• shiro授权

    目录

    1、shiro授权角色、权限

    1.1、UserMapper

    1.2、UserMapper

    1.3、UserBiz

    1.4、UserBizImpl

    1.5、applicationContext-shiro

    1.6、Myrealm

    2、shiro的注解式开发

    2.1、springmvc-servlet

    2.2、shiroController

    1、shiro授权角色、权限

    首先看一下数据库表

     

    1.1、UserMapper

    1. package com.ssr.ssm.mapper;
    2.  
    3. import com.ssr.ssm.model.User;
    4. import org.springframework.stereotype.Repository;
    5.  
    6. import java.util.Set;
    7.  
    8. @Repository
    9. public interface UserMapper {
    10.     int deleteByPrimaryKey(Integer userid);
    11.  
    12.     int insert(User record);
    13.  
    14.     int insertSelective(User record);
    15.  
    16.     User selectByPrimaryKey(Integer userid);
    17.  
    18.     User queryByName(String userName);
    19.  
    20.     int updateByPrimaryKeySelective(User record);
    21.  
    22.     int updateByPrimaryKey(User record);
    23.  
    24.     Set getRolesByUserId(String userName);
    25.  
    26.     Set getPersByUserId(String userName);
    27. }

    1.2、UserMapper

    1. <?xml version="1.0" encoding="UTF-8" ?>
    2. <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd" >
    3. <mapper namespace="com.ssr.ssm.mapper.UserMapper" >
    4.   <resultMap id="BaseResultMap" type="com.ssr.ssm.model.User" >
    5.     <constructor >
    6.       <idArg column="userid" jdbcType="INTEGER" javaType="java.lang.Integer" />
    7.       <arg column="username" jdbcType="VARCHAR" javaType="java.lang.String" />
    8.       <arg column="password" jdbcType="VARCHAR" javaType="java.lang.String" />
    9.       <arg column="salt" jdbcType="VARCHAR" javaType="java.lang.String" />
    10.       <arg column="createdate" jdbcType="TIMESTAMP" javaType="java.util.Date" />
    11.     </constructor>
    12.   </resultMap>
    13.   <sql id="Base_Column_List" >
    14.     userid, username, password, salt, createdate
    15.   </sql>
    16.   <select id="selectByPrimaryKey" resultMap="BaseResultMap" parameterType="java.lang.Integer" >
    17.     select 
    18.     <include refid="Base_Column_List" />
    19.     from t_shiro_user
    20.     where userid = #{userid,jdbcType=INTEGER}
    21.   </select>
    22.   <select id="queryByName" resultType="com.ssr.ssm.model.User" parameterType="java.lang.String">
    23.     select
    24.     <include refid="Base_Column_List" />
    25.     from t_shiro_user
    26.     where userName = #{userName}
    27.   </select>
    28.  
    29.   <select id="getRolesByUserId" resultType="java.lang.String" parameterType="java.lang.String">
    30.   select ur.roleid from t_shiro_user u,t_shiro_user_role ur,t_shiro_role r
    31.     where u.userid = ur.userid and ur.roleid = r.roleid
    32.     and u.username = #{username}
    33.   </select>
    34.   <select id="getPersByUserId" resultType="java.lang.String" parameterType="java.lang.String">
    35.   select rp.perid from t_shiro_user u,t_shiro_user_role ur,t_shiro_role_permission rp,t_shiro_permission p
    36.   where u.userid = ur.userid and ur.roleid = rp.roleid and rp.perid = p.perid
    37.   and u.username = #{username}
    38.   </select>
    39.  
    40.  
    41.   <delete id="deleteByPrimaryKey" parameterType="java.lang.Integer" >
    42.     delete from t_shiro_user
    43.     where userid = #{userid,jdbcType=INTEGER}
    44.   </delete>
    45.   <insert id="insert" parameterType="com.ssr.ssm.model.User" >
    46.     insert into t_shiro_user (userid, username, password, 
    47.       salt, createdate)
    48.     values (#{userid,jdbcType=INTEGER}, #{username,jdbcType=VARCHAR}, #{password,jdbcType=VARCHAR}, 
    49.       #{salt,jdbcType=VARCHAR}, #{createdate,jdbcType=TIMESTAMP})
    50.   </insert>
    51.   <insert id="insertSelective" parameterType="com.ssr.ssm.model.User" >
    52.     insert into t_shiro_user
    53.     <trim prefix="(" suffix=")" suffixOverrides="," >
    54.       <if test="userid != null" >
    55.         userid,
    56.       </if>
    57.       <if test="username != null" >
    58.         username,
    59.       </if>
    60.       <if test="password != null" >
    61.         password,
    62.       </if>
    63.       <if test="salt != null" >
    64.         salt,
    65.       </if>
    66.       <if test="createdate != null" >
    67.         createdate,
    68.       </if>
    69.     </trim>
    70.     <trim prefix="values (" suffix=")" suffixOverrides="," >
    71.       <if test="userid != null" >
    72.         #{userid,jdbcType=INTEGER},
    73.       </if>
    74.       <if test="username != null" >
    75.         #{username,jdbcType=VARCHAR},
    76.       </if>
    77.       <if test="password != null" >
    78.         #{password,jdbcType=VARCHAR},
    79.       </if>
    80.       <if test="salt != null" >
    81.         #{salt,jdbcType=VARCHAR},
    82.       </if>
    83.       <if test="createdate != null" >
    84.         #{createdate,jdbcType=TIMESTAMP},
    85.       </if>
    86.     </trim>
    87.   </insert>
    88.   <update id="updateByPrimaryKeySelective" parameterType="com.ssr.ssm.model.User" >
    89.     update t_shiro_user
    90.     <set >
    91.       <if test="username != null" >
    92.         username = #{username,jdbcType=VARCHAR},
    93.       </if>
    94.       <if test="password != null" >
    95.         password = #{password,jdbcType=VARCHAR},
    96.       </if>
    97.       <if test="salt != null" >
    98.         salt = #{salt,jdbcType=VARCHAR},
    99.       </if>
    100.       <if test="createdate != null" >
    101.         createdate = #{createdate,jdbcType=TIMESTAMP},
    102.       </if>
    103.     </set>
    104.     where userid = #{userid,jdbcType=INTEGER}
    105.   </update>
    106.   <update id="updateByPrimaryKey" parameterType="com.ssr.ssm.model.User" >
    107.     update t_shiro_user
    108.     set username = #{username,jdbcType=VARCHAR},
    109.       password = #{password,jdbcType=VARCHAR},
    110.       salt = #{salt,jdbcType=VARCHAR},
    111.       createdate = #{createdate,jdbcType=TIMESTAMP}
    112.     where userid = #{userid,jdbcType=INTEGER}
    113.   </update>
    114. </mapper>

