一篇文章理解Shiro

我不是女神ヾ 2024-03-27 13:59 70阅读 0赞

## 一篇文章理解Shiro ##

### 简介 ###

是一款主流的 Java 安全框架，不依赖任何容器，可以运行在 Java SE  
和 Java EE 项目中，它的主要作用是对访问系统的用户进行身份认证、  
授权、会话管理、加密等操作。

Shiro 就是用来解决安全管理的系统化框架。

这里是[shiro官网][shiro]，详情看官网操作

### 安装下载 ###

点击download进行下载

![在这里插入图片描述][2d9ee26a1e1c4b3aa0332393a83a9adc.png]  
点击这里

![在这里插入图片描述][61bcc67d998e4c78aaaaf6620ac9b7d2.png]

前往这个github官网进行下载

![在这里插入图片描述][e54a6af852844cc0a6a3ac538d82e97e.png]

### 核心组件讲解 ###

shiro主要由这三个部分组成

用户、角色、权限

会给角色赋予权限，给用户赋予角色

1、UsernamePasswordToken，Shiro 用来封装用户登录信息，使用用户的登录信息来创建令牌 Token。

2、SecurityManager，Shiro 的核心部分，负责安全认证和授权。

3、Suject，Shiro 的一个抽象概念，包含了用户信息。

4、Realm，开发者自定义的模块，根据项目的需求，验证和授权的逻辑全部写在 Realm 中。

5、AuthenticationInfo，用户的角色信息集合，认证时使用。

6、AuthorzationInfo，角色的权限信息集合，授权时使用。

7、DefaultWebSecurityManager，安全管理器，开发者自定义的 Realm 需要注入到 DefaultWebSecurityManager 进行管理才能生效。

8、ShiroFilterFactoryBean，过滤器工厂，Shiro 的基本运行机制是开发者定制规则，Shiro 去执行，具体的执行操作就是由 ShiroFilterFactoryBean 创建的一个个 Filter 对象来完成。

### 代码演示 ###

#### 创建项目 ####

![在这里插入图片描述][9591ce58f6ce4a9db12eb6a481635666.png]  
![在这里插入图片描述][57e9885db6804cbbba17eb39f4ba87f4.png]

搜索shiro依赖  
![在这里插入图片描述][b9ecf64482094b0098d94107ba25b846.png]

一般选择最新版

![在这里插入图片描述][eff3aabb98f547ab9762910951d2c2d6.png]  
![在这里插入图片描述][cac9702d89bb429e9c02da2f3c896108.png]  
![在这里插入图片描述][fbd605b538204b0a988d633f44534293.png]

#### pom.xml ####

<?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
        <modelVersion>4.0.0</modelVersion>
        <parent>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-parent</artifactId>
            <version>2.7.8</version>
            <relativePath/> 
        </parent>
        <groupId>com.example</groupId>
        <artifactId>shiroDemo</artifactId>
        <version>0.0.1-SNAPSHOT</version>
        <name>shiroDemo</name>
        <description>shiroDemo</description>
        <properties>
            <java.version>1.8</java.version>
        </properties>
        <dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-thymeleaf</artifactId>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-web</artifactId>
            </dependency>
            <dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-spring</artifactId>
                <version>1.11.0</version>
            </dependency>
    
    
            <dependency>
                <groupId>com.baomidou</groupId>
                <artifactId>mybatis-plus-boot-starter</artifactId>
                <version>3.3.1.tmp</version>
            </dependency>
            <dependency>
                <groupId>org.mybatis.spring.boot</groupId>
                <artifactId>mybatis-spring-boot-starter</artifactId>
                <version>2.3.0</version>
            </dependency>
    
            <dependency>
                <groupId>com.mysql</groupId>
                <artifactId>mysql-connector-j</artifactId>
                <scope>runtime</scope>
            </dependency>
            <dependency>
                <groupId>org.projectlombok</groupId>
                <artifactId>lombok</artifactId>
                <optional>true</optional>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-test</artifactId>
                <scope>test</scope>
            </dependency>
        </dependencies>
    
        <build>
            <plugins>
                <plugin>
                    <groupId>org.springframework.boot</groupId>
                    <artifactId>spring-boot-maven-plugin</artifactId>
                    <configuration>
                        <excludes>
                            <exclude>
                                <groupId>org.projectlombok</groupId>
                                <artifactId>lombok</artifactId>
                            </exclude>
                        </excludes>
                    </configuration>
                </plugin>
            </plugins>
        </build>
    
