SpringBoot-shiro搭建环境

最新推荐文章于 2022-09-21 14:28:07 发布

一只小小狗

最新推荐文章于 2022-09-21 14:28:07 发布

阅读量143

点赞数

分类专栏： Springboot 文章标签： shiro spring boot

本文链接：https://blog.youkuaiyun.com/jj89929665/article/details/111186105

版权

Springboot 专栏收录该内容

35 篇文章

订阅专栏

该博客介绍了如何在Spring环境中配置Apache Shiro，包括添加Shiro依赖，创建ShiroFilterFactoryBean，DefaultWebSecurityManager以及自定义Realm的详细步骤。通过配置SecurityManager和Realm，实现了权限管理和认证功能。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1.pom坐标

<!-- shiro整合spring -->
		 <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-spring</artifactId>
            <version>1.4.1</version>
        </dependency>

2.编写config配置类

三个重要的托管
ShiroFilterFactoryBean
DefaultWebSecurityManager
Realm

package com.wjm.config;

import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;


@Configuration
public class ShiroConfig {

	//ShiroFilterFactoryBean  3.
	public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager")DefaultWebSecurityManager defaultWebSecurityManager) {
		ShiroFilterFactoryBean bean = new ShiroFilterFactoryBean();
		
		//关联DefaultWebSecurityManager
		//设置安全管理器
		bean.setSecurityManager(defaultWebSecurityManager);
		
		return bean;
	}

	/**
	 * @Qualifier(“实现类名称”)表明注入的是哪一个实现类的bean
	 */
	//DafaultWebSecurityManager  2.
	@Bean(name = "securityManager")
	public DefaultWebSecurityManager getDefaultWebSecurityManager(@Qualifier("userRealm") UserRealm realm) {
		DefaultWebSecurityManager defaultWebSecurityManager = new DefaultWebSecurityManager();
		
		//关联userRealm
		defaultWebSecurityManager.setRealm(realm);
		
		return defaultWebSecurityManager;
	}
	
	//创建 Realm 对象自定义  1.
	@Bean
	public UserRealm userRealm() {
		return new UserRealm();
	}
}

自定义的Realm

package com.wjm.config;

import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;

/** 
* 自定义的 UserRealm 
* 授权领域
*/
public class UserRealm extends AuthorizingRealm{

	//获取授权信息
	@Override
	protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection arg0) {
		System.out.println("执行了=》授权doGetAuthorizationInfo");
		return null;
	}

	//认证
	@Override
	protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken arg0) throws AuthenticationException {
		System.out.println("执行了=》认证doGetAuthorizationInfo");
		return null;
	}

}