    1.3、UserBiz

    1. package com.ssr.ssm.biz;
    2.  
    3. import com.ssr.ssm.model.User;
    4.  
    5. import java.util.Set;
    6.  
    7. /**
    8.  * @author ssr
    9.  * @create 2022-08-25 18:06
    10.  */
    11. public interface UserBiz {
    12.     int deleteByPrimaryKey(Integer userid);
    13.  
    14.     int insert(User record);
    15.  
    16.     int insertSelective(User record);
    17.  
    18.     User selectByPrimaryKey(Integer userid);
    19.  
    20.     User queryByName(String userName);
    21.  
    22.     int updateByPrimaryKeySelective(User record);
    23.  
    24.     int updateByPrimaryKey(User record);
    25.  
    26.     Set getRolesByUserId(String userName);
    27.  
    28.     Set getPersByUserId(String userName);
    29.  
    30. }
    31.

    1.4、UserBizImpl

    1. package com.ssr.ssm.biz.impl;
    2.  
    3. import com.ssr.ssm.biz.UserBiz;
    4. import com.ssr.ssm.mapper.UserMapper;
    5. import com.ssr.ssm.model.User;
    6. import org.springframework.beans.factory.annotation.Autowired;
    7. import org.springframework.stereotype.Service;
    8.  
    9. import java.util.Set;
    10.  
    11. /**
    12.  * @author ssr
    13.  * @create 2022-08-25 18:08
    14.  */
    15. @Service("UserService")
    16. public class UserBizImpl implements UserBiz {
    17.     @Autowired
    18.     private UserMapper userMapper;
    19.  
    20.     @Override
    21.     public int deleteByPrimaryKey(Integer userid) {
    22.         return userMapper.deleteByPrimaryKey(userid);
    23.     }
    24.  
    25.     @Override
    26.     public int insert(User record) {
    27.         return userMapper.insert(record);
    28.     }
    29.  
    30.     @Override
    31.     public int insertSelective(User record) {
    32.         return userMapper.insertSelective(record);
    33.     }
    34.  
    35.     @Override
    36.     public User selectByPrimaryKey(Integer userid) {
    37.         return userMapper.selectByPrimaryKey(userid);
    38.     }
    39.  
    40.     @Override
    41.     public User queryByName(String userName) {
    42.         return userMapper.queryByName(userName);
    43.     }
    44.  
    45.     @Override
    46.     public int updateByPrimaryKeySelective(User record) {
    47.         return userMapper.updateByPrimaryKeySelective(record);
    48.     }
    49.  
    50.     @Override
    51.     public int updateByPrimaryKey(User record) {
    52.         return userMapper.updateByPrimaryKey(record);
    53.     }
    54.  
    55.     @Override
    56.     public Set<String> getRolesByUserId(String userName) {
    57.         return userMapper.getRolesByUserId(userName);
    58.     }
    59.  
    60.     @Override
    61.     public Set<String> getPersByUserId(String userName) {
    62.         return userMapper.getPersByUserId(userName);
    63.     }
    64. }
    65.

