MonitorRealm;

package org.seven.MonitorRealm;


import java.util.HashSet;
import java.util.List;
import java.util.Set;


import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.seven.bean.ShiroUser;
import org.seven.service.UserServiceImp;
import org.seven.util.BlankUtil;
import org.springframework.beans.factory.annotation.Autowired;




public class MonitorRealm extends AuthorizingRealm {
@Autowired
private UserServiceImp service;

/*
* 验证当前用户的用户
* 
*/
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
// TODO Auto-generated method stub
try {
String username = (String)token.getPrincipal();
ShiroUser user = service.login(username);
if(user!=null){
AuthenticationInfo authinfo=new  SimpleAuthenticationInfo(user.getUsername(), user.getPassword(),"xx");
// 身份认证
return authinfo;
}else{
return null;
}

} catch (Exception e) {
e.printStackTrace();
}
return null;
}

/*
* 为当前登录用户授权
*/

@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
// TODO Auto-generated method stub
String username = (String) principals.getPrimaryPrincipal();
// 权限认证
SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
//放置角色名
Set<String> roleSet=new HashSet<String>();
//放置权限
Set<String> permissionSet=new HashSet<String>();

List<ShiroUser> roles = service.getRoles(username);
List<ShiroUser> permission = service.getPermission(username);
for (ShiroUser shiroUser : permission) {
String pname = shiroUser.getPname();
System.out.println(pname+"pname");
permissionSet.add(pname);

}

for (ShiroUser shiroUser : roles) {
String role_name = shiroUser.getRole_name();
System.out.println(role_name+"role_name");
roleSet.add(shiroUser.getRole_name());
}



System.out.println(roleSet+"roleSet");
System.out.println(permissionSet+"permissionSet");
authorizationInfo.setRoles(roleSet);  
    authorizationInfo.setStringPermissions(permissionSet);  




// 设置当前用户的角色
// 设置权限

return authorizationInfo;

}



}