• SSM整合shiro

    1.完成ssm整合shiro

    企业中老项目还在使用ssm框架。

    （1）创建一个maven的web工程。

    （2）ssm整合到web工程

    pom依赖

    1.   <dependencies>
    2.   
    3.   <dependency>
    4.     <groupId>org.springframeworkgroupId>
    5.     <artifactId>spring-webmvcartifactId>
    6.     <version>5.2.15.RELEASEversion>
    7.   dependency>
    8.  
    9.   
    10.   <dependency>
    11.     <groupId>org.mybatisgroupId>
    12.     <artifactId>mybatisartifactId>
    13.     <version>3.5.6version>
    14.   dependency>
    15.  
    16.   
    17.   <dependency>
    18.     <groupId>org.mybatisgroupId>
    19.     <artifactId>mybatis-springartifactId>
    20.     <version>2.0.6version>
    21.   dependency>
    22.  
    23.   
    24.   <dependency>
    25.     <groupId>mysqlgroupId>
    26.     <artifactId>mysql-connector-javaartifactId>
    27.     <version>8.0.28version>
    28.   dependency>
    29.  
    30.   
    31.   <dependency>
    32.     <groupId>com.alibabagroupId>
    33.     <artifactId>druidartifactId>
    34.     <version>1.2.1version>
    35.   dependency>
    36.  
    37.   
    38.   <dependency>
    39.     <groupId>org.projectlombokgroupId>
    40.     <artifactId>lombokartifactId>
    41.     <version>1.18.24version>
    42.   dependency>
    43.  
    44.   
    45.   <dependency>
    46.     <groupId>com.fasterxml.jackson.coregroupId>
    47.     <artifactId>jackson-databindartifactId>
    48.     <version>2.13.2.2version>
    49.   dependency>
    50.  
    51.   
    52.   <dependency>
    53.     <groupId>javax.servletgroupId>
    54.     <artifactId>javax.servlet-apiartifactId>
    55.     <version>4.0.1version>
    56.   dependency>
    57.  
    58.   <dependency>
    59.     <groupId>org.springframeworkgroupId>
    60.     <artifactId>spring-jdbcartifactId>
    61.     <version>5.2.15.RELEASEversion>
    62.   dependency>
    63.   <dependency>
    64.     <groupId>org.springframeworkgroupId>
    65.     <artifactId>spring-txartifactId>
    66.     <version>5.2.15.RELEASEversion>
    67.   dependency>
    68.   <dependency>
    69.     <groupId>org.springframeworkgroupId>
    70.     <artifactId>spring-aspectsartifactId>
    71.     <version>5.2.15.RELEASEversion>
    72.   dependency>
    73.   
    74.   <dependency>
    75.     <groupId>org.mybatis.generatorgroupId>
    76.     <artifactId>mybatis-generator-coreartifactId>
    77.     <version>1.4.0version>
    78.   dependency>
    79.     <dependency>
    80.       <groupId>com.github.pagehelpergroupId>
    81.       <artifactId>pagehelperartifactId>
    82.       <version>5.3.0version>
    83.     dependency>
    84.  
    85.   <dependency>
    86.     <groupId>log4jgroupId>
    87.     <artifactId>log4jartifactId>
    88.     <version>1.2.17version>
    89.   dependency>
    90.  
    91.   dependencies>