    1.5、applicationContext-shiro

    1. "1.0" encoding="UTF-8"?>
    2. <beans xmlns="http://www.springframework.org/schema/beans"
    3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    4.        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
    5.  
    6.     
    7.     <bean id="shiroRealm" class="com.ssr.ssm.shiro.Myrealm">
    8.         <property name="userBiz" ref="UserService" />
    9.         
    10.         
    11.         
    12.         
    13.         <property name="credentialsMatcher">
    14.             <bean id="credentialsMatcher" class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
    15.                 
    16.                 <property name="hashAlgorithmName" value="md5"/>
    17.                 
    18.                 <property name="hashIterations" value="1024"/>
    19.                 
    20.                 <property name="storedCredentialsHexEncoded" value="true"/>
    21.             bean>
    22.         property>
    23.     bean>
    24.  
    25.     
    26.     <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    27.         <property name="realm" ref="shiroRealm" />
    28.     bean>
    29.  
    30.     
    31.     <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    32.         
    33.         <property name="securityManager" ref="securityManager" />
    34.         
    35.         <property name="loginUrl" value="/login"/>
    36.         
    37.         
    38.         
    39.         <property name="unauthorizedUrl" value="/unauthorized.jsp"/>
    40.         
    41.         <property name="filterChainDefinitions">
    42.             <value>
    43.                 
    44.                 
    45.                 
    46.                 
    47.                 /user/login=anon
    48.                 /user/updatePwd.jsp=authc
    49.                 /admin/*.jsp=roles[4]
    50.                 /user/teacher.jsp=perms[2]
    51.                 
    52.             value>
    53.         property>
    54.     bean>
    55.  
    56.     
    57.     <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
    58. beans>

    1.6、Myrealm

    1. package com.ssr.ssm.shiro;
    2.  
    3. import com.ssr.ssm.biz.UserBiz;
    4. import com.ssr.ssm.model.User;
    5. import org.apache.shiro.authc.AuthenticationException;
    6. import org.apache.shiro.authc.AuthenticationInfo;
    7. import org.apache.shiro.authc.AuthenticationToken;
    8. import org.apache.shiro.authc.SimpleAuthenticationInfo;
    9. import org.apache.shiro.authz.AuthorizationInfo;
    10. import org.apache.shiro.authz.SimpleAuthorizationInfo;
    11. import org.apache.shiro.realm.AuthorizingRealm;
    12. import org.apache.shiro.subject.PrincipalCollection;
    13. import org.apache.shiro.util.ByteSource;
    14.  
    15. import java.util.Set;
    16.  
    17. /**
    18.  * @author ssr
    19.  * @create 2022-08-25 18:16
    20.  */
    21. public class Myrealm extends AuthorizingRealm {
    22.     private UserBiz userBiz;
    23.  
    24.     public UserBiz getUserBiz() {
    25.         return userBiz;
    26.     }
    27.  
    28.     public void setUserBiz(UserBiz userBiz) {
    29.         this.userBiz = userBiz;
    30.     }
    31.  
    32.     @Override
    33.     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    34.         System.out.println("用户授权...");
    35.         String username = principals.getPrimaryPrincipal().toString();
    36.         User user = userBiz.queryByName(username);
    37.         Set roles = userBiz.getRolesByUserId(user.getUsername());
    38.         Set pers = userBiz.getPersByUserId(user.getUsername());
    39.         SimpleAuthorizationInfo info=new SimpleAuthorizationInfo();
    40.         info.setRoles(roles);
    41.         info.setStringPermissions(pers);
    42.         return info;
    43.     }
    44.  
    45.     @Override
    46.     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
    47.         System.out.println("身份验证...");
    48.         String username = token.getPrincipal().toString();
    49.         String password = token.getCredentials().toString();
    50.         User user = userBiz.queryByName(username);
    51.         AuthenticationInfo info=new SimpleAuthenticationInfo(
    52.                 user.getUsername(),
    53.                 user.getPassword(),
    54.                 ByteSource.Util.bytes(user.getSalt()),
    55.                 this.getName()
    56.         );
    57.         return info;
    58.     }
    59. }
    60.

