• Springboot整合shiro安全框架+swagger

    1.创建项目

    2.加入依赖

    1. <dependencies>
    2.         <dependency>
    3.             <groupId>org.apache.shirogroupId>
    4.             <artifactId>shiro-spring-boot-starterartifactId>
    5.             <version>1.7.0version>
    6.         dependency>
    7.         <dependency>
    8.             <groupId>com.spring4allgroupId>
    9.             <artifactId>swagger-spring-boot-starterartifactId>
    10.             <version>1.9.1.RELEASEversion>
    11.         dependency>
    12.         <dependency>
    13.             <groupId>com.github.xiaoymingroupId>
    14.             <artifactId>swagger-bootstrap-uiartifactId>
    15.             <version>1.7.8version>
    16.         dependency>
    17.  
    18.         <dependency>
    19.             <groupId>org.springframework.bootgroupId>
    20.             <artifactId>spring-boot-starter-webartifactId>
    21.         dependency>
    22.  
    23.         <dependency>
    24.             <groupId>mysqlgroupId>
    25.             <artifactId>mysql-connector-javaartifactId>
    26.         dependency>
    27.  
    28.         <dependency>
    29.             <groupId>org.projectlombokgroupId>
    30.             <artifactId>lombokartifactId>
    31.             <optional>trueoptional>
    32.         dependency>
    33.  
    34.         <dependency>
    35.             <groupId>com.baomidougroupId>
    36.             <artifactId>mybatis-plus-boot-starterartifactId>
    37.             <version>3.5.1version>
    38.         dependency>
    39.  
    40.         <dependency>
    41.             <groupId>org.springframework.bootgroupId>
    42.             <artifactId>spring-boot-starter-testartifactId>
    43.             <scope>testscope>
    44.         dependency>
    45.     dependencies>

    3.application配置文件

    1. #配置数据源
    2. spring.datasource.url=jdbc:mysql://localhost:3306/shiro?serverTimezone=Asia/Shanghai
    3. spring.datasource.username=root
    4. spring.datasource.password=123456
    5. spring.datasource.driver-class-name=com.mysql.cj.jdbc.Driver
    6.  
    7. #端口号
    8. server.port=8081
    9.  
    10. #sql日志   属于mybatis-plus的
    11. mybatis-plus.configuration.log-impl=org.apache.ibatis.logging.stdout.StdOutImpl
    12.  
    13.  
    14. #如果你的springboot 是 2.6.x上的版本得加    2.3.12不需要
    15. #spring.mvc.pathmatch.matching-strategy=ANT_PATH_MATCHER

    4.创建ShiroProperties实体类

    1. package com.wzh.entity;
    2.  
    3. import io.swagger.annotations.ApiModelProperty;
    4. import lombok.AllArgsConstructor;
    5. import lombok.Data;
    6. import lombok.NoArgsConstructor;
    7. import org.springframework.boot.context.properties.ConfigurationProperties;
    8. import org.springframework.stereotype.Component;
    9.  
    10. /**
    11.  * @ProjectName: springboot
    12.  * @Package: com.wzh.entity
    13.  * @ClassName: ShiroProperties
    14.  * @Author: 王振华
    15.  * @Description:
    16.  * @Date: 2022/8/6 17:40
    17.  * @Version: 1.0
    18.  */
    19. @Data
    20. @Component
    21. @ConfigurationProperties(prefix = "shiro")//使用配置文件的内容
    22. public class ShiroProperties {
    23.  
    24.     private String hashAlgorithmName="md5";
    25.  
    26.     private Integer hashIterations=2;
    27.  
    28.     private String loginUrl;
    29.  
    30.     private String unauthorizedUrl;
    31.  
    32.     private String [] anonUrls;
    33.  
    34.     private String  logoutUrl;
    35.  
    36.     private String [] authcUrls;
    37. }

    5.修改application配置文件

    1. #shiro的配置
    2. shiro.hash-algorithm-name:MD5
    3. shiro.hash-iterations=1024
    4. shiro.login-url=/index.html
    5. shiro.unauthorized-url=/unauthorized.html
    6. shiro.anon-urls[0]=/login/*
    7. shiro.anon-urls[1]=/doc.html
    8. shiro.anon-urls[2]=/swagger-ui.html
    9. shiro.anon-urls[3]=/webjars/**
    10. shiro.anon-urls[4]=/swagger/**
    11. shiro.anon-urls[5]=/swagger-resources/**
    12. shiro.anon-urls[6]=/v2/**
    13. shiro.anon-urls[7]=/static/**
    14. shiro.logout-url=/login/logout*
    15. shiro.authc-urls[0]=/**

