• shiro会话管理

    一、会话管理

    shiro的会话管理具备Tomcat的会话管理的一切功能，同时相较于Tomcat的session，shiro提供了对于分布式session的管理

    1.1会话监听器 

    1. package com.liaoxin.ssm.shiro;
    2.  
    3. import org.apache.shiro.session.Session;
    4. import org.apache.shiro.session.SessionListener;
    5.  
    6. /**
    7.  * @author liaoxin
    8.  * @create 2022-08-27 11:16
    9.  */
    10. public class ShiroSessionListener implements SessionListener {
    11.     @Override
    12.     public void onStart(Session session) {
    13.         System.out.println("ShiroSessionListener.onstart..."+session.getId());
    14.     }
    15.  
    16.     @Override
    17.     public void onStop(Session session) {
    18.         System.out.println("ShiroSessionListener.onStop..."+session.getId());
    19.     }
    20.  
    21.     @Override
    22.     public void onExpiration(Session session) {
    23.         System.out.println("ShiroSessionListener.onExpiration..."+session.getId());
    24.     }
    25. }
    26.

     1.2 Spring-shiro.xml

    1. "1.0" encoding="UTF-8"?>
    2. <beans xmlns="http://www.springframework.org/schema/beans"
    3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    4.        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
    5.  
    6.     
    7.     <bean id="shiroRealm" class="com.liaoxin.ssm.shiro.Myrealm">
    8.         <property name="userBiz" ref="UserService" />
    9.         
    10.         
    11.         
    12.         
    13.         <property name="credentialsMatcher">
    14.             <bean id="credentialsMatcher" class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
    15.                 
    16.                 <property name="hashAlgorithmName" value="md5"/>
    17.                 
    18.                 <property name="hashIterations" value="1024"/>
    19.                 
    20.                 <property name="storedCredentialsHexEncoded" value="true"/>
    21.             bean>
    22.         property>
    23.     bean>
    24.  
    25.  
    26.     
    27.     <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    28.         <property name="realm" ref="shiroRealm" />
    29.         <property name="sessionManager" ref="sessionManager">property>
    30.     bean>
    31.  
    32.     
    33.     <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    34.         
    35.         <property name="securityManager" ref="securityManager" />
    36.         
    37.         <property name="loginUrl" value="/login"/>
    38.         
    39.         
    40.         
    41.         <property name="unauthorizedUrl" value="/unauthorized.jsp"/>
    42.         
    43.         <property name="filterChainDefinitions">
    44.             <value>
    45.                 
    46.                 
    47.                 
    48.                 
    49.                 /user/login=anon
    50.                 /user/updatePwd.jsp=authc
    51.                 /admin/*.jsp=roles[4]
    52.                 /user/teacher.jsp=perms[2]
    53.                 
    54.             value>
    55.         property>
    56.     bean>
    57.  
    58.     
    59.     <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
    60.  
    61.     
    62.     <bean id="sessionIdGenerator" class="org.apache.shiro.session.mgt.eis.JavaUuidSessionIdGenerator">
    63.     bean>
    64.  
    65.     
    66.     <bean id="customSessionDao" class="org.apache.shiro.session.mgt.eis.MemorySessionDAO">
    67.         <property name="sessionIdGenerator" ref="sessionIdGenerator"/>
    68.     bean>
    69.  
    70.     
    71.     <bean id="shiroSessionListener" class="com.liaoxin.ssm.shiro.ShiroSessionListener"/>
    72.  
    73.     
    74.     <bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
    75.         
    76.         <constructor-arg value="shiro.session"/>
    77.         
    78.         <property name="maxAge" value="-1"/>
    79.         
    80.         <property name="httpOnly" value="true"/>
    81.     bean>
    82.  
    83.     
    84.     <bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">
    85.         
    86.         <property name="globalSessionTimeout" value="120000"/>
    87.         
    88.         <property name="sessionDAO" ref="customSessionDao"/>
    89.         
    90.         <property name="sessionValidationInterval" value="60000"/>
    91.         
    92.         
    93.         
    94.         
    95.         
    96.         <property name="deleteInvalidSessions" value="true"/>
    97.         
    98.         <property name="sessionListeners">
    99.             <list>
    100.                 <ref bean="shiroSessionListener"/>
    101.             list>
    102.         property>
    103.         
    104.         <property name="sessionIdCookie" ref="sessionIdCookie"/>
    105.         
    106.         <property name="sessionIdUrlRewritingEnabled" value="false"/>
    107.     bean>
    108.  
    109.     
    110.     <bean id="cacheManagerFactory" class="org.springframework.cache.ehcache.EhCacheManagerFactoryBean">
    111.         <property name="configLocation" value="classpath:ehcache.xml"/>
    112.         <property name="shared" value="true"/>
    113.     bean>
    114.     
    115.     <bean id="cacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
    116.         <property name="cacheManager" ref="cacheManagerFactory"/>
    117.     bean>
    118. beans>
    119.  
    120.