    </project>

#### 自定义过滤器 ####

##### \* 数据库建表语句 #####

-- MySQL dump 10.13  Distrib 8.0.19, for Win64 (x86_64)
    --
    -- Host: 127.0.0.1    Database: test
    -- ------------------------------------------------------
    -- Server version	8.0.19
    
    /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
    /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
    /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
    /*!50503 SET NAMES utf8mb4 */;
    /*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
    /*!40103 SET TIME_ZONE='+00:00' */;
    /*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
    /*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
    /*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
    /*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;
    
    --
    -- Table structure for table `account`
    --
    
    DROP TABLE IF EXISTS `account`;
    /*!40101 SET @saved_cs_client     = @@character_set_client */;
    /*!50503 SET character_set_client = utf8mb4 */;
    CREATE TABLE `account` (
      `id` int NOT NULL AUTO_INCREMENT,
      `username` varchar(20) DEFAULT NULL,
      `password` varchar(20) DEFAULT NULL,
      `perms` varchar(20) DEFAULT NULL,
      `role` varchar(20) DEFAULT NULL,
      PRIMARY KEY (`id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=4 DEFAULT CHARSET=utf8;
    /*!40101 SET character_set_client = @saved_cs_client */;
    
    --
    -- Dumping data for table `account`
    --
    
    LOCK TABLES `account` WRITE;
    /*!40000 ALTER TABLE `account` DISABLE KEYS */;
    INSERT INTO `account` VALUES (1,'zs','123123','',''),(2,'ls','123123','manage','administrator'),(3,'ww','123123','','');
    /*!40000 ALTER TABLE `account` ENABLE KEYS */;
    UNLOCK TABLES;
    /*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */;
    
    /*!40101 SET SQL_MODE=@OLD_SQL_MODE */;
    /*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */;
    /*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */;
    /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
    /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
    /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
    /*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;
    
    -- Dump completed on 2020-06-04 14:10:15

创建好了之后的样子  
perms是职位，role是角色  
![在这里插入图片描述][e72df333e1f44f3a893dc5aacb133fbb.png]

*  配置数据库参数  
    application.yml

spring:
      datasource:
        driver-class-name: com.mysql.cj.jdbc.Driver
        username: root
        password: 123456
        url: jdbc:mysql://localhost:3306/projectdatabase?serverTimezone=UTC
      thymeleaf:
        prefix: classpath:/templates/
        suffix: .html
    mybatis-plus:
      configuration:
        log-impl: org.apache.ibatis.logging.stdout.StdOutImpl

##### 创建Account,AccountService与测试 #####

*  创建Account类  
    ![在这里插入图片描述][accca828d04d46b4b3c9e27df3dad3d8.png]

package com.example.shirodemo.Bean;
    
    import lombok.Data;
    
    @Data
    public class Account {
        
        private Integer id;
        private String username;
        private String password;
        private String perms;
        private String role;
    }

创建AccountMapper  
![在这里插入图片描述][aa545d6b7033423397f82d39f917f2de.png]  
完整代码

package com.example.shirodemo.mapper;
    
    import com.baomidou.mybatisplus.core.mapper.BaseMapper;
    import com.example.shirodemo.Bean.Account;
    import org.springframework.stereotype.Repository;
    
    @Repository
    public interface AccountMapper extends BaseMapper<Account> {
        
    }

编写测试类  
![在这里插入图片描述][6c96a394148841bd8a11e4fd2777aae6.png]  
对于启动类设置进行扫包

![在这里插入图片描述][60eb6cd059384f1b874a2d92c03ac928.png]  
测试成功  
![在这里插入图片描述][77c233a1af8b4b29a1c5cfc39b5bcdc9.png]

*  编写AccountService接口  
    ![在这里插入图片描述][384d9d60f36c4e1bb364d72af478ec7f.png]
 *  创建测试类，测试AccountService

![在这里插入图片描述][6e584d50183c42a4bc16ca2ee4e7561d.png]  
![在这里插入图片描述][f2019eb7767b46c595ed1a9a530dc4f3.png]  
完整代码

package com.example.shirodemo.service;
    
    import org.junit.jupiter.api.Test;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.boot.test.context.SpringBootTest;
    
    @SpringBootTest
    class AccountServiceTest {
        
    
        @Autowired
        private AccountService accountService;
        @Test
        void findByUsername() {
        
            System.out.println(accountService.findByUsername("ls"));
        }
    }

测试结果  
![在这里插入图片描述][f1b7eb3005f54aaca38ffd2187b46f3b.png]

##### 编写AccountRealm #####

项目结构  
![在这里插入图片描述][ecf4260fb6754b5c945c359672e65057.png]

*  AccountRealm

package com.example.shirodemo.realm;
    
    import com.example.shirodemo.Bean.Account;
    import com.example.shirodemo.service.AccountService;
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.*;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.authz.SimpleAuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import org.apache.shiro.subject.Subject;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.stereotype.Component;
    
    import java.util.HashSet;
    import java.util.Set;
    
    
    public class AccountRealm extends AuthorizingRealm {
        
        @Autowired
        private AccountService accountService;
        /**
         * 授权
         * @param principalCollection
         * @return
         */
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
        
            //获取当前登录的用户信息
            Subject subject = SecurityUtils.getSubject();
            Account account = (Account) subject.getPrincipal();
    
            //设置角色
            Set<String> roles = new HashSet<>();
            roles.add(account.getRole());
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(roles);
    
            //设置权限
            info.addStringPermission(account.getPerms());
            return info;
        }
    
        /**
         * 认证
         * @param authenticationToken
         * @return
         * @throws AuthenticationException
         */
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
        
            // 首先是外部的页面把用户的账号和密码这些信息传递到这个token里面
            UsernamePasswordToken token = (UsernamePasswordToken) authenticationToken;
    
            Account account = accountService.findByUsername(token.getUsername());
    
            // 先判断一下这个account对象是否为空
            if (account != null){
        
                // 如果不为空 再验证账号和密码
                // 这个SimpleAuthenticationInfo会自行帮忙验证的
                return new SimpleAuthenticationInfo(account, account.getPassword(), getName());
            }
            // 如果为空直接返回null
            return null;
        }
    }

##### 编写shiroConfig #####

文件结构  
![在这里插入图片描述][08afb9e6a78641b98a41d1770ca86bd1.png]

shiroConfig

package com.example.shirodemo.config;
    
    import com.example.shirodemo.realm.AccountRealm;
    import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    @Configuration
    public class shiroConfig{
        
    
        @Bean
        public ShiroFilterFactoryBean shiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager){
        
            ShiroFilterFactoryBean factoryBean = new ShiroFilterFactoryBean();
            factoryBean.setSecurityManager(securityManager);
            return factoryBean;
        }
    
    
        @Bean
        public DefaultWebSecurityManager securityManager(@Qualifier("accountRealm") AccountRealm accoutRealm){
        
            DefaultWebSecurityManager manager = new DefaultWebSecurityManager();
            manager.setRealm(accoutRealm);
            return manager;
        }
    
        @Bean
        public AccountRealm accountRealm(){
        
            return new AccountRealm();
        }
    }

##### 编写演示认证与授权过滤器 #####

重新设置一下数据库，设置成这个样子

![在这里插入图片描述][eb0527a5e7bf4ff9a77a5ee7f7d3720a.png]

编写认证和授权规则：

> 认证过滤器

anon：无需认证。

authc：必须认证。

authcBasic：需要通过 HTTPBasic 认证。

user：不一定通过认证，只要曾经被 Shiro 记录即可，比如：记住我。

> 授权过滤器

perms：必须拥有某个权限才能访问。

role：必须拥有某个角色才能访问。

port：请求的端口必须是指定值才可以。

rest：请求必须基于 RESTful，POST、PUT、GET、DELETE。

ssl：必须是安全的 URL 请求，协议 HTTPS。

创建 3 个页面，main.html、manage.html、administrator.html

访问权限如下：

1、必须登录才能访问 main.html

2、当前用户必须拥有 manage 授权才能访问 manage.html

3、当前用户必须拥有 administrator 角色才能访问 administrator.html

shiroConfig

package com.example.shirodemo.config;
    
    import com.example.shirodemo.realm.AccountRealm;
    import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    import java.util.HashMap;
    import java.util.Hashtable;
    import java.util.Map;
    
    @Configuration
    public class shiroConfig{
        
    
        @Bean
        public ShiroFilterFactoryBean shiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager){
        