    6.创建shiro配置类

    1. package com.wzh.config;
    2.  
    3. import com.wzh.entity.ShiroProperties;
    4. import com.wzh.filter.LoginFilter;
    5. import com.wzh.realm.UserRealm;
    6. import org.apache.shiro.authc.credential.CredentialsMatcher;
    7. import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
    8. import org.apache.shiro.mgt.SecurityManager;
    9. import org.apache.shiro.realm.Realm;
    10. import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    11. import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    12. import org.springframework.beans.factory.annotation.Autowired;
    13. import org.springframework.boot.web.servlet.FilterRegistrationBean;
    14. import org.springframework.context.annotation.Bean;
    15. import org.springframework.context.annotation.Configuration;
    16. import org.springframework.web.filter.DelegatingFilterProxy;
    17.  
    18. import javax.servlet.Filter;
    19. import java.util.HashMap;
    20. import java.util.Map;
    21.  
    22. /**
    23.  * @ProjectName: springboot
    24.  * @Package: com.wzh.config
    25.  * @ClassName: ShiroAutoConfiguration
    26.  * @Author: 王振华
    27.  * @Description: shiro配置类
    28.  * @Date: 2022/8/6 17:37
    29.  * @Version: 1.0
    30.  */
    31. @Configuration
    32. public class ShiroAutoConfiguration {
    33.     @Autowired
    34.     private ShiroProperties shiroProperties;
    35.  
    36.     /**
    37.      * 声明安全管理器
    38.      * @return
    39.      */
    40.     @Bean
    41.     public DefaultWebSecurityManager securityManager(){
    42.         DefaultWebSecurityManager securityManager=new DefaultWebSecurityManager();
    43.         securityManager.setRealm(realm());
    44.         return securityManager;
    45.     }
    46.  
    47.     /**
    48.      * 创建realm
    49.      */
    50.     @Bean
    51.     public Realm realm(){
    52.         UserRealm myRealm=new UserRealm();
    53.         //注入凭证匹配器
    54.         myRealm.setCredentialsMatcher(credentialsMatcher());
    55.         return myRealm;
    56.     }
    57.  
    58.     /**
    59.      * 创建凭证匹配器
    60.      */
    61.     @Bean
    62.     public HashedCredentialsMatcher credentialsMatcher(){
    63.         HashedCredentialsMatcher credentialsMatcher=new HashedCredentialsMatcher();
    64.         credentialsMatcher.setHashAlgorithmName(shiroProperties.getHashAlgorithmName());
    65.         credentialsMatcher.setHashIterations(shiroProperties.getHashIterations());
    66.         return credentialsMatcher;
    67.     }
    68.  
    69.     /**
    70.      * 配置过滤器 Shiro 的Web过滤器 必须和下面的注册过滤器名称一样
    71.      */
    72.     @Bean(value = "shiroFilter")
    73.     public ShiroFilterFactoryBean filterFactoryBean(){
    74.         ShiroFilterFactoryBean factoryBean = new ShiroFilterFactoryBean();
    75.         //注入安全管理器
    76.         factoryBean.setSecurityManager(securityManager());
    77.         //注入登陆页面
    78.         factoryBean.setLoginUrl(shiroProperties.getLoginUrl());
    79.         //注入未授权的页面地址
    80.         factoryBean.setUnauthorizedUrl(shiroProperties.getUnauthorizedUrl());
    81.  
    82.         //注入过滤器
    83.         Map filterChainDefinition=new HashMap<>();
    84.         //注入放行地址
    85.         if(shiroProperties.getAnonUrls()!=null&&shiroProperties.getAnonUrls().length>0){
    86.             String[] anonUrls = shiroProperties.getAnonUrls();
    87.             for (String anonUrl : anonUrls) {
    88.                 filterChainDefinition.put(anonUrl,"anon");
    89.             }
    90.         }
    91.         //注入登出的地址
    92.         if(shiroProperties.getLogoutUrl()!=null){
    93.             filterChainDefinition.put(shiroProperties.getLogoutUrl(),"logout");
    94.         }
    95.  
    96.         //注入拦截的地址
    97.         String[] authcUrls = shiroProperties.getAuthcUrls();
    98.         if(authcUrls!=null&&authcUrls.length>0){
    99.             for (String authcUrl : authcUrls) {
    100.                 filterChainDefinition.put(authcUrl,"authc");
    101.             }
    102.         }
    103.         factoryBean.setFilterChainDefinitionMap(filterChainDefinition);
    104.  
    105.  
    106.         //设置自定义认证过滤器
    107.         HashMap filterMap=new HashMap();
    108.         filterMap.put("authc",new LoginFilter());
    109.         factoryBean.setFilters(filterMap);
    110.  
    111.         return factoryBean;
    112.     }
    113.  
    114.     /**
    115.      * 注册过滤器
    116.      */
    117.     @Bean //注册filter
    118.     public FilterRegistrationBean filterRegistrationBean(){
    119.         FilterRegistrationBean filterRegistrationBean=new FilterRegistrationBean<>();
    120.         filterRegistrationBean.setName("shiroFilter");
    121.         filterRegistrationBean.setFilter(new DelegatingFilterProxy());
    122.         filterRegistrationBean.addUrlPatterns("/*");
    123.         return filterRegistrationBean;
    124.     }
    125.  
    126. }

