基于Spring框架的Shiro配置

最新推荐文章于 2020-05-28 10:24:00 发布

原创最新推荐文章于 2020-05-28 10:24:00 发布 · 195 阅读

·

0

·

本内容遵循CC 4.0 BY-SA版权协议

版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。

收录于

Java

本文详细介绍了如何在web.xml文件中添加Shiro过滤器，通过Spring的applicationContext.xml文件进行Shiro配置，包括添加ShiroFilter定义、securityManager定义以及realm定义，并实现MyRealm类来实现认证授权过程。

一、在web.xml中添加shiro过滤器

< filter >
< filter-name > shiroFilter </ filter-name >
< filter-class >
org.springframework.web.filter.DelegatingFilterProxy
</ filter-class >
</ filter >
< filter-mapping >
< filter-name > shiroFilter </ filter-name >
< url-pattern > /* </ url-pattern >
</ filter-mapping >

二、在Spring的applicationContext.xml中添加shiro配置
1、添加shiroFilter定义

< bean id = "shiroFilter" class = "org.apache.shiro.spring.web.ShiroFilterFactoryBean" >
< property name = "securityManager" ref = "securityManager" />
< property name = "loginUrl" value = "/login" />
< property name = "successUrl" value = "/user/list" />
< property name = "unauthorizedUrl" value = "/login" />
< property name = "filterChainDefinitions" >
< value >
/login = anon
/user/** = authc
/role/edit/* = perms[role:edit]
/role/save = perms [role:edit]
/role/list = perms [role:view]
/** = authc
</ value >
</ property >
</ bean >

2、添加securityManager定义

< bean id = "securityManager" class = "org.apache.shiro.web.mgt.DefaultWebSecurityManager" >
< property name = "realm" ref = "myRealm" />
</ bean >

3、添加realm定义

< bean id = " myRealm" class = "com...MyRealm" />

三、实现MyRealm：继承AuthorizingRealm，并重写认证授权方法

public class MyRealm extends AuthorizingRealm{
private AccountManager accountManager;
public void setAccountManager(AccountManager accountManager) {
this .accountManager = accountManager;
}
/**
* 授权信息
*/
protected AuthorizationInfo doGetAuthorizationInfo(
PrincipalCollection principals) {
String username=(String)principals.fromRealm(getName()).iterator().next();
if ( username != null ){
User user = accountManager.get( username );
if ( user != null && user.getRoles() != null ){
SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
for ( SecurityRole each: user.getRoles() ){
info.addRole(each.getName());
info.addStringPermissions(each.getPermissionsAsString());
}
return info;
}
}
return null ;
}
/**
* 认证信息
*/
protected AuthenticationInfo doGetAuthenticationInfo(
AuthenticationToken authcToken ) throws AuthenticationException {
UsernamePasswordToken token = (UsernamePasswordToken) authcToken;
String userName = token.getUsername();
if ( userName != null && ! "" .equals(userName) ){
User user = accountManager.login(token.getUsername(),
String.valueOf(token.getPassword()));
if ( user != null )
return new SimpleAuthenticationInfo(
user.getLoginName(),user.getPassword(), getName());
}
return null ;
}
}

参考资料：让Apache Shiro保护你的应用

(http://kdboy.iteye.com/blog/1103794)

标签

#java #web.xml

评论

被折叠的条评论为什么被折叠?

到【灌水乐园】发言

查看更多评论

添加红包

成就一亿技术人!

hope_wisdom

发出的红包

实付元

使用余额支付

点击重新获取

扫码支付

钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。