     1.3 测试

    ①当登录发送请求 会执行 监听器中的 onstart
    ②当登出发送请求 会执行 监听器中的 onStop
    ③当检查session过期时，会执行 监听器中的 onExpiration
    ④过期时，需要身份验证才能访问的方法，就不会被允许访问；

     

     

     

    二、缓存管理

    缓存策略

    1.默认基于内存，即服务停止，缓存数据丢失

    2.基于文件存储

    解决反复授权查询数据库的问题

    2.1 初识缓存 

    1. package com.liaoxin.ssm.ehcache;
    2.  
    3. import java.util.HashMap;
    4. import java.util.Map;
    5.  
    6. /**
    7.  * 利用map集合简易实现缓存原理
    8.  * @author Administrator
    9.  *
    10.  */
    11. public class EhcacheDemo1 {
    12. 	static Map cache = new HashMap();
    13. 	static Object getValue(String key) {
    14. 		Object value = cache.get(key);
    15. 		if(value == null) {
    16. 			System.out.println("hello zs");
    17. 			cache.put(key, new String[] {"zs"});
    18. 			return cache.get(key);
    19. 		}
    20. 		return value;
    21. 	}
    22. 	
    23. 	public static void main(String[] args) {
    24. 		System.out.println(getValue("sname"));
    25. 		System.out.println(getValue("sname"));
    26. 	}
    27. }
    28.

    2.2 ehcache.xml介绍

    1. "1.0" encoding="UTF-8"?>
    2. <ehcache xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    3.          xsi:noNamespaceSchemaLocation="http://ehcache.org/ehcache.xsd"
    4.          updateCheck="false">
    5.     
    6.     
    7.     
    8.     <diskStore path="D://xxx"/>
    9.  
    10.  
    11.     
    12.     
    13.     
    14.     
    15.     
    16.     
    17.     
    18.     
    19.     
    20.     
    21.     
    22.     <defaultCache eternal="false" maxElementsInMemory="1000" overflowToDisk="false" diskPersistent="false"
    23.                   timeToIdleSeconds="0" timeToLiveSeconds="600" memoryStoreEvictionPolicy="LRU"/>
    24.  
    25.  
    26.     
    27.     <cache name="com.javaxl.one.entity.User" eternal="false" maxElementsInMemory="100"
    28.            overflowToDisk="true" diskPersistent="true" timeToIdleSeconds="0"
    29.            timeToLiveSeconds="300" memoryStoreEvictionPolicy="LRU"/>
    30. ehcache>
    31.

    2.3 Ehcache的初步使用

    1. package com.liaoxin.ssm.ehcache;
    2.  
    3. import net.sf.ehcache.Cache;
    4. import net.sf.ehcache.CacheManager;
    5. import net.sf.ehcache.Element;
    6.  
    7. import java.io.InputStream;
    8.  
    9. public class EhcacheUtil {
    10.  
    11.     private static CacheManager cacheManager;
    12.  
    13.     static {
    14.         try {
    15.             InputStream is = EhcacheUtil.class.getResourceAsStream("/ehcache.xml");
    16.             cacheManager = CacheManager.create(is);
    17.         } catch (Exception e) {
    18.             throw new RuntimeException(e);
    19.         }
    20.     }
    21.  
    22.     private EhcacheUtil() {
    23.     }
    24.  
    25.     public static void put(String cacheName, Object key, Object value) {
    26.         Cache cache = cacheManager.getCache(cacheName);
    27.         if (null == cache) {
    28.             //以默认配置添加一个名叫cacheName的Cache
    29.             cacheManager.addCache(cacheName);
    30.             cache = cacheManager.getCache(cacheName);
    31.         }
    32.         cache.put(new Element(key, value));
    33.     }
    34.  
    35.  
    36.     public static Object get(String cacheName, Object key) {
    37.         Cache cache = cacheManager.getCache(cacheName);
    38.         if (null == cache) {
    39.             //以默认配置添加一个名叫cacheName的Cache
    40.             cacheManager.addCache(cacheName);
    41.             cache = cacheManager.getCache(cacheName);
    42.         }
    43.         Element element = cache.get(key);
    44.         return null == element ? null : element.getValue();
    45.     }
    46.  
    47.     public static void remove(String cacheName, Object key) {
    48.         Cache cache = cacheManager.getCache(cacheName);
    49.         cache.remove(key);
    50.     }
    51. }
    52.

