springboot整合shiro的配置类

最新推荐文章于 2024-03-26 20:53:15 发布

艾琉

最新推荐文章于 2024-03-26 20:53:15 发布

阅读量1.5k

点赞数 2

分类专栏： shiro springboot

本文链接：https://blog.youkuaiyun.com/qq_41277773/article/details/89327743

版权

springboot 同时被 2 个专栏收录

8 篇文章

订阅专栏

shiro

2 篇文章

订阅专栏

该博客详细介绍了如何在SpringBoot中配置Shiro，包括ShiroFilterFactoryBean的设置，如权限配置、拦截器、未授权页面以及加密方式。同时，文章也展示了自定义Realm的实现和安全管理配置。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

@Configuration
public class ShiroConfig {
public ShiroConfig(){
System.out.println("ShiroConfig init ......");
}
/**
* shiro过滤器配置
*/
@Bean
public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager){
System.out.println("ShiroConfiguration.shirFilter()");
ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
shiroFilterFactoryBean.setSecurityManager(securityManager);
//拦截器
Map<String,String> filterChainDefinitionMap = new LinkedHashMap<String, String>();
//权限配置
filterChainDefinitionMap.put("/user/adduser","perms[ClinetUser:name]");
//配置不会被拦截的链接顺序判断相关静态资源
filterChainDefinitionMap.put("/assets/**","anon");
filterChainDefinitionMap.put("/css/**","anon");
filterChainDefinitionMap.put("/font/**","anon");
filterChainDefinitionMap.put("/images/**","anon");
filterChainDefinitionMap.put("/js/**","anon");
filterChainDefinitionMap.put("/products/**","anon");
filterChainDefinitionMap.put("/Widget/**","anon");
//配置退出其中退出的代码shiro 已经帮我们实现了
filterChainDefinitionMap.put("/logout","logout");
//所有的url都必须认证通过才可以访问
filterChainDefinitionMap.put("/**","authc");
//未授权界面
shiroFilterFactoryBean.setUnauthorizedUrl("/403");
shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
return shiroFilterFactoryBean;
}
/**
* 加密方式配置
*
*/
@Bean
public HashedCredentialsMatcher hashedCredentialsMatcher(){
HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
hashedCredentialsMatcher.setHashAlgorithmName("md5");
hashedCredentialsMatcher.setHashIterations(2);
return hashedCredentialsMatcher;
}

/**
* 认证器配置
*
*/
@Bean
public MyShiroRelam myShiroRelam(){
MyShiroRelam myShiroRelam = new MyShiroRelam();
return myShiroRelam;
}
/**
* 安全管理配置
*
*/
@Bean
public SecurityManager securityManager(){
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
securityManager.setRealm(myShiroRealm());
return securityManager;
}

private Realm myShiroRealm() {
return myShiroRelam();
}

/**
*开启@RequirePermission注解的配置
* @param securityManager
*
*/
@Bean
public AuthorizationAttributeSourceAdvisor auththorizationAttributeSourceAdvisor(SecurityManager securityManager){
AuthorizationAttributeSourceAdvisor auththorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
auththorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
return auththorizationAttributeSourceAdvisor;
}
}