    spring配置文件

    2. <beans xmlns="http://www.springframework.org/schema/beans"
    3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    4.        xmlns:context="http://www.springframework.org/schema/context"
    5.        xmlns:aop="http://www.springframework.org/schema/aop" xmlns:tx="http://www.springframework.org/schema/tx"
    6.        xmlns:mvc="http://www.springframework.org/schema/mvc"
    7.        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/context https://www.springframework.org/schema/context/spring-context.xsd http://www.springframework.org/schema/aop https://www.springframework.org/schema/aop/spring-aop.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx.xsd http://www.springframework.org/schema/mvc https://www.springframework.org/schema/mvc/spring-mvc.xsd">
    8.     
    9.     <context:component-scan base-package="com.wzh"/>
    10.  
    11.     
    12.     <mvc:annotation-driven />
    13.  
    14.     
    15.     <mvc:default-servlet-handler/>
    16.     
    17.     <bean id="lifecycleBeanPostProcessor"
    18.           class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />
    19.     <bean  class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"
    20.            depends-on="lifecycleBeanPostProcessor" />
    21.     <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
    22.         <property name="securityManager" ref="securityManager" />
    23.     bean>
    24.     
    25.     <bean id="dataResource" class="com.alibaba.druid.pool.DruidDataSource">
    26.         
    27.         <property name="driverClassName" value="com.mysql.cj.jdbc.Driver"/>
    28.         <property name="url" value="jdbc:mysql://localhost:3306/shiro?serverTimezone=Asia/Shanghai"/>
    29.         <property name="username" value="root"/>
    30.         <property name="password" value="123456"/>
    31.         
    32.         <property name="initialSize" value="10"/>
    33.         
    34.         <property name="minIdle" value="5"/>
    35.         
    36.         <property name="maxActive" value="10"/>
    37.         
    38.         <property name="maxWait" value="2000"/>
    39.     bean>
    40.  
    41.     
    42.     <bean id="transactionManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
    43.         <property name="dataSource" ref="dataResource"/>
    44.     bean>
    45.     
    46.     <tx:annotation-driven transaction-manager="transactionManager"/>
    47.  
    48.     
    49.     <bean id="sqlSessionFactory" class="org.mybatis.spring.SqlSessionFactoryBean">
    50.         <property name="dataSource" ref="dataResource"/>
    51.         
    52.         <property name="mapperLocations" value="classpath:mapper/*.xml"/>
    53.         
    54.         <property name="plugins" >
    55.             <array>
    56.                 <bean class="com.github.pagehelper.PageInterceptor"/>
    57.             array>
    58.         property>
    59.     bean>
    60.     
    61.     <bean class="org.mybatis.spring.mapper.MapperScannerConfigurer">
    62.         <property name="basePackage" value="com.wzh.mapper"/>
    63.     bean>
    64.  
    65.     
    66.  
    67.     
    68.     
    69.     <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    70.         <property name="realm" ref="realm"/>
    71.     bean>
    72.     
    73.     <bean id="realm" class="com.wzh.realm.MyRealm">
    74.         <property name="credentialsMatcher" ref="credentialsMatcher"/>
    75.     bean>
    76.     
    77.     <bean id="credentialsMatcher" class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
    78.         <property name="hashAlgorithmName" value="MD5"/>
    79.         <property name="hashIterations" value="1024"/>
    80.     bean>
    81.  
    82.     
    83.     <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    84.         
    85.         <property name="securityManager" ref="securityManager"/>
    86.         
    88.         
    90.         
    91.         <property name="filterChainDefinitions">
    92.             <value>
    93.                 /login=anon
    94.                 /**=authc
    95.             value>
    96.         property>
    97.         
    98.         <property name="filters">
    99.             <map>
    100.                 <entry key="authc">
    101.                     
    102.                   <bean class="com.wzh.filter.LoginFilter"/>
    103.                 entry>
    104.             map>
    105.         property>
    106.     bean>
    107.  
    108.  
    109. beans>

    web.xml配置文件

    2. <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
    3.          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    4.          xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd"
    5.          version="4.0">
    6.  
    7.     
    8.     <filter>
    9.         <filter-name>shiroFilterfilter-name>
    10.         <filter-class>org.springframework.web.filter.DelegatingFilterProxyfilter-class>
    11.     filter>
    12.     <filter-mapping>
    13.         <filter-name>shiroFilterfilter-name>
    14.         <url-pattern>/*url-pattern>
    15.     filter-mapping>
    16.  
    17.     
    18.     <servlet>
    19.         <servlet-name>DispatcherServletservlet-name>
    20.         <servlet-class>org.springframework.web.servlet.DispatcherServletservlet-class>
    21.         <init-param>
    22.             <param-name>contextConfigLocationparam-name>
    23.             <param-value>classpath:springmvc.xmlparam-value>
    24.         init-param>
    25.         <load-on-startup>1load-on-startup>
    26.     servlet>
    27.     <servlet-mapping>
    28.         <servlet-name>DispatcherServletservlet-name>
    29.         <url-pattern>/url-pattern>
    30.     servlet-mapping>
    31.  
    32.     
    33.     <filter>
    34.         <filter-name>encodingFilterfilter-name>
    35.         <filter-class>org.springframework.web.filter.CharacterEncodingFilterfilter-class>
    36.         <init-param>
    37.             <param-name>encodingparam-name>
    38.             <param-value>utf-8param-value>
    39.         init-param>
    40.     filter>
    41.     <filter-mapping>
    42.         <filter-name>encodingFilterfilter-name>
    43.         <url-pattern>/*url-pattern>
    44.     filter-mapping>
    45.  
    46.  
    47. web-app>

    准备数据库

     数据结构

    张三 -user:query user:add user:update user:delete

    李四 ---》user:query user:add user:update王五-----》user:query user:export

    搭建ssm的环境

    整合shiro

     

