Shiro权限管理与Thymeