Shiro 学习笔记

quickstart 代码分析

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.*;
import org.apache.shiro.ini.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.lang.util.Factory;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class Quickstart {

  private static final transient Logger log = LoggerFactory.getLogger(Quickstart.class);

  public static void main(String[] args) {
    // 加载 shiro.ini 配置
    Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
    SecurityManager securityManager = factory.getInstance();
    SecurityUtils.setSecurityManager(securityManager);
    // 获取当前用户对象
    Subject currentUser = SecurityUtils.getSubject();
    // 通过当前用户拿到Session
    Session session = currentUser.getSession();
    session.setAttribute("someKey", "aValue");
    String value = (String) session.getAttribute("someKey");
    if (value.equals("aValue")) {
      log.info("Retrieved the correct value! [" + value + "]");
    }
    // 判断当前用户是否被认证
    if (!currentUser.isAuthenticated()) {
      UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");
      token.setRememberMe(true); // 设置 “记住我”
      try {
        currentUser.login(token); // 登录
      } catch (UnknownAccountException uae) { // 用户名不存在
        log.info("There is no user with username of " + token.getPrincipal());
      } catch (IncorrectCredentialsException ice) { // 密码错误
        log.info("Password for account " + token.getPrincipal() + " was incorrect!");
      } catch (LockedAccountException lae) { // 用户被锁定
        log.info("The account for username " + token.getPrincipal() + " is locked.  " +
                 "Please contact your administrator to unlock it.");
      } catch (AuthenticationException ae) {
        //unexpected condition?  error?
      }
    }
    log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");
    // 测试角色
    if (currentUser.hasRole("schwartz")) {
      log.info("May the Schwartz be with you!");
    } else {
      log.info("Hello, mere mortal.");
    }
    // 粗粒度权限判断
    if (currentUser.isPermitted("lightsaber:wield")) {
      log.info("You may use a lightsaber ring.  Use it wisely.");
    } else {
      log.info("Sorry, lightsaber rings are for schwartz masters only.");
    }
    // 细粒度权限判断
    if (currentUser.isPermitted("winnebago:drive:eagle5")) {
      log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  " +
               "Here are the keys - have fun!");
    } else {
      log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");
    }
    // 注销
    currentUser.logout();
    System.exit(0);
  }
}

授权操作

//执行授权逻辑
@Override protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals){
  System.out.println("执行了=>授权逻辑PrincipalCollection");
  //给资源进行授权
  SimpleAuthorizationInfo info=new SimpleAuthorizationInfo();
  //添加资源的授权字符串
  //info.addStringPermission("user:add");
  Subject subject=SecurityUtils.getSubject(); //获得当前对象
  User currentUser=(User)subject.getPrincipal(); //拿到User对象
  info.addStringPermission(currentUser.getPerms()); //设置权限
  return info;
  }

整合Thymeleaf

1. 添加Maven依赖

<!--https://mvnrepository.com/artifact/com.github.theborakompanioni/thymeleaf-extras-shiro -->
<dependency>
  <groupId>com.github.theborakompanioni</groupId>
  <artifactId>thymeleaf-extras-shiro</artifactId>
  <version>2.0.0</version>
</dependency>

2. 配置一个shiro的Dialect ，在shiro的配置中增加一个Bean

//配置ShiroDialect：方言，用于 thymeleaf 和 shiro 标签配合使用
@Bean public ShiroDialect getShiroDialect(){
  return new ShiroDialect();
  }

3. 修改前端的配置

<div shiro:hasPermission="user:add">
  <a th:href="@{/user/add}">add</a>
</div>
<div shiro:hasPermission="user:update">
  <a th:href="@{/user/update}">update</a>
</div>

4. 使用session判断是否登录

Subject subject=SecurityUtils.getSubject();
  subject.getSession().setAttribute("loginUser",user);

<p th:if="${session.loginUser==null}">
  <a th:href="@{/toLogin}">登录</a>
</p>