shiro的简单使用

@Configuration
public class ShiroConfig {
    @Bean
    public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager  securityManager) {
        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
        // 设置securityManager
        shiroFilterFactoryBean.setSecurityManager(securityManager);
        // 登录的url
        shiroFilterFactoryBean.setLoginUrl("/login");
        // 成功跳转
        shiroFilterFactoryBean.setSuccessUrl("/index");
        // 未授权跳转
        shiroFilterFactoryBean.setUnauthorizedUrl("/403");

        LinkedHashMap<String, String> filterChainDefinitionMap = new LinkedHashMap<>();

        // 不拦截
        filterChainDefinitionMap.put("/", "anon");
        filterChainDefinitionMap.put("/login", "anon");
        filterChainDefinitionMap.put("/css/**", "anon");
        filterChainDefinitionMap.put("/js/**", "anon");
        filterChainDefinitionMap.put("/fonts/**", "anon");
        filterChainDefinitionMap.put("/img/**", "anon");
        filterChainDefinitionMap.put("/druid/**", "anon");
        // logout后跳转到"/logout"这个地址
        filterChainDefinitionMap.put("/logout", "logout");
        // 拦截
        filterChainDefinitionMap.put("/**", "authc");

        shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
        return shiroFilterFactoryBean;
    }

    @Bean
    public SecurityManager securityManager(){
        // 配置SecurityManager，并注入shiroRealm
        DefaultWebSecurityManager securityManager =  new DefaultWebSecurityManager();
        securityManager.setRealm(shiroRealm());
        return securityManager;
    }

    @Bean
    public ShiroRealm shiroRealm(){
        return new ShiroRealm();
    }
}

/**
     * 登录认证
     */
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {

        String userName = (String) authenticationToken.getPrincipal();
        String password = new String((char[]) authenticationToken.getCredentials());

        log.info("用户{}正在进行认证", userName);
        // 通过用户名到数据库查询用户信息
        User user = userMapper.selectByUserName(userName);

        if (user == null) {
            throw new UnknownAccountException("用户名或密码错误！");
        }
        if (!password.equals(user.getPassword())) {
            throw new IncorrectCredentialsException("用户名或密码错误！");
        }
        if ("0".equals(user.getStatus())) {
            throw new LockedAccountException("账号已被锁定,请联系管理员！");
        }
        SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(user, password, getName());

        log.info("用户{}认证成功", userName);
        return info;
    }

@RestController
public class UserController {

    @PostMapping("/login")
    @ResponseBody
    public String login(String username, String password) {
        // 密码MD5加密
        password = MD5Utils.encrypt(username, password);
        UsernamePasswordToken token = new UsernamePasswordToken(username, password);
        // 获取Subject对象
        Subject subject = SecurityUtils.getSubject();
        try {
            subject.login(token);
            return "成功，" + SecurityUtils.getSubject().getPrincipal();
        } catch (Exception e) {
            return "失败，" + e.getMessage();
        }
    }
}

/**
     * 获取用户角色和权限
     */
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principal) {
        User user = (User) SecurityUtils.getSubject().getPrincipal();
        String username = user.getUsername();

        log.info("用户{}正在获取权限", username);
        SimpleAuthorizationInfo simpleAuthorizationInfo = new SimpleAuthorizationInfo();

        // 获取用户角色集
        List<Role> roleList = roleMapper.selectByUsername(username);
        Set<String> roleSet = new HashSet<String>();
        for (Role r : roleList) {
            roleSet.add(r.getName());
        }
        simpleAuthorizationInfo.setRoles(roleSet);

        // 获取用户权限集
        List<Permission> permissionList = permissionMapper.selectByUsername(username);
        Set<String> permissionSet = new HashSet<String>();
        for (Permission p : permissionList) {
            permissionSet.add(p.getDescribe());
        }
        simpleAuthorizationInfo.setStringPermissions(permissionSet);

        log.info("用户{}获取权限成功", username);
        return simpleAuthorizationInfo;
    }

@Select("SELECT " +
        " r.id,r.NAME,r.describe  " +
        "FROM " +
        " role r " +
        " LEFT JOIN user_role ur ON ( r.id = ur.role_id ) " +
        " LEFT JOIN user u ON ( u.id = ur.user_id )  " +
        "WHERE " +
        " u.username = #{username}")
List<Role> selectByUsername(String username);

@Select("SELECT p.id,p.url,p.describe  " +
        "FROM " +
        " role r " +
        " LEFT JOIN user_role ur ON ( r.id = ur.role_id ) " +
        " LEFT JOIN user u ON ( u.id = ur.user_id ) " +
        " LEFT JOIN role_permission rp ON ( rp.role_id = r.id ) " +
        " LEFT JOIN permission p ON ( p.id = rp.permission_id )  " +
        "WHERE " +
        " u.username = #{username}")
List<Permission> selectByUsername(String username);

@Bean
public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
    AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
    authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
    return authorizationAttributeSourceAdvisor;
}

@ControllerAdvice
@Order(value = Ordered.HIGHEST_PRECEDENCE)
public class GlobalExceptionHandler {
    @ExceptionHandler(UnauthorizedException.class)
    @ResponseBody
    public String defaultExceptionHandler(HttpServletRequest req, Exception e){
        return "对不起，你没有访问权限！";
    }
}

@RequiresPermissions("user:user")
@GetMapping("user")
public String userList() {
    return "获取用户列表";
}

@RequiresPermissions("user:add")
@PostMapping("user/add")
public String userAdd(User user) {
    return "新增用户" + user;
}

@RequiresPermissions("user:delete")
@PostMapping("user/delete")
public String userDelete(User user) {
    return "删除用户" + user;
}

// 表示当前Subject需要角色admin和user。  
@RequiresRoles(value={"admin", "user"}, logical= Logical.AND)  

// 表示当前Subject需要权限user:a或user:b。
@RequiresPermissions (value={"user:a", "user:b"}, logical= Logical.OR)

public RedisManager redisManager() {
    RedisManager redisManager = new RedisManager();
    return redisManager;
}

public RedisCacheManager cacheManager() {
    RedisCacheManager redisCacheManager = new RedisCacheManager();
    redisCacheManager.setRedisManager(redisManager());
    return redisCacheManager;
}

@Bean
public SecurityManager securityManager(){
    // 配置SecurityManager
    DefaultWebSecurityManager securityManager =  new DefaultWebSecurityManager();
    // 注入shiroRealm
    securityManager.setRealm(shiroRealm());
    // 注入cacheManager
    securityManager.setCacheManager(cacheManager());
    return securityManager;
}