springboot整合shiro步骤

最新推荐文章于 2023-05-19 22:49:12 发布

原创最新推荐文章于 2023-05-19 22:49:12 发布 · 553 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#spring boot #java #spring

springboot 专栏收录该内容

1 篇文章

订阅专栏

本文详细介绍如何在SpringBoot项目中集成Apache Shiro框架，包括添加依赖、配置基本属性、编写配置类及Realm验证器，并通过示例演示登录流程。

1.创建springboot工程，添加web

在这里插入图片描述

2.在maven工程的pom.xml文件中引入shiro-spring-boot-web-starter依赖

    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-spring-boot-web-starter</artifactId>
            <version>1.9.0</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
    </dependencies>

3.在application.properties中配置shiro基本配置项

shiro.web.enabled=true
shiro.loginUrl=/login

4.创建shiro配置类：ShiroConfig；并Realm和ShiroFilterChainDefinition 两个@Bean

import org.apache.shiro.realm.Realm;
import org.apache.shiro.realm.text.TextConfigurationRealm;
import org.apache.shiro.spring.web.config.DefaultShiroFilterChainDefinition;
import org.apache.shiro.spring.web.config.ShiroFilterChainDefinition;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
public class ShiroConfig {
    @Bean
    Realm realm(){
        TextConfigurationRealm textConfigurationRealm = new TextConfigurationRealm();
        textConfigurationRealm.setUserDefinitions("admin=123,admin \n user=123,user");
        return textConfigurationRealm;
    }
    @Bean
    ShiroFilterChainDefinition shiroFilterChainDefinition(){
        DefaultShiroFilterChainDefinition definition = new DefaultShiroFilterChainDefinition();
        definition.addPathDefinition("/doLogin","anon");
        definition.addPathDefinition("/**","authc");
        return definition;
    }
}

6.编写LoginController类进行测试

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.subject.Subject;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RestController;

@RestController
public class LoginController {
    @GetMapping("/login")
    public String login(){
        return "to doLogin";
    }
    @PostMapping("/doLogin")
    public void doLogin(String username,String password){
        Subject subject = SecurityUtils.getSubject();
        try{
            subject.login(new UsernamePasswordToken(username,password));
            System.out.println("login success");
        }catch (AuthenticationException auth){
            System.out.println(auth.getMessage());
        }
    }
    @GetMapping("/hello")
    public String hello(){
        return "hello shiro";
    }
}