            ShiroFilterFactoryBean factoryBean = new ShiroFilterFactoryBean();
            factoryBean.setSecurityManager(securityManager);
            // 权限设置
            Map<String, String> map = new HashMap<>();
            map.put("/main", "authc"); // 设置进入main.html必须认证
            map.put("/manage", "perms[manage]"); // 设置进入manage.html需要manage权限
            map.put("/administrator", "roles[administrator]"); // 设置只有administator角色才可以进入administator.html
            factoryBean.setFilterChainDefinitionMap(map);
            return factoryBean;
        }
    
    
        @Bean
        public DefaultWebSecurityManager securityManager(@Qualifier("accountRealm") AccountRealm accoutRealm){
        
            DefaultWebSecurityManager manager = new DefaultWebSecurityManager();
            manager.setRealm(accoutRealm);
            return manager;
        }
    
        @Bean
        public AccountRealm accountRealm(){
        
            return new AccountRealm();
        }
    }

配置指向器  
![在这里插入图片描述][67417ebf3e67438899aed0727dadd7df.png]  
完整代码

package com.southwind.controller;
    
    import com.southwind.entity.Account;
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.*;
    import org.apache.shiro.subject.Subject;
    import org.springframework.stereotype.Controller;
    import org.springframework.ui.Model;
    import org.springframework.web.bind.annotation.GetMapping;
    import org.springframework.web.bind.annotation.PathVariable;
    import org.springframework.web.bind.annotation.PostMapping;
    import org.springframework.web.bind.annotation.ResponseBody;
    
    @Controller
    public class AccountController {
        
    
        @GetMapping("/{url}")
        public String redirect(@PathVariable("url") String url){
        
            return url;
        }
    
        @PostMapping("/login")
        public String login(String username, String password, Model model){
        
            Subject subject = SecurityUtils.getSubject();
            UsernamePasswordToken token = new UsernamePasswordToken(username,password);
            try {
        
                subject.login(token);
                Account account = (Account) subject.getPrincipal();
                subject.getSession().setAttribute("account",account);
                return "index";
            } catch (UnknownAccountException e) {
        
                e.printStackTrace(); // 用户名不存在
                model.addAttribute("msg","用户名错误！");
                return "login";
            } catch (IncorrectCredentialsException e){
         // 用户密码错误
                model.addAttribute("msg","密码错误！");
                e.printStackTrace();
                return "login";
            }
        }
    
        // 设置未授权的页面情况
        @GetMapping("/unauth")
        @ResponseBody
        public String unauth(){
        
            return "未授权，无法访问！";
        }
    
    // 退出页面
        @GetMapping("/logout")
        public String logout(){
        
            Subject subject = SecurityUtils.getSubject();
            subject.logout();
            return "login";
        }
    }

##### 添加网页进行演示 #####

对于index.html进行设置，shiro:hasRole设置，可以实现当这个用户登录之后才会显示标签中的内容  
index.html

<!DOCTYPE html>
    <html lang="en" xmlns:th="http://www.thymeleaf.org" xmlns:shiro="http://www.thymeleaf.org/thymeleaf-extras-shiro">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
        <link rel="shortcut icon" href="#"/>
    </head>
    <body>
        <h1>index</h1>
        <div th:if="${session.account != null}">
            <span th:text="${session.account.username}+'欢迎回来！'"></span><a href="/logout">退出</a>
        </div>
        <a href="/main">main</a> <br/>
        <div shiro:hasPermission="manage">
            <a href="manage">manage</a> <br/>
        </div>
        <div shiro:hasRole="administrator">
            <a href="/administrator">administrator</a>
        </div>
    </body>
    </html>

main.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
        <link rel="shortcut icon" href="#"/>
    </head>
    <body>
        <h1>main</h1>
    </body>
    </html>

manage.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
        <link rel="shortcut icon" href="#"/>
    </head>
    <body>
        <h1>manage</h1>
    </body>
    </html>

administator.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
        <link rel="shortcut icon" href="#"/>
    </head>
    <body>
        <h1>administator</h1>
    </body>
    </html>

运行结果，检查页面情况  
首先默认进入的页面是index.html  
在这个默认的index.html页面中，除了这个main以外就没有啥了，点击main就可以进行登录了  
![在这里插入图片描述][123bdafa5ddf4fbb92a729f7675530e0.png]

