shiro 内置Realm（IniRealm和JdbcRealm）

最新推荐文章于 2023-02-22 11:29:49 发布

原创最新推荐文章于 2023-02-22 11:29:49 发布 · 729 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#shiro

shiro 专栏收录该内容

7 篇文章

订阅专栏

本文详细介绍了使用Shiro框架进行权限验证的两种方法：通过IniRealm读取ini配置文件进行认证和授权，以及利用JdbcRealm结合自定义SQL查询数据库实现用户认证与权限分配。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

在这里插入图片描述

1、IniRealm

建立ini文件

[users]
Mark=123456,admin
[roles]
admin=user:add,user:delete,user:update,user:select

代码

	// IniRealm 测试
    @Test
    public void testAuthenticationIniRealm () {

        IniRealm iniRealm = new IniRealm("classpath:user.ini");

        DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager();
        defaultSecurityManager.setRealm(iniRealm);

        SecurityUtils.setSecurityManager(defaultSecurityManager);
        Subject subject = SecurityUtils.getSubject();

        UsernamePasswordToken token = new UsernamePasswordToken("Mark", "123456");
        subject.login(token);

        System.out.println("是否认证：" + subject.isAuthenticated());

        subject.checkRole("admin");
        subject.checkPermission("user:delete");

    }

2、jdbcRealm

默认的SQL
在这里插入图片描述


	//创建数据源
    DruidDataSource druidDataSource = new DruidDataSource();

    {
        druidDataSource.setUrl("jdbc:mysql://127.0.0.1:3306/test");
        druidDataSource.setUsername("root");
        druidDataSource.setPassword("root");
    }

    // JdbcRealm 测试 Shiro SQL
    @Test
    public void testAuthenticationShiroSQL() {

        JdbcRealm jdbcRealm = new JdbcRealm();
        jdbcRealm.setDataSource(druidDataSource);
        jdbcRealm.setPermissionsLookupEnabled(true);

        DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager();
        defaultSecurityManager.setRealm(jdbcRealm);

        SecurityUtils.setSecurityManager(defaultSecurityManager);
        Subject subject = SecurityUtils.getSubject();

        UsernamePasswordToken token = new UsernamePasswordToken("xfsy", "xfsy2018");
        subject.login(token);

        System.out.println("是否认证：" + subject.isAuthenticated());

        subject.checkRole("user");
        subject.checkPermission("user:select");

    }

    // JdbcRealm 测试 Custom SQL
    @Test
    public void testAuthenticationCustomSQL() {

        JdbcRealm jdbcRealm = new JdbcRealm();
        jdbcRealm.setDataSource(druidDataSource);
        jdbcRealm.setPermissionsLookupEnabled(true);

        /**
         * @see JdbcRealm
         */
        String sql = "select pwd from tusers where username = ?";
        jdbcRealm.setAuthenticationQuery(sql);
        //角色
        String roleSql = "SELECT ROLE_NAME FROM TEST_USER_ROLE WHERE USER_NAME=?";
        jdbcRealm.setUserRolesQuery(roleSql);
        DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager();
        defaultSecurityManager.setRealm(jdbcRealm);

        SecurityUtils.setSecurityManager(defaultSecurityManager);
        Subject subject = SecurityUtils.getSubject();

        UsernamePasswordToken token = new UsernamePasswordToken("test", "123");
        subject.login(token);
        subject.checkRole("user");
        System.out.println("是否认证：" + subject.isAuthenticated());
    }
    ```