    7.创建controller service mapper entity

    config:

    ShiroAutoConfigurtion:就上面的

    SwaggerConfig:

    1. package com.wzh.config;
    2.  
    3. import org.springframework.context.annotation.Bean;
    4. import org.springframework.context.annotation.Configuration;
    5. import springfox.documentation.builders.RequestHandlerSelectors;
    6. import springfox.documentation.service.ApiInfo;
    7. import springfox.documentation.service.Contact;
    8. import springfox.documentation.service.VendorExtension;
    9. import springfox.documentation.spi.DocumentationType;
    10. import springfox.documentation.spring.web.plugins.Docket;
    11.  
    12. import java.util.ArrayList;
    13.  
    14. /**
    15.  * @ProjectName: springboot-shiro-swagger
    16.  * @Package: com.wzh.config
    17.  * @ClassName: SwaggerConfig
    18.  * @Author: 王振华
    19.  * @Description:
    20.  * @Date: 2022/8/5 19:54
    21.  * @Version: 1.0
    22.  */
    23. @Configuration
    24. public class SwaggerConfig {
    25.     @Bean   //swagger中所有的功能都封装在Docket类中。
    26.     public Docket docket(){
    27.         Docket docket = new Docket(DocumentationType.SWAGGER_2)
    28.                 .apiInfo(apiInfo())  //设置api文档信息
    29.                 .select()
    30.                 .apis(RequestHandlerSelectors.basePackage("com.wzh.controller")) //指定为哪些包下的类生成接口文档
    31.                 .build()
    32.                 ;
    33.  
    34.         return docket;
    35.     }
    36.  
    37.     //定义自己接口文档信息
    38.     private ApiInfo apiInfo(){
    39.         Contact DEFAULT_CONTACT = new Contact("王振华", "http://www/baidu.com", "13234@qq.com");
    40.         ApiInfo apiInfo = new ApiInfo("在线文档", "世界上最牛的一个文档", "V1.0", "http://www/jd.com",
    41.                 DEFAULT_CONTACT, "xx科技有限公司", "http://www.apache.org/licenses/LICENSE-2.0", new ArrayList());
    42.         return apiInfo;
    43.     }
    44.  
    45. }

    controller:

    LoginController:

    1. package com.wzh.controller;
    2.  
    3. import com.wzh.util.CommonResult;
    4. import io.swagger.annotations.Api;
    5. import io.swagger.annotations.ApiImplicitParam;
    6. import io.swagger.annotations.ApiImplicitParams;
    7. import io.swagger.annotations.ApiOperation;
    8. import org.apache.shiro.SecurityUtils;
    9. import org.apache.shiro.authc.UsernamePasswordToken;
    10. import org.apache.shiro.subject.Subject;
    11. import org.springframework.web.bind.annotation.*;
    12.  
    13. /**
    14.  * @ProjectName: springboot-shiro-swagger
    15.  * @Package: com.wzh.controller
    16.  * @ClassName: LoginController
    17.  * @Author: 王振华
    18.  * @Description:
    19.  * @Date: 2022/8/5 17:51
    20.  * @Version: 1.0
    21.  */
    22. @RestController
    23. @RequestMapping("/login")
    24. @Api(tags = "登录的接口")
    25. public class LoginController {
    26.  
    27.     @GetMapping("/toLogin")
    28.     @ApiOperation(value = "登录方法")
    29.     @ApiImplicitParams(
    30.             {
    31.                     @ApiImplicitParam(value = "用户名",name = "username"),
    32.                     @ApiImplicitParam(value = "密码",name = "password")
    33.             }
    34.     )
    35.     public CommonResult login( String username, String password){
    36.         System.out.println(username+password);
    37.     //获取主体对象
    38.         Subject subject = SecurityUtils.getSubject();
    39.         UsernamePasswordToken token = new UsernamePasswordToken(username,password);
    40.         try {
    41.             subject.login(token);
    42.             System.out.println("-------------");
    43.             return CommonResult.LOGIN_SUCCESS;
    44.         }catch(Exception e){
    45.             e.printStackTrace();
    46.             return CommonResult.LOGIN_ERROR;
    47.         }
    48.     }
    49.  
    50.     @PostMapping("logout")
    51.     @ApiOperation(value = "退出方法")
    52.     public CommonResult logout(){
    53.         //获取主体对象
    54.         Subject subject = SecurityUtils.getSubject();
    55.         subject.logout();
    56.         return new CommonResult(200,"退出成功",null);
    57.     }
    58. }

    PermissionController:

    1. package com.wzh.controller;
    2.  
    3. import io.swagger.annotations.Api;
    4. import io.swagger.annotations.ApiOperation;
    5. import org.apache.shiro.authz.annotation.Logical;
    6. import org.apache.shiro.authz.annotation.RequiresPermissions;
    7. import org.springframework.web.bind.annotation.PostMapping;
    8. import org.springframework.web.bind.annotation.RestController;
    9.  
    10. /**
    11.  * @ProjectName: shiro-ssm0805
    12.  * @Package: com.wzh.controller
    13.  * @ClassName: PermissionController
    14.  * @Author: 王振华
    15.  * @Description:
    16.  * @Date: 2022/8/5 19:57
    17.  * @Version: 1.0
    18.  */
    19. @RestController
    20. @Api(tags = "权限接口")
    21. public class PermissionController {
    22.  
    23.     @PostMapping("/query")
    24.     @ApiOperation(value = "查询方法")
    25.     //使用shiro注解
    26.     @RequiresPermissions(value = {"user:query","user:aaa"},logical = Logical.OR)
    27.     public String query(){
    28.         return "query";
    29.     }
    30.  
    31.     @ApiOperation(value = "添加方法")
    32.     @PostMapping("/add")
    33.     @RequiresPermissions(value = {"user:add"})
    34.     public String add(){
    35.         return "add";
    36.     }
    37.  
    38.     @ApiOperation(value = "删除方法")
    39.     @PostMapping("/delete")
    40.     @RequiresPermissions(value = {"user:delete"})
    41.     public String delete(){
    42.         return "delete";
    43.     }
    44.  
    45.     @ApiOperation(value = "修改方法")
    46.     @PostMapping("/update")
    47.     @RequiresPermissions(value = {"user:update"})
    48.     public String update(){
    49.         return "update";
    50.     }
    51.  
    52.     @ApiOperation(value = "导出方法")
    53.     @PostMapping("/export")
    54.     @RequiresPermissions(value = {"user:export"})
    55.     public String export(){
    56.         return "export";
    57.     }
    58. }

    Service:

    PermissionService:

    1. package com.wzh.Service;
    2.  
    3. import java.util.List;
    4.  
    5. /**
    6.  * @ProjectName: ssm-shiro
    7.  * @Package: com.wzh.service
    8.  * @ClassName: PermissionService
    9.  * @Author: 王振华
    10.  * @Description:
    11.  * @Date: 2022/8/4 22:27
    12.  * @Version: 1.0
    13.  */
    14. public interface PermissionService {
    15.     List findPermissionById(Integer userid);
    16. }

    RoleService:

    1. package com.wzh.Service;
    2.  
    3. import java.util.List;
    4.  
    5. /**
    6.  * @ProjectName: ssm-shiro
    7.  * @Package: com.wzh.service
    8.  * @ClassName: RoleService
    9.  * @Author: 王振华
    10.  * @Description:
    11.  * @Date: 2022/8/4 22:27
    12.  * @Version: 1.0
    13.  */
    14. public interface RoleService {
    15.  
    16.     List findRolesById(Integer userid);
    17. }