*  登录演示  
    如果登录账号错误，那么显示用户名错误  
    ![在这里插入图片描述][646bf1f4287049638d008bee2573e158.png]  
    如果密码错误显示，密码错误  
    ![在这里插入图片描述][1d94a3df2fdb4d908ed8ff4c89ea443f.png]

当登录成功之后

对着数据库来看，不同用户权限的显示的不一样  
![在这里插入图片描述][4508f460efdb4c83a97da1ad463cf8d7.png]  
![在这里插入图片描述][f419839772344300bb5ea1a2183ba90b.png]  
![在这里插入图片描述][f4585bda22714941919c37f62ffe4799.png]  
最后就是这个退出如何编写了  
代码如下

@GetMapping("/logout")
        public String logout(){
        
            Subject subject = SecurityUtils.getSubject();
            subject.logout();
            return "login";
        }

[shiro]: https://shiro.apache.org/
[2d9ee26a1e1c4b3aa0332393a83a9adc.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/b8ad9b9b74e84fd1be842078f199d97b.png
[61bcc67d998e4c78aaaaf6620ac9b7d2.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/1afafbeda3444f55bbf38368b87490c1.png
[e54a6af852844cc0a6a3ac538d82e97e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/e90dfabd2a5e4eb99d682e616fb93e11.png
[9591ce58f6ce4a9db12eb6a481635666.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/51e381e6bc6a43f494bb90c0f3787b94.png
[57e9885db6804cbbba17eb39f4ba87f4.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/a2adf6f4c185446b96546415e6af890f.png
[b9ecf64482094b0098d94107ba25b846.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/6f4cc86fca3a4a788bbb2c1d24c43ea5.png
[eff3aabb98f547ab9762910951d2c2d6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/bb71e825587045e48b0b0157840e0864.png
[cac9702d89bb429e9c02da2f3c896108.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/63d494d74872493a86f45049894e9aad.png
[fbd605b538204b0a988d633f44534293.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/d465a99ada5041189027d63ff9aa5bef.png
[e72df333e1f44f3a893dc5aacb133fbb.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/caa43d95636e41b4baf4d11c7b6107f4.png
[accca828d04d46b4b3c9e27df3dad3d8.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/e8c71a72297d41a681e4beb271a2bce2.png
[aa545d6b7033423397f82d39f917f2de.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/545915f5afdb44649b137eb95c7fce08.png
[6c96a394148841bd8a11e4fd2777aae6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/132eca4a0b1a40d1a9ced11b8212c496.png
[60eb6cd059384f1b874a2d92c03ac928.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/8a468620eb1248af845b3864d39b431a.png
[77c233a1af8b4b29a1c5cfc39b5bcdc9.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/a914f94d552942daa261664994c10a4b.png
[384d9d60f36c4e1bb364d72af478ec7f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/ebf0811721f6410c82af84bcd013ba66.png
[6e584d50183c42a4bc16ca2ee4e7561d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/dd5b00953cb84bd1b652b3c1602041af.png
[f2019eb7767b46c595ed1a9a530dc4f3.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/27d9ac5240314f9a956dd992f1d8d475.png
[f1b7eb3005f54aaca38ffd2187b46f3b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/c80e12bfab16492b8d21d631f2e21079.png
[ecf4260fb6754b5c945c359672e65057.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/aaefb70b084447a6ae42f45987133985.png
[08afb9e6a78641b98a41d1770ca86bd1.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/9e1f2134bb1d4ef68b4059b66b4d438f.png
[eb0527a5e7bf4ff9a77a5ee7f7d3720a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/1715d8fa7db4496da9aa34a1afc6d76c.png
[67417ebf3e67438899aed0727dadd7df.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/4b1d2ca1f3dd465d9aad93ae5f113fb6.png
[123bdafa5ddf4fbb92a729f7675530e0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/ed2d474b9d7542c5bdc7ad84e8b8a2c9.png
[646bf1f4287049638d008bee2573e158.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/76a55da12de7403d854a81fbe2efdef2.png
[1d94a3df2fdb4d908ed8ff4c89ea443f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/3e03d83ebfe54a79b966855875b5608e.png
[4508f460efdb4c83a97da1ad463cf8d7.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/3561368ec6304647a16750a8464b5e9d.png
[f419839772344300bb5ea1a2183ba90b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/b5bb09e94f184cf587ebbb9872a563ba.png
[f4585bda22714941919c37f62ffe4799.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/6cb7a90200c2489a9c282816a8ade291.png