            (1)引入shiro的依赖

    1.  
    2.   <dependency>
    3.     <groupId>org.apache.shirogroupId>
    4.     <artifactId>shiro-springartifactId>
    5.     <version>1.9.0version>
    6.   dependency>

            (2)修改spring配置文件

    1.  
    2.     
    3.     <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    4.           <property name="realm" ref="realm"/>
    5.     bean>
    6.     
    7.     <bean id="realm" class="com.ykq.realm.MyRealm">
    8.            <property name="credentialsMatcher" ref="credentialsMatcher"/>
    9.     bean>
    10.  
    11.     
    12.     <bean id="credentialsMatcher" class="org.apache.shiro.authc.credential.HashedCredentialsMatcher">
    13.           <property name="hashAlgorithmName" value="MD5"/>
    14.           <property name="hashIterations" value="1024"/>
    15.     bean>
    16.  
    17.     
    18.     <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
    19.          
    20.          <property name="loginUrl" value="/login.jsp"/>
    21.          
    22.          <property name="unauthorizedUrl" value="/unauthorized.jsp"/>
    23.  
    24.          <property name="filterChainDefinitions">
    25.                <value>
    26.                     /login=anon
    27.                     /**=authc
    28.                value>
    29.          property>
    30.     bean>

    shiro中内置很多过滤器，而每个过滤都有相应的别名.

             (3) 修改web.xml文件

    1.  
    2.     <filter>
    3.         <filter-name>shiroFilterfilter-name>
    4.         <filter-class>org.springframework.web.filter.DelegatingFilterProxyfilter-class>
    5.     filter>
    6.     <filter-mapping>
    7.         <filter-name>shiroFilterfilter-name>
    8.         <url-pattern>/*url-pattern>
    9.     filter-mapping>

    1.1. 进入主页后，不同的用户可以看到不同的内容。

    1. <%--
    2.   Created by IntelliJ IDEA.
    3.   User: m1762
    4.   Date: 2022/8/4
    5.   Time: 22:58
    6.   To change this template use File | Settings | File Templates.
    7. --%>
    8. <%@ page contentType="text/html;charset=UTF-8" language="java" %>
    9. <%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %>
    10. <html>
    11. <head>
    12.     <title>Titletitle>
    13. head>
    14. <body>
    15.     <shiro:hasPermission name="user:query">
    16.         <a href="/query">查询用户a>
    17.     shiro:hasPermission>
    18.     <shiro:hasPermission name="user:add">
    19.         <a href="/add">添加用户a>
    20.     shiro:hasPermission>
    21.     <shiro:hasPermission name="user:delete">
    22.         <a href="/delete">删除用户a>
    23.     shiro:hasPermission>
    24.     <shiro:hasPermission name="user:update">
    25.         <a href="/update">修改用户a>
    26.     shiro:hasPermission>
    27.     <shiro:hasPermission name="user:export">
    28.         <a href="/export">导出用户a>
    29.     shiro:hasPermission>
    30. body>
    31. html>

     

     可以在jsp中获取当前登录者的账号

    <h1>欢迎<shiro:principal property="username"/>来到主页h1>

     上面只是在网页中根据不同用户显示不同的菜单，这种方式只能防君子不能防小人。因为现在依旧可以通过postman访问没有的权限方法  比如张三可以访问到user:export路径

    解决办法:

    1. 拦截器---获取请求路径 然后根据你的路径判断当前用户是否具有该权限。

    2. spring整合shiro时提供了一个注解：可以加载相应方法上。

    使用注解:

    1.springmvc.xml中启动shiro的注解

    1.  
    2.     <bean id="lifecycleBeanPostProcessor"
    3.           class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />
    4.     <bean  class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"
    5.            depends-on="lifecycleBeanPostProcessor" />
    6.     <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
    7.         <property name="securityManager" ref="securityManager" />
    8.     bean>

    (2)使用注解

     

    这个太丑了，我们想要跳转一个页面，

    我们之前学过全局异常处理:    没有登录会报这个异常

     

     

     

    2.ssm整合shiro完成前后端分离

    所谓前后端完全分离:后端响应的都是json数据，而不再是网页。  

    我们需要修改的就是:

    1. 登录成功或者失败应该返回json数据
    2. 当未登录时返回的也是json数据
    3. 访问未授权的资源，也要分会json。

    2.1.登录成功或者失败应该返回json数据

    修改登录接口

     

    2.2 当未登录时返回的也是json数据

    （1）创建一个过滤器，继承登录校验的FormAuthenticationFilter接口。

    1. package com.wzh.filter;
    2.  
    3. import com.fasterxml.jackson.databind.ObjectMapper;
    4. import com.wzh.utils.CommonResult;
    5. import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
    6.  
    7. import javax.servlet.ServletRequest;
    8. import javax.servlet.ServletResponse;
    9. import java.io.PrintWriter;
    10.  
    11. /**
    12.  * @ProjectName: shiro-ssm0805
    13.  * @Package: com.wzh.filter
    14.  * @ClassName: LoginFilter
    15.  * @Author: 王振华
    16.  * @Description:
    17.  * @Date: 2022/8/5 16:58
    18.  * @Version: 1.0
    19.  */
    20. public class LoginFilter extends FormAuthenticationFilter {
    21.     /**
    22.      * 当没有登录时会经过该方法，如果想让它返回json数据必须重写onAccessDenied这个方法
    23.      * @param request
    24.      * @param response
    25.      * @return
    26.      * @throws Exception
    27.      */
    28.     @Override
    29.     protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
    30.         response.setContentType("application/json;charset=utf-8");
    31.         PrintWriter writer = response.getWriter();
    32.         CommonResult commonResult = CommonResult.UNLOGIN;
    33.         //jackson中内置对象   将java对象转为json对象
    34.         ObjectMapper objectMapper = new ObjectMapper();
    35.         String json = objectMapper.writeValueAsString(commonResult);
    36.         //响应给客户json数据
    37.         writer.print(json);
    38.         writer.flush();
    39.         writer.close();
    40.         return false;
    41.     }
    42. }

    之前默认是在springmvc.xml中配置的跳转页面

    （2） 注册我们的过滤器

     

     2.3 如果没有权限应该返回json数据

     

    3.项目完整代码

    项目结构:

     

    Controller层:

     UserController:    用于登录    调用login方法判断是否身份认证  授权

    1. package com.wzh.controller;
    2.  
    3. import com.wzh.utils.CommonResult;
    4. import org.apache.shiro.SecurityUtils;
    5. import org.apache.shiro.authc.UsernamePasswordToken;
    6. import org.apache.shiro.subject.Subject;
    7. import org.springframework.stereotype.Controller;
    8. import org.springframework.web.bind.annotation.PostMapping;
    9. import org.springframework.web.bind.annotation.RequestMapping;
    10. import org.springframework.web.bind.annotation.RestController;
    11.  
    12. /**
    13.  * @ProjectName: ssm-shiro
    14.  * @Package: com.wzh.controller
    15.  * @ClassName: UserController
    16.  * @Author: 王振华
    17.  * @Description:
    18.  * @Date: 2022/8/4 22:07
    19.  * @Version: 1.0
    20.  */
    21. @RestController
    22. public class UserController {
    23.     @RequestMapping("login")
    24.     public CommonResult login(String username,String password){
    25.         System.out.println(username);
    26.         //获取subject主体对象
    27.         Subject subject = SecurityUtils.getSubject();
    28.         UsernamePasswordToken token = new UsernamePasswordToken(username, password);
    29.         try{
    30.             subject.login(token);
    31.             System.out.println("是否身份认证:"+subject.isAuthenticated());
    32.             System.out.println("是否授权:"+subject.isPermitted("查询"));
    33.             System.out.println("是否授权:"+subject.isPermitted("添加"));
    34.             System.out.println("是否授权:"+subject.isPermitted("修改"));
    35.             System.out.println("是否授权:"+subject.isPermitted("删除"));
    36.             System.out.println("是否授权:"+subject.isPermitted("导出"));
    37.             System.out.println("是否授权:"+subject.hasRole("超级管理员"));
    38.             System.out.println("是否授权:"+subject.hasRole("管理员"));
    39.             System.out.println("是否授权:"+subject.hasRole("用户"));
    40.  
    41.  
    42.             return CommonResult.LOGIN_SUCCESS;
    43.         }catch (Exception e){
    44.             e.printStackTrace();
    45.             return CommonResult.LOGIN_ERROR;
    46.         }
    47.     }
    48. }

    PermissionController:      用于登录之后查看是否授权

    1. package com.wzh.controller;
    2.  
    3. import com.wzh.utils.CommonResult;
    4. import org.apache.shiro.authz.annotation.Logical;
    5. import org.apache.shiro.authz.annotation.RequiresPermissions;
    6. import org.springframework.web.bind.annotation.GetMapping;
    7. import org.springframework.web.bind.annotation.RequestMapping;
    8. import org.springframework.web.bind.annotation.RestController;
    9.  
    10. /**
    11.  * @ProjectName: shiro-ssm0805
    12.  * @Package: com.wzh.controller
    13.  * @ClassName: PermissionController
    14.  * @Author: 王振华
    15.  * @Description:
    16.  * @Date: 2022/8/5 9:57
    17.  * @Version: 1.0
    18.  */
    19. @RestController
    20. public class PermissionController {
    21.  
    22.     @GetMapping("/query")
    23.     //使用shiro注解
    24.     @RequiresPermissions(value = {"user:query","user:aaa"},logical = Logical.OR)
    25.     public String query(){
    26.         return "query";
    27.     }
    28.     @RequestMapping("/add")
    29.     @RequiresPermissions(value = {"user:add"})
    30.     public String add(){
    31.         return "add";
    32.     }
    33.     @RequestMapping("/delete")
    34.     @RequiresPermissions(value = {"user:delete"})
    35.     public String delete(){
    36.         return "delete";
    37.     }
    38.     @RequestMapping("/update")
    39.     @RequiresPermissions(value = {"user:update"})
    40.     public String update(){
    41.         return "update";
    42.     }
    43.     @RequestMapping("/export")
    44.     @RequiresPermissions(value = {"user:export"})
    45.     public String export(){
    46.         return "export";
    47.     }
    48. }

    service层:

    UserService:

    1. package com.wzh.service;
    2.  
    3. import com.wzh.entity.User;
    4.  
    5. import java.util.List;
    6.  
    7. /**
    8.  * @ProjectName: ssm-shiro
    9.  * @Package: com.wzh.service
    10.  * @ClassName: UserService
    11.  * @Author: 王振华
    12.  * @Description:
    13.  * @Date: 2022/8/4 22:19
    14.  * @Version: 1.0
    15.  */
    16. public interface UserService {
    17.     User findByUsername(String username);
    18.  
    19. }

    PermissionService:

    1. package com.wzh.service;
    2.  
    3. import java.util.List;
    4.  
    5. /**
    6.  * @ProjectName: ssm-shiro
    7.  * @Package: com.wzh.service
    8.  * @ClassName: PermissionService
    9.  * @Author: 王振华
    10.  * @Description:
    11.  * @Date: 2022/8/4 22:27
    12.  * @Version: 1.0
    13.  */
    14. public interface PermissionService {
    15.  
    16.  
    17.     List findPermissionById(Integer userid);
    18. }

    RoleService:

    1. package com.wzh.service;
    2.  
    3. import java.util.List;
    4.  
    5. /**
    6.  * @ProjectName: ssm-shiro
    7.  * @Package: com.wzh.service
    8.  * @ClassName: RoleService
    9.  * @Author: 王振华
    10.  * @Description:
    11.  * @Date: 2022/8/4 22:27
    12.  * @Version: 1.0
    13.  */
    14. public interface RoleService {
    15.  
    16.     List findRolesById(Integer userid);
    17. }

    UserServiceImpl:

    1. package com.wzh.service.impl;
    2.  
    3. import com.wzh.entity.User;
    4. import com.wzh.mapper.UserMapper;
    5. import com.wzh.service.UserService;
    6. import org.springframework.beans.factory.annotation.Autowired;
    7. import org.springframework.stereotype.Service;
    8.  
    9. import java.util.List;
    10.  
    11. /**
    12.  * @ProjectName: ssm-shiro
    13.  * @Package: com.wzh.service.impl
    14.  * @ClassName: UserServiceImpl
    15.  * @Author: 王振华
    16.  * @Description:
    17.  * @Date: 2022/8/4 22:20
    18.  * @Version: 1.0
    19.  */
    20. @Service
    21. public class UserServiceImpl implements UserService {
    22.     @Autowired
    23.     private UserMapper userMapper;
    24.  
    25.     @Override
    26.     public User findByUsername(String username) {
    27.         if(username!=null&&username!="") {
    28.             User user = userMapper.selectByUsername(username);
    29.             return user;
    30.         }
    31.         return null;
    32.     }
    33.  
    34.  
    35. }

    PermissionServiceImpl:

    1. package com.wzh.service.impl;
    2.  
    3. import com.wzh.mapper.PermissionMapper;
    4. import com.wzh.service.PermissionService;
    5. import org.springframework.beans.factory.annotation.Autowired;
    6. import org.springframework.stereotype.Service;
    7.  
    8. import java.util.ArrayList;
    9. import java.util.List;
    10.  
    11. /**
    12.  * @ProjectName: ssm-shiro
    13.  * @Package: com.wzh.service.impl
    14.  * @ClassName: PermissionServiceImpl
    15.  * @Author: 王振华
    16.  * @Description:
    17.  * @Date: 2022/8/4 22:28
    18.  * @Version: 1.0
    19.  */
    20. @Service
    21. public class PermissionServiceImpl implements PermissionService {
    22.     @Autowired
    23.     private PermissionMapper permissionMapper;
    24.  
    25.  
    26.     @Override
    27.     public List findPermissionById(Integer userid) {
    28.         List list = permissionMapper.selectByUserId(userid);
    29.         return list;
    30.     }
    31. }

    RoleServiceImpl:

    1. package com.wzh.service.impl;
    2.  
    3. import com.wzh.mapper.RoleMapper;
    4. import com.wzh.service.RoleService;
    5. import org.springframework.beans.factory.annotation.Autowired;
    6. import org.springframework.stereotype.Service;
    7.  
    8. import java.util.List;
    9.  
    10. /**
    11.  * @ProjectName: ssm-shiro
    12.  * @Package: com.wzh.service.impl
    13.  * @ClassName: RoleServiceImpl
    14.  * @Author: 王振华
    15.  * @Description:
    16.  * @Date: 2022/8/4 22:28
    17.  * @Version: 1.0
    18.  */
    19. @Service
    20. public class RoleServiceImpl implements RoleService {
    21.     @Autowired
    22.     private RoleMapper roleMapper;
    23.     @Override
    24.     public List findRolesById(Integer userid) {
    25.         List list = roleMapper.selectByUserId(userid);
    26.         return list;
    27.     }
    28. }

    mapper层:

    UserMapper:

    1. package com.wzh.mapper;
    2.  
    3. import com.wzh.entity.User;
    4.  
    5. import java.util.List;
    6.  
    7. /**
    8.  * @ProjectName: ssm-shiro
    9.  * @Package: com.wzh.mapper
    10.  * @ClassName: UserMapper
    11.  * @Author: 王振华
    12.  * @Description:
    13.  * @Date: 2022/8/4 22:21
    14.  * @Version: 1.0
    15.  */
    16. public interface UserMapper {
    17.     User selectByUsername(String username);
    18.  
    19.  
    20. }

    PermissionMapper:

    1. package com.wzh.mapper;
    2.  
    3. import java.util.List;
    4.  
    5. /**
    7. @ProjectName: ssm-shiro
    8. @Package: com.wzh.mapper
    9. @ClassName: PermissionMapper
    10. @Author: 王振华
    11. @Description: 
    12. @Date: 2022/8/4 22:21
    13. @Version: 1.0
    14. */
    15. public interface PermissionMapper {
    16.     List selectByUserId(Integer userid);
    17. }

    RoleMapper:

    1. package com.wzh.mapper;
    2.  
    3. import java.util.List;
    4.  
    5. /**
    6.  * @ProjectName: ssm-shiro
    7.  * @Package: com.wzh.mapper
    8.  * @ClassName: RoleMapper
    9.  * @Author: 王振华
    10.  * @Description:
    11.  * @Date: 2022/8/4 22:21
    12.  * @Version: 1.0
    13.  */
    14.  
    15. public interface RoleMapper {
    16.     List selectByUserId(Integer userid);
    17. }

    entity层:

    User:

    1. package com.wzh.entity;
    2.  
    3. import lombok.AllArgsConstructor;
    4. import lombok.Data;
    5. import lombok.NoArgsConstructor;
    6.  
    7. import javax.management.relation.Role;
    8.  
    9. /**
    10.  * @ProjectName: ssm-shiro
    11.  * @Package: com.wzh.entity
    12.  * @ClassName: User
    13.  * @Author: 王振华
    14.  * @Description:
    15.  * @Date: 2022/8/4 22:19
    16.  * @Version: 1.0
    17.  */
    18. @Data
    19. @NoArgsConstructor
    20. @AllArgsConstructor
    21. public class User {
    22.     private Integer userid;
    23.  
    24.     private String username;
    25.  
    26.     private String userpwd;
    27.  
    28.     private String sex;
    29.  
    30.     private String address;
    31.  
    32.     private String salt;
    33.     private Permission permission;
    34.     private Role role;
    35. }

    Permission:

    1. package com.wzh.entity;
    2.  
    3. import lombok.AllArgsConstructor;
    4. import lombok.Data;
    5. import lombok.NoArgsConstructor;
    6.  
    7. /**
    8.  * @ProjectName: ssm-shiro
    9.  * @Package: com.wzh.entity
    10.  * @ClassName: Permission
    11.  * @Author: 王振华
    12.  * @Description:
    13.  * @Date: 2022/8/4 22:22
    14.  * @Version: 1.0
    15.  */
    16. @Data
    17. @NoArgsConstructor
    18. @AllArgsConstructor
    19. public class Permission {
    20.     private Integer perid;
    21.  
    22.     private String pername;
    23.  
    24.     private String percode;
    25. }

