;
            }
        
            public boolean equals(Object o) {
              
                if (o == this) {
              
                    return true;
                } else if (o instanceof ByteSource) {
              
                    ByteSource bs = (ByteSource)o;
                    return Arrays.equals(this.getBytes(), bs.getBytes());
                } else {
              
                    return false;
                }
            }
        
            private static final class BytesHelper extends CodecSupport {
              
                private BytesHelper() {
              
                }
        
                public byte[] getBytes(File file) {
              
                    return this.toBytes(file);
                }
        
                public byte[] getBytes(InputStream stream) {
              
                    return this.toBytes(stream);
                }
            }
        }

[Shiro]: https://so.csdn.net/so/search?q=Shiro&spm=1001.2101.3001.7020
[img-OKEnv9Pu-1630241787266_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829162154359.png]: https://img-blog.csdnimg.cn/88617c8d04b1461c9848ebcc1aa16230.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_20,color_FFFFFF,t_70,g_se,x_16
[img-xHJzSeVC-1630241787271_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829170548416.png]: https://img-blog.csdnimg.cn/067034cb336a48cc9f26145e58c95cf0.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_19,color_FFFFFF,t_70,g_se,x_16
[img-wYo4go1P-1630241787275_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829172104103.png]: https://img-blog.csdnimg.cn/1d563b65fa894d0c9038eff5369acf3b.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_9,color_FFFFFF,t_70,g_se,x_16
[img-ghTCyVsR-1630241787278_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829180133236.png]: https://img-blog.csdnimg.cn/64f8f2146ca04fb4a56fd45a93b6d736.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD_size_10_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/523aa181f4c0451fbe3ae62724b25dbb.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_10,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD_size_13_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/1e7d1234af5d45278f3fcb5f33bc3c8d.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_13,color_FFFFFF,t_70,g_se,x_16
[img-TTrhbmSj-1630241787292_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829180452391.png]: https://img-blog.csdnimg.cn/e166912a383b46a49d992c9458a96813.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_13,color_FFFFFF,t_70,g_se,x_16
[img-XfHNIUlP-1630241787294_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181631215.png]: https://img-blog.csdnimg.cn/097be94931e2498e8f3a3c9cbc2b56db.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD_size_9_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/f29f74d3674c424494479fa42470645b.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_9,color_FFFFFF,t_70,g_se,x_16
[img-5HLfHhTs-1630241787299_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181723072.png]: https://img-blog.csdnimg.cn/8fca53c1cdbe4548805f4f79cc95aaa0.png
[img-Z7MA9det-1630241787300_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181737926.png]: https://img-blog.csdnimg.cn/bce0d0f953924b6cb7b212c49df29682.png
[img-MQ4Ot43R-1630241787301_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181749338.png]: https://img-blog.csdnimg.cn/1c7cec864ecc4eccad13bb9f385412c6.png
[img-yHOM1J1E-1630241787302_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181809127.png]: https://img-blog.csdnimg.cn/5cf1e1bb98e444bfb18fd431cbf6ab97.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_10,color_FFFFFF,t_70,g_se,x_16
[img-Ygo35HLo-1630241787303_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829181838550.png]: https://img-blog.csdnimg.cn/0c16e408625e417a89fd276c1840a255.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_19,color_FFFFFF,t_70,g_se,x_16
[img-baGJKq4o-1630241787307_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829184802860.png]: https://img-blog.csdnimg.cn/7b1c2e1edf2d438bbfb9b21d2dcdbaf6.png
[img-roAsWIgs-1630241787310_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829185550482.png]: https://img-blog.csdnimg.cn/40145be216eb46b5a3ff45ded890f8d4.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_18,color_FFFFFF,t_70,g_se,x_16
[img-9GE9Ax7T-1630241787311_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829191431949.png]: https://img-blog.csdnimg.cn/3e34f0a9010c428382772789fd6c605e.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_10,color_FFFFFF,t_70,g_se,x_16
[img-1NjOujnM-1630241787313_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829191538311.png]: https://img-blog.csdnimg.cn/f217cc2cdc4a468d951ba41adc55baaf.png
[img-eWE4PmGa-1630241787314_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829191552362.png]: https://img-blog.csdnimg.cn/ad22ec23649d4384b5219ff6334aa488.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_14,color_FFFFFF,t_70,g_se,x_16
[img-5TazQnjR-1630241787316_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829193107912.png]: https://img-blog.csdnimg.cn/7cf86965c6244f848f5846d306d7e3b7.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_19,color_FFFFFF,t_70,g_se,x_16
[img-WGDp0tmU-1630241787317_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829201933978.png]: https://img-blog.csdnimg.cn/11bef5681fd140bea0b9192bac790fe4.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_14,color_FFFFFF,t_70,g_se,x_16
[img-h1MuhvmD-1630241787319_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829201947448.png]: https://img-blog.csdnimg.cn/d220dc19fa21463393cd548656866494.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_18,color_FFFFFF,t_70,g_se,x_16
[img-56jS39G6-1630241787320_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829202002646.png]: https://img-blog.csdnimg.cn/cb59316b502b436883b9b0a4d166575f.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_19,color_FFFFFF,t_70,g_se,x_16
[img-c1Rbaxmz-1630241787322_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829204829243.png]: https://img-blog.csdnimg.cn/a5565ac0a5084cb9bce39d4d9d98784a.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_13,color_FFFFFF,t_70,g_se,x_16
[img-185WwvIG-1630241787324_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829203814530.png]: https://img-blog.csdnimg.cn/ab3297a33a08424aac7eccb5817eb242.png
[img-FHB6oCCy-1630241787325_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829203830614.png]: https://img-blog.csdnimg.cn/a527d81c71b848c3a0b3744ce0c0845c.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_19,color_FFFFFF,t_70,g_se,x_16
[img-CryA0cnE-1630241787327_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829203955716.png]: https://img-blog.csdnimg.cn/c222e7a4510f485081fa54fa512eeea3.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_18,color_FFFFFF,t_70,g_se,x_16
[img-fwcd5N9R-1630241787328_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829204004723.png]: https://img-blog.csdnimg.cn/d388ddfaf1f2483e91be4302d79d5e9c.png
[img-S3cdPJXH-1630241787330_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829205225523.png]: https://img-blog.csdnimg.cn/3522da45ca8040d8a9b877b6a896d414.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA6Zi_5piM5Zac5qyi5ZCD6buE5qGD,size_18,color_FFFFFF,t_70,g_se,x_16
[img-GkaAwMF7-1630241787331_C_Users_PePe_AppData_Roaming_Typora_typora-user-images_image-20210829205232784.png]: https://img-blog.csdnimg.cn/0141ca25adfd4d548bb8f72f10152c3c.png