    演示ehcache的使用

    1. package com.liaoxin.ssm.ehcache;
    2.  
    3.  
    4. /**
    5.  * 演示利用缓存存储数据
    6.  * @author Administrator
    7.  *
    8.  */
    9. public class EhcacheDemo2 {
    10. 	public static void main(String[] args) {
    11. 		System.out.println(System.getProperty("java.io.tmpdir"));
    12. //		EhcacheUtil.put("com.javaxl.four.entity.Book", 11, "zhangsan");
    13. //		System.out.println(EhcacheUtil.get("com.javaxl.four.entity.Book", 11));
    14.  
    15. 		EhcacheUtil.put("com.javaxl.one.entity.User", 11, "zhangsan");
    16. 		System.out.println(EhcacheUtil.get("com.javaxl.one.entity.User", 11));
    17.  
    18. 	}
    19. }
    20.

    2.4 Ehcache完成realm授权

    1. package com.liaoxin.ssm.shiro;
    2.  
    3. import com.liaoxin.ssm.biz.UserBiz;
    4. import com.liaoxin.ssm.ehcache.EhcacheUtil;
    5. import com.liaoxin.ssm.model.User;
    6. import org.apache.shiro.authc.AuthenticationException;
    7. import org.apache.shiro.authc.AuthenticationInfo;
    8. import org.apache.shiro.authc.AuthenticationToken;
    9. import org.apache.shiro.authc.SimpleAuthenticationInfo;
    10. import org.apache.shiro.authz.AuthorizationInfo;
    11. import org.apache.shiro.authz.SimpleAuthorizationInfo;
    12. import org.apache.shiro.realm.AuthorizingRealm;
    13. import org.apache.shiro.subject.PrincipalCollection;
    14. import org.apache.shiro.util.ByteSource;
    15.  
    16. import java.util.Set;
    17.  
    18. /**
    19.  * @author liaoxin
    20.  * @create 2022-08-25 18:16
    21.  */
    22. public class Myrealm extends AuthorizingRealm {
    23.     private UserBiz userBiz;
    24.  
    25.     public UserBiz getUserBiz() {
    26.         return userBiz;
    27.     }
    28.  
    29.     public void setUserBiz(UserBiz userBiz) {
    30.         this.userBiz = userBiz;
    31.     }
    32.  
    33.     @Override
    34.     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    35.         System.out.println("用户授权...");
    36.         String username = principals.getPrimaryPrincipal().toString();
    37.         User user = userBiz.queryByName(username);
    38.         String user_role_key = "user:roles:";
    39.         String user_pers_key = "user:pers:";
    40.         Set roles = userBiz.getRolesByUserId(user.getUsername());
    41.         Set pers = userBiz.getPersByUserId(user.getUsername());
    42.         if(roles == null||roles.size()==0){
    43.             System.out.println("从数据库中获取相关角色信息...");
    44.             roles=userBiz.getRolesByUserId(user.getUsername());
    45.             EhcacheUtil.put(user_role_key+user.getUserid(),user.getUserid(),roles);
    46.         }
    47.         if(pers==null||pers.size()==0){
    48.             System.out.println("从数据库中获取相关权限信息...");
    49.             pers=userBiz.getPersByUserId(user.getUsername());
    50.             EhcacheUtil.put(user_pers_key+user.getUserid(),user.getUserid(),pers);
    51.         }
    52.         SimpleAuthorizationInfo info=new SimpleAuthorizationInfo();
    53.         info.setRoles(roles);
    54.         info.setStringPermissions(pers);
    55.         return info;
    56.     }
    57.  
    58.     @Override
    59.     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
    60.         System.out.println("身份验证...");
    61.         String username = token.getPrincipal().toString();
    62.         String password = token.getCredentials().toString();
    63.         User user = userBiz.queryByName(username);
    64.         AuthenticationInfo info=new SimpleAuthenticationInfo(
    65.                 user.getUsername(),
    66.                 user.getPassword(),
    67.                 ByteSource.Util.bytes(user.getSalt()),
    68.                 this.getName()
    69.         );
    70.         return info;
    71.     }
    72. }
    73.

    测试会发现，只有第一次执行授权方法的时候，才会从数据库中获取用户信息，其他时候都是从缓存中拿数据； 

  • 相关阅读:
    「企企通」完成Pre-D轮融资，加速采购供应链工业软件和 SaaS 网络生态构建
    使用kubeadm快速部署一个k8s集群
    突破卡脖子技术 AVS3标准在世界杯实现移动端规模化商用
    apache 漏洞
    Linux 基础-新手必备命令
    Eureka应用及高可用集群
    [BAT-表姐御用02tree命令】提取目录文件夹及其子文件后，tree形列出
    任务调度之Timer定时器源码分析
    【使用matplotlib】使用函数绘制matplotlib的图片组成元素
    《思科 - GNS3 - Pythonping》
  • 原文地址：https://blog.csdn.net/qq_44247968/article/details/126601129