    UserService:

    1. package com.wzh.Service;
    2.  
    3. import com.wzh.entity.User;
    4.  
    5. /**
    6.  * @ProjectName: springboot-shiro-swagger
    7.  * @Package: com.wzh.Service
    8.  * @ClassName: UserService
    9.  * @Author: 王振华
    10.  * @Description:
    11.  * @Date: 2022/8/5 17:51
    12.  * @Version: 1.0
    13.  */
    14. public interface UserService {
    15.     User findByUsername(String username);
    16. }

    PermissionServiceImpl:

    1. package com.wzh.Service.impl;
    2.  
    3. import com.wzh.Service.PermissionService;
    4. import com.wzh.mapper.PermissionMapper;
    5. import org.springframework.beans.factory.annotation.Autowired;
    6. import org.springframework.stereotype.Service;
    7.  
    8. import java.util.List;
    9.  
    10. /**
    11.  * @ProjectName: ssm-shiro
    12.  * @Package: com.wzh.service.impl
    13.  * @ClassName: PermissionServiceImpl
    14.  * @Author: 王振华
    15.  * @Description:
    16.  * @Date: 2022/8/4 22:28
    17.  * @Version: 1.0
    18.  */
    19. @Service
    20. public class PermissionServiceImpl implements PermissionService {
    21.     @Autowired
    22.     private PermissionMapper permissionMapper;
    23.  
    24.     @Override
    25.     public List findPermissionById(Integer userid) {
    26.         List list = permissionMapper.selectPercodeByUserId(userid);
    27.         return list;
    28.     }
    29. }

    RoleServiceImpl:

    1. package com.wzh.Service.impl;
    2.  
    3. import com.wzh.Service.RoleService;
    4. import com.wzh.mapper.RoleMapper;
    5. import org.springframework.beans.factory.annotation.Autowired;
    6. import org.springframework.stereotype.Service;
    7.  
    8. import java.util.List;
    9.  
    10. /**
    11.  * @ProjectName: ssm-shiro
    12.  * @Package: com.wzh.service.impl
    13.  * @ClassName: RoleServiceImpl
    14.  * @Author: 王振华
    15.  * @Description:
    16.  * @Date: 2022/8/4 22:28
    17.  * @Version: 1.0
    18.  */
    19. @Service
    20. public class RoleServiceImpl implements RoleService {
    21.     @Autowired
    22.     private RoleMapper roleMapper;
    23.     @Override
    24.     public List findRolesById(Integer userid) {
    25.         List list = roleMapper.selectRolenameByUserId(userid);
    26.         return list;
    27.     }
    28. }

    UserServiceImpl:

    1. package com.wzh.Service.impl;
    2.  
    3. import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
    4. import com.wzh.Service.UserService;
    5. import com.wzh.entity.User;
    6. import com.wzh.mapper.UserMapper;
    7. import org.springframework.beans.factory.annotation.Autowired;
    8. import org.springframework.stereotype.Service;
    9.  
    10. /**
    11.  * @ProjectName: springboot-shiro-swagger
    12.  * @Package: com.wzh.Service.impl
    13.  * @ClassName: UserServiceImpl
    14.  * @Author: 王振华
    15.  * @Description:
    16.  * @Date: 2022/8/5 17:52
    17.  * @Version: 1.0
    18.  */
    19. @Service
    20. public class UserServiceImpl implements UserService {
    21.     @Autowired
    22.     private UserMapper userMapper;
    23.  
    24.     @Override
    25.     public User findByUsername(String username) {
    26.         QueryWrapper queryWrapper = new QueryWrapper<>();
    27.         queryWrapper.eq("username",username);
    28.         User user = userMapper.selectOne(queryWrapper);
    29.         return user;
    30.     }
    31. }

    mapper:

    PermissionMapper:

    1. package com.wzh.mapper;
    2.  
    3. import com.baomidou.mybatisplus.core.mapper.BaseMapper;
    4. import com.wzh.entity.Permission;
    5. import org.apache.ibatis.annotations.Select;
    6.  
    7.  
    8. import java.util.List;
    9.  
    10. /**
    12. @ProjectName: ssm-shiro
    13. @Package: com.wzh.mapper
    14. @ClassName: PermissionMapper
    15. @Author: 王振华
    16. @Description: 
    17. @Date: 2022/8/4 22:21
    18. @Version: 1.0
    19. */
    20. public interface PermissionMapper extends BaseMapper {
    21.     @Select("select percode from user_role ur" +
    22.             "            join role_permission rp on ur.roleid=rp.roleid" +
    23.             "            join permission p on p.perid=rp.perid" +
    24.             "        where ur.userid = #{userid}")
    25.     List selectPercodeByUserId(Integer userid);
    26. }