     

    2、shiro的注解式开发

    2.1、springmvc-servlet

    1. <?xml version="1.0" encoding="UTF-8"?>
    2. <beans xmlns="http://www.springframework.org/schema/beans"
    3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    4.        xmlns:context="http://www.springframework.org/schema/context"
    5.        xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:aop="http://www.springframework.org/schema/aop"
    6.        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
    7.       http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.3.xsd http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc.xsd http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop.xsd">
    8.     <!-- 通过context:component-scan元素扫描指定包下的控制器-->
    9.     <!--1) 扫描com.javaxl.zf及子子孙孙包下的控制器(扫描范围过大，耗时)-->
    10.     <aop:aspectj-autoproxy/>
    11.     <context:component-scan base-package="com.ssr.ssm"/>
    12.  
    13.     <!--2) 此标签默认注册DefaultAnnotationHandlerMapping和AnnotationMethodHandlerAdapter -->
    14.     <!--两个bean，这两个bean是spring MVC为@Controllers分发请求所必须的。并提供了数据绑定支持，-->
    15.     <!--@NumberFormatannotation支持，@DateTimeFormat支持，@Valid支持，读写XML的支持（JAXB），读写JSON的支持（Jackson）-->
    16.     <mvc:annotation-driven></mvc:annotation-driven>
    17.  
    18.     <!--3) ViewResolver -->
    19.     <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
    20.         <!-- viewClass需要在pom中引入两个包：standard.jar and jstl.jar -->
    21.         <property name="viewClass"
    22.                   value="org.springframework.web.servlet.view.JstlView"></property>
    23.         <property name="prefix" value="/"/>
    24.         <property name="suffix" value=".jsp"/>
    25.     </bean>
    26.  
    27.     <!--4) 单独处理图片、样式、js等资源 -->
    28.     <!--<mvc:resources location="/css/" mapping="/css/**"/>-->
    29.     <!--<mvc:resources location="/images/" mapping="/images/**"/>-->
    30.     <!--<mvc:resources location="/js/" mapping="/js/**"/>-->
    31.     <mvc:resources location="/static/" mapping="/js/**"/>
    32.  
    33.     <!--文件上传：多功能解析器-->
    34.     <bean id="multipartResolver" class="org.springframework.web.multipart.commons.CommonsMultipartResolver">
    35.         <!-- 必须和用户JSP 的pageEncoding属性一致，以便正确解析表单的内容 -->
    36.         <property name="defaultEncoding" value="UTF-8"></property>
    37.         <!-- 文件最大大小(字节) 1024*1024*50=50M-->
    38.         <property name="maxUploadSize" value="52428800"></property>
    39.         <!--resolveLazily属性启用是为了推迟文件解析，以便捕获文件大小异常-->
    40.         <property name="resolveLazily" value="true"/>
    41.     </bean>
    42.  
    43.     <!--配置拦截器-->
    44.     <!--<mvc:interceptors>
    45.         &lt;!&ndash;针对于所有的请求进行拦截&ndash;&gt;
    46.         <bean class="com.ssr.ssm.intercept.OneHandlerInterceptor"></bean>
    47.     </mvc:interceptors>-->
    48.     <!--配置拦截器链-->
    49.    <!-- <mvc:interceptors>
    50.         <mvc:interceptor>
    51.             <mvc:mapping path="/**"/>
    52.             <bean class="com.ssr.ssm.intercept.OneHandlerInterceptor"></bean>
    53.         </mvc:interceptor>
    54.         <mvc:interceptor>
    55.             <mvc:mapping path="/clz/**"/>
    56.             <bean class="com.ssr.ssm.intercept.TwoHandlerInterceptor"></bean>
    57.         </mvc:interceptor>
    58.     </mvc:interceptors>-->
    59.  
    60.     <!--支持json数据返回的适配器-->
    61.     <bean class="org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter">
    62.         <property name="messageConverters">
    63.             <list>
    64.                 <ref bean="mappingJackson2HttpMessageConverter"/>
    65.             </list>
    66.         </property>
    67.     </bean>
    68.     <bean id="mappingJackson2HttpMessageConverter"
    69.           class="org.springframework.http.converter.json.MappingJackson2HttpMessageConverter">
    70.        <!-- 处理中文乱码以及避免IE执行AJAX时，返回JSON出现下载文件-->
    71.         <property name="supportedMediaTypes">
    72.             <list>
    73.                 <value>text/html;charset=UTF-8</value>
    74.                 <value>text/json;charset=UTF-8</value>
    75.                 <value>application/json;charset=UTF-8</value>
    76.             </list>
    77.         </property>
    78.     </bean>
    79.  
    80.     <!--统一异常处理-->
    81.     <!-- springmvc提供的简单异常处理器 -->
    82.     <!--<bean class="org.springframework.web.servlet.handler.SimpleMappingExceptionResolver">
    83.         &lt;!&ndash; 定义默认的异常处理页面 &ndash;&gt;
    84.         <property name="defaultErrorView" value="error"/>
    85.         &lt;!&ndash; 定义异常处理页面用来获取异常信息的变量名，也可不定义，默认名为exception &ndash;&gt;
    86.         <property name="exceptionAttribute" value="ex"/>
    87.         &lt;!&ndash; 定义需要特殊处理的异常，这是重要点 &ndash;&gt;
    88.         <property name="exceptionMappings">
    89.             <props>
    90.                 <prop key="java.lang.RuntimeException">error</prop>
    91.             </props>
    92.             &lt;!&ndash; 还可以定义其他的自定义异常 &ndash;&gt;
    93.         </property>
    94.     </bean>-->
    95.  
    96.     <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"
    97.           depends-on="lifecycleBeanPostProcessor">
    98.         <property name="proxyTargetClass" value="true"></property>
    99.     </bean>
    100.     <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
    101.         <property name="securityManager" ref="securityManager"/>
    102.     </bean>
    103.  
    104.     <bean id="exceptionResolver" class="org.springframework.web.servlet.handler.SimpleMappingExceptionResolver">
    105.         <property name="exceptionMappings">
    106.             <props>
    107.                 <prop key="org.apache.shiro.authz.UnauthorizedException">
    108.                     unauthorized
    109.                 </prop>
    110.             </props>
    111.         </property>
    112.         <property name="defaultErrorView" value="unauthorized"/>
    113.     </bean>
    114.  
    115.  
    116. </beans>
    117.  
    118.