    Role:

    1. package com.wzh.entity;
    2.  
    3. import lombok.AllArgsConstructor;
    4. import lombok.Data;
    5. import lombok.NoArgsConstructor;
    6.  
    7. /**
    8.  * @ProjectName: ssm-shiro
    9.  * @Package: com.wzh.entity
    10.  * @ClassName: Role
    11.  * @Author: 王振华
    12.  * @Description:
    13.  * @Date: 2022/8/4 22:22
    14.  * @Version: 1.0
    15.  */
    16. @Data
    17. @NoArgsConstructor
    18. @AllArgsConstructor
    19. public class Role {
    20.     private Integer roleid;
    21.  
    22.     private String rolename;
    23. }

    filter:

    LoginFilter:   用于未登录返回json数据

    1. package com.wzh.filter;
    2.  
    3. import com.fasterxml.jackson.databind.ObjectMapper;
    4. import com.wzh.utils.CommonResult;
    5. import org.apache.shiro.web.filter.authc.FormAuthenticationFilter;
    6.  
    7. import javax.servlet.ServletRequest;
    8. import javax.servlet.ServletResponse;
    9. import java.io.PrintWriter;
    10.  
    11. /**
    12.  * @ProjectName: shiro-ssm0805
    13.  * @Package: com.wzh.filter
    14.  * @ClassName: LoginFilter
    15.  * @Author: 王振华
    16.  * @Description:
    17.  * @Date: 2022/8/5 16:58
    18.  * @Version: 1.0
    19.  */
    20. public class LoginFilter extends FormAuthenticationFilter {
    21.     /**
    22.      * 当没有登录时会经过该方法，如果想让它返回json数据必须重写onAccessDenied这个方法
    23.      * @param request
    24.      * @param response
    25.      * @return
    26.      * @throws Exception
    27.      */
    28.     @Override
    29.     protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
    30.         response.setContentType("application/json;charset=utf-8");
    31.         PrintWriter writer = response.getWriter();
    32.         CommonResult commonResult = CommonResult.UNLOGIN;
    33.         //jackson中内置对象   将java对象转为json对象
    34.         ObjectMapper objectMapper = new ObjectMapper();
    35.         String json = objectMapper.writeValueAsString(commonResult);
    36.         //响应给客户json数据
    37.         writer.print(json);
    38.         writer.flush();
    39.         writer.close();
    40.         return false;
    41.     }
    42. }

    handler：  全局异常处理类   用户没有权限返回json数据给前端

    MyException:

    1. package com.wzh.handler;
    2.  
    3. import com.wzh.utils.CommonResult;
    4. import org.apache.shiro.authz.UnauthorizedException;
    5. import org.springframework.web.bind.annotation.ControllerAdvice;
    6. import org.springframework.web.bind.annotation.ExceptionHandler;
    7. import org.springframework.web.bind.annotation.ResponseBody;
    8.  
    9. /**
    10.  * @ProjectName: shiro-ssm0805
    11.  * @Package: com.wzh.handler
    12.  * @ClassName: MyException
    13.  * @Author: 王振华
    14.  * @Description:
    15.  * @Date: 2022/8/5 16:42
    16.  * @Version: 1.0
    17.  */
    18. @ControllerAdvice   //异常处理类
    19. public class MyException {
    20.     //当发生该异常时触发该方法
    21.     @ExceptionHandler(value = UnauthorizedException.class)
    22.     @ResponseBody
    23.     public CommonResult Unauth(UnauthorizedException e){
    24.         e.printStackTrace();
    25.         return CommonResult.UNAUTHORIZED;
    26.     }
    27. }

    realm:   自定义的认证授权规则

    MyRealm:

    1. package com.wzh.realm;
    2.  
    3.  
    4. import com.wzh.entity.User;
    5. import com.wzh.service.PermissionService;
    6. import com.wzh.service.RoleService;
    7. import com.wzh.service.UserService;
    8. import org.apache.shiro.authc.AuthenticationException;
    9. import org.apache.shiro.authc.AuthenticationInfo;
    10. import org.apache.shiro.authc.AuthenticationToken;
    11. import org.apache.shiro.authc.SimpleAuthenticationInfo;
    12. import org.apache.shiro.authz.AuthorizationInfo;
    13. import org.apache.shiro.authz.SimpleAuthorizationInfo;
    14. import org.apache.shiro.realm.AuthorizingRealm;
    15. import org.apache.shiro.subject.PrincipalCollection;
    16. import org.apache.shiro.util.ByteSource;
    17. import org.springframework.beans.factory.annotation.Autowired;
    18.  
    19. import java.util.List;
    20.  
    21. /**
    22.  * @ProjectName: shiro
    23.  * @Package: com.wzh.demo02
    24.  * @ClassName: MyRealm
    25.  * @Author: 王振华
    26.  * @Description:
    27.  * @Date: 2022/8/4 19:44
    28.  * @Version: 1.0
    29.  */
    30. public class MyRealm extends AuthorizingRealm {
    31.     @Autowired
    32.     private UserService userService;
    33.  
    34.     @Autowired
    35.     private PermissionService permissionService;
    36.  
    37.     @Autowired
    38.     private RoleService roleService;
    39.  
    40.     @Override
    41.     //该方法用于完成认证的功能
    42.     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
    43.         //1.根据token获取账号
    44.         String username = (String) authenticationToken.getPrincipal();
    45.         /**
    46.          * 以前登陆的逻辑是  把用户和密码全部发到数据库  去匹配
    47.          * 在shrio里面是先根据用户名把用户对象查询出来，再来做密码匹配
    48.          */
    49.  
    50.         //2.根据账号查询用户信息
    51.         User user = userService.findByUsername(username);
    52.         //表示该用户名在数据库中存在
    53.         if(user!=null){
    54.             /**
    55.              * 参数说明
    56.              * 参数1:可以传到任意对象
    57.              * 参数2:从数据库里面查询出来的密码
    58.              * 参数3:盐
    59.              * 参数4:当前类名
    60.              */
    61.             ByteSource credentialsSalt = ByteSource.Util.bytes(user.getSalt());
    62.             SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(user, user.getUserpwd(),credentialsSalt,this.getName());
    63.             return info;
    64.         }
    65.         //用户不存在  shiro会抛 UnknowAccountException
    66.         return null;
    67.     }
    68.  
    69.  
    70.  
    71.     //授权
    72.     @Override
    73.     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
    74.         User user = (User) principalCollection.getPrimaryPrincipal();
    75.         SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
    76.         //根据账号查找该用户具有哪些权限
    77.         List list = permissionService.findPermissionById(user.getUserid());
    78.         if(list!=null&&list.size()>0){
    79.             info.addStringPermissions(list);
    80.         }
    81.         List roles = roleService.findRolesById(user.getUserid());
    82.         if(roles!=null&&roles.size()>0){
    83.             info.addRoles(roles);
    84.         }
    85.         return info;
    86.  
    87.     }
    88.  
    89.  
    90. }

    util:

    CommonResult:

    1. package com.wzh.utils;
    2.  
    3. import lombok.AllArgsConstructor;
    4. import lombok.Data;
    5. import lombok.NoArgsConstructor;
    6.  
    7. /**
    8.  * @ProjectName: shiro-ssm0805
    9.  * @Package: com.wzh.utils
    10.  * @ClassName: CommonResult
    11.  * @Author: 王振华
    12.  * @Description:
    13.  * @Date: 2022/8/5 11:02
    14.  * @Version: 1.0
    15.  */
    16. @Data
    17. @NoArgsConstructor
    18. @AllArgsConstructor
    19. public class CommonResult {
    20.     public static final CommonResult UNLOGIN = new CommonResult(403,"未登录",null);
    21.     public static final CommonResult UNAUTHORIZED = new CommonResult(405,"未授权",null);
    22.     public static final CommonResult LOGIN_SUCCESS = new CommonResult(200,"登录成功",null);
    23.     public static final CommonResult LOGIN_ERROR = new CommonResult(-1,"登录失败",null);
    24.     private Integer code;
    25.  
    26.     private String msg;
    27.  
    28.     private Object data;
    29.  
    30. }

     

  • 相关阅读:
    Java集合Map接口详解——含源码分析
    【论文翻译】分布式数据库系统中的并发控制
    第1章 数据结构的概念
    为什么在listview上只显示一行，不论list有几个数据，都只显示第一行的
    VMware-vSphere 文档
    推荐两款不错的打字练习网站~
    个人述职报告
    csmall-passport(Day15)
    [附源码]计算机毕业设计JAVA校园失物招领平台
    代码随想录算法训练营第一天 | 704. 二分查找、27. 移除元素
  • 原文地址：https://blog.csdn.net/weixin_68509156/article/details/126186110