    RoleMapper:

    1. package com.wzh.mapper;
    2.  
    3.  
    4.  
    5. import org.apache.ibatis.annotations.Select;
    6.  
    7. import java.util.List;
    8.  
    9. /**
    10.  * @ProjectName: ssm-shiro
    11.  * @Package: com.wzh.mapper
    12.  * @ClassName: RoleMapper
    13.  * @Author: 王振华
    14.  * @Description:
    15.  * @Date: 2022/8/4 22:21
    16.  * @Version: 1.0
    17.  */
    18.  
    19. public interface RoleMapper {
    20.     @Select("select rolename from user_role ur" +
    21.             "            join role r on ur.roleid=r.roleid" +
    22.             "        where ur.userid = #{userid}")
    23.     List selectRolenameByUserId(Integer userid);
    24. }

    UserMapper:

    1. package com.wzh.mapper;
    2.  
    3. import com.baomidou.mybatisplus.core.mapper.BaseMapper;
    4. import com.wzh.entity.User;
    5.  
    6. /**
    7.  * @ProjectName: springboot-shiro-swagger
    8.  * @Package: com.wzh.mapper
    9.  * @ClassName: UserMapper
    10.  * @Author: 王振华
    11.  * @Description:
    12.  * @Date: 2022/8/5 17:52
    13.  * @Version: 1.0
    14.  */
    15. public interface UserMapper extends BaseMapper {
    16. }

    entity:

    Permission:

    1. package com.wzh.entity;
    2.  
    3. import io.swagger.annotations.ApiModel;
    4. import io.swagger.annotations.ApiModelProperty;
    5. import lombok.AllArgsConstructor;
    6. import lombok.Data;
    7. import lombok.NoArgsConstructor;
    8.  
    9. /**
    10.  * @ProjectName: ssm-shiro
    11.  * @Package: com.wzh.entity
    12.  * @ClassName: Permission
    13.  * @Author: 王振华
    14.  * @Description:
    15.  * @Date: 2022/8/4 22:22
    16.  * @Version: 1.0
    17.  */
    18. @Data
    19. @NoArgsConstructor
    20. @AllArgsConstructor
    21. @ApiModel("权限实体类")
    22. public class Permission {
    23.     @ApiModelProperty(value = "id属性")
    24.     private Integer perid;
    25.     @ApiModelProperty(value = "权限名")
    26.     private String pername;
    27.     @ApiModelProperty(value = "权限码")
    28.     private String percode;
    29. }

    Role:

    1. package com.wzh.entity;
    2.  
    3. import lombok.AllArgsConstructor;
    4. import lombok.Data;
    5. import lombok.NoArgsConstructor;
    6.  
    7. /**
    8.  * @ProjectName: ssm-shiro
    9.  * @Package: com.wzh.entity
    10.  * @ClassName: Role
    11.  * @Author: 王振华
    12.  * @Description:
    13.  * @Date: 2022/8/4 22:22
    14.  * @Version: 1.0
    15.  */
    16. @Data
    17. @NoArgsConstructor
    18. @AllArgsConstructor
    19. public class Role {
    20.     private Integer roleid;
    21.  
    22.     private String rolename;
    23. }

    User:

    1. package com.wzh.entity;
    2.  
    3. import lombok.AllArgsConstructor;
    4. import lombok.Data;
    5. import lombok.NoArgsConstructor;
    6.  
    7. /**
    8.  * @ProjectName: ssm-shiro
    9.  * @Package: com.wzh.entity
    10.  * @ClassName: User
    11.  * @Author: 王振华
    12.  * @Description:
    13.  * @Date: 2022/8/4 22:19
    14.  * @Version: 1.0
    15.  */
    16. @Data
    17. @NoArgsConstructor
    18. @AllArgsConstructor
    19. public class User {
    20.     private Integer userid;
    21.  
    22.     private String username;
    23.  
    24.     private String userpwd;
    25.  
    26.     private String sex;
    27.  
    28.     private String address;
    29.  
    30.     private String salt;
    31.  
    32. }

    filter:

    LoginFilter:

    1. package com.wzh.filter;
    2.  
    3. import com.fasterxml.jackson.databind.ObjectMapper;
    4.  
    5. import com.wzh.util.CommonResult;
    6. import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
    7.  
    8. import javax.servlet.ServletRequest;
    9. import javax.servlet.ServletResponse;
    10. import java.io.PrintWriter;
    11.  
    12. /**
    13.  * @ProjectName: springboot-shiro-swagger
    14.  * @Package: com.wzh.filter
    15.  * @ClassName: LoginFilter
    16.  * @Author: 王振华
    17.  * @Description:
    18.  * @Date: 2022/8/5 17:47
    19.  * @Version: 1.0
    20.  */
    21. public class LoginFilter extends FormAuthenticationFilter {
    22.     @Override
    23.     protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
    24.         response.setContentType("application/json;charset=utf-8");
    25.         PrintWriter writer = response.getWriter();
    26.         CommonResult commonResult = CommonResult.UNLOGIN;
    27.         ObjectMapper objectMapper = new ObjectMapper();
    28.         String json = objectMapper.writeValueAsString(commonResult);
    29.         writer.print(json);
    30.         writer.flush();
    31.         writer.close();
    32.         return  false;
    33.     }
    34. }

    handler:

    MyException:

    1. package com.wzh.handler;
    2.  
    3. import com.wzh.util.CommonResult;
    4. import org.apache.shiro.authz.UnauthorizedException;
    5. import org.springframework.web.bind.annotation.ControllerAdvice;
    6. import org.springframework.web.bind.annotation.ExceptionHandler;
    7. import org.springframework.web.bind.annotation.ResponseBody;
    8.  
    9. /**
    10.  * @ProjectName: springboot-shiro-swagger
    11.  * @Package: com.wzh.handler
    12.  * @ClassName: MyException
    13.  * @Author: 王振华
    14.  * @Description:
    15.  * @Date: 2022/8/5 19:02
    16.  * @Version: 1.0
    17.  */
    18. @ControllerAdvice
    19. public class MyException {
    20.     @ExceptionHandler(value = UnauthorizedException.class)
    21.     @ResponseBody
    22.     public CommonResult Unauth(UnauthorizedException e){
    23.        e.printStackTrace();
    24.        return CommonResult.UNAUTHORIZED;
    25.     }
    26. }

    util:

    CommonResult:

    1. package com.wzh.util;
    2.  
    3. import io.swagger.annotations.ApiModel;
    4. import io.swagger.annotations.ApiModelProperty;
    5. import lombok.AllArgsConstructor;
    6. import lombok.Data;
    7. import lombok.NoArgsConstructor;
    8.  
    9. /**
    10.  * @ProjectName: springboot-shiro-swagger
    11.  * @Package: com.wzh.util
    12.  * @ClassName: CommonResult
    13.  * @Author: 王振华
    14.  * @Description:
    15.  * @Date: 2022/8/5 18:03
    16.  * @Version: 1.0
    17.  */
    18. @Data
    19. @NoArgsConstructor
    20. @AllArgsConstructor
    21. @ApiModel("统一返回json对象")
    22. public class CommonResult {
    23.     @ApiModelProperty("状态码")
    24.     private Integer code;
    25.     @ApiModelProperty("响应的信息内容")
    26.     private String msg;
    27.     @ApiModelProperty("响应的数据")
    28.     private Object data;
    29.  
    30.     public static final CommonResult UNLOGIN = new CommonResult(403,"未登录",null);
    31.     public static final CommonResult UNAUTHORIZED = new CommonResult(405,"未授权",null);
    32.     public static final CommonResult LOGIN_SUCCESS = new CommonResult(200,"登录成功",null);
    33.     public static final CommonResult LOGIN_ERROR = new CommonResult(-1,"登录失败",null);
    34. }