    2.2、shiroController

    1. package com.ssr.ssm.web;
    2.  
    3. import org.apache.shiro.authz.annotation.Logical;
    4. import org.apache.shiro.authz.annotation.RequiresPermissions;
    5. import org.apache.shiro.authz.annotation.RequiresRoles;
    6. import org.apache.shiro.authz.annotation.RequiresUser;
    7. import org.springframework.stereotype.Controller;
    8. import org.springframework.web.bind.annotation.RequestMapping;
    9.  
    10. import javax.servlet.http.HttpServletRequest;
    11.  
    12. /**
    13.  * @author ssr
    14.  * @create 2022-08-26 19:18
    15.  */
    16. @RequestMapping("/shiro")
    17. @Controller
    18. public class ShiroController {
    19.  
    20.     @RequiresUser
    21.     @RequestMapping("/passUser")
    22.     public String passUser(HttpServletRequest request){
    23.         System.out.println("身份认证通过..");
    24.         return "admin/addUser";
    25.     }
    26.  
    27.     @RequiresRoles(value = {"1","4"},logical = Logical.AND)
    28.     @RequestMapping("/passRole")
    29.     public String passRole(HttpServletRequest request){
    30.         System.out.println("角色认证通过..");
    31.         return "admin/addUser";
    32.     }
    33.  
    34.     @RequiresPermissions(value = {"2"},logical = Logical.AND)
    35.     @RequestMapping("/passPermission")
    36.     public String permission(HttpServletRequest request){
    37.         System.out.println("权限认证通过..");
    38.         return "admin/addUser";
    39.     }
    40. }
    41.

     

     

  • 相关阅读:
    Python实现酷炫的动态交互式数据可视化，附代码
    Reggie外卖项目 —— 分类管理模块之分类信息分页查询功能
    MySQL约束constraint
    DHT11数字温湿度传感器（三引脚）与cc2530芯片开发板
    MQ - 10 RocketMQ的架构设计与实现
    docker基础命令
    实战经验分享FastAPI 是什么
    基于单片机的贪吃蛇设计
    java-net-php-python-springboot区校企大型仪器智慧共享平台计算机毕业设计程序
    .NET周报【11月第1期 2022-11-07】
  • 原文地址：https://blog.csdn.net/m0_65774688/article/details/126577607