    8.创建realm

    1. package com.wzh.realm;
    2.  
    3. import com.wzh.Service.PermissionService;
    4. import com.wzh.Service.RoleService;
    5. import com.wzh.Service.UserService;
    6. import com.wzh.entity.User;
    7. import org.apache.shiro.authc.AuthenticationException;
    8. import org.apache.shiro.authc.AuthenticationInfo;
    9. import org.apache.shiro.authc.AuthenticationToken;
    10. import org.apache.shiro.authc.SimpleAuthenticationInfo;
    11. import org.apache.shiro.authz.AuthorizationInfo;
    12. import org.apache.shiro.authz.SimpleAuthorizationInfo;
    13. import org.apache.shiro.realm.AuthorizingRealm;
    14. import org.apache.shiro.subject.PrincipalCollection;
    15. import org.apache.shiro.util.ByteSource;
    16. import org.springframework.beans.factory.annotation.Autowired;
    17.  
    18. import java.util.List;
    19.  
    20. /**
    21.  * @ProjectName: springboot
    22.  * @Package: com.wzh.realm
    23.  * @ClassName: UserRealm
    24.  * @Author: 王振华
    25.  * @Description: 自定义realm
    26.  * @Date: 2022/8/6 17:50
    27.  * @Version: 1.0
    28.  */
    29. public class UserRealm extends AuthorizingRealm {
    30.     @Autowired
    31.     private UserService userService;
    32.  
    33.     @Autowired
    34.     private PermissionService permissionService;
    35.  
    36.     @Autowired
    37.     private RoleService roleService;
    38.  
    39.     //当你进行权限校验时会执行该方法
    40.     @Override
    41.     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    42.         User user = (User) principals.getPrimaryPrincipal();
    43.         SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
    44.         //根据账号查找该用户具有哪些权限
    45.         List list = permissionService.findPermissionById(user.getUserid());
    46.         if(list!=null&&list.size()>0){
    47.             info.addStringPermissions(list);
    48.         }
    49.         List roles = roleService.findRolesById(user.getUserid());
    50.         if(roles!=null&&roles.size()>0){
    51.             info.addRoles(roles);
    52.         }
    53.         return info;
    54.     }
    55.  
    56.     //该方法用于完成认证的功能
    57.     @Override
    58.     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
    59.         //1.根据token获取账号
    60.         String username = (String) token.getPrincipal();
    61.         /**
    62.          * 以前登陆的逻辑是  把用户和密码全部发到数据库  去匹配
    63.          * 在shrio里面是先根据用户名把用户对象查询出来，再来做密码匹配
    64.          */
    65.  
    66.         //2.根据账号查询用户信息
    67.         User user = userService.findByUsername(username);
    68.         //表示该用户名在数据库中存在
    69.         if(user!=null){
    70.             /**
    71.              * 参数说明
    72.              * 参数1:可以传到任意对象
    73.              * 参数2:从数据库里面查询出来的密码
    74.              * 参数3:盐
    75.              * 参数4:当前类名
    76.              */
    77.             ByteSource credentialsSalt = ByteSource.Util.bytes(user.getSalt());
    78.             SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(user,user.getUserpwd(),credentialsSalt,this.getName());
    79.             return info;
    80.         }
    81.         return null;
    82.     }
    83. }

     

     运行程序如果报404，看是否开启shiro注解

    1.  //开始shiro注解
    2.     @Bean
    3.     public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor() {
    4.         AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
    5.         authorizationAttributeSourceAdvisor.setSecurityManager(securityManager());
    6.         return authorizationAttributeSourceAdvisor;
    7.     }
    8.     @Bean
    9.     public DefaultAdvisorAutoProxyCreator getDefaultAdvisorAutoProxyCreator() {
    10.         DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator=new DefaultAdvisorAutoProxyCreator();
    11.         advisorAutoProxyCreator.setProxyTargetClass(true);
    12.         return advisorAutoProxyCreator;
    13.     }

    使用swagger doc.html无法访问以及样式无效。 shiro拦截规则拦截了  记得在配置文件中放行

     

  • 相关阅读:
    算法与数据结构（第二周）——排序基础：插入排序法
    文件加密，数据防泄密软件
    基于python的pdf2word（可以批量转换）
    搜维尔科技：Xsens在现实生活中实时控制虚幻人形机器人
    最近公共祖先(lca)
    JVM虚拟机：Java对象的头信息有什么？
    【职场必备知识】毕业留蓉政策与发展前景分析
    Spring MVC——Rest风格
    计算机视觉的应用16-基于pytorch框架搭建的注意力机制，在汽车品牌与型号分类识别的应用
    【OpenCV-Python】教程：3-11 图像变换（频域变换）
  • 原文地址：https://blog.csdn.net/weixin_68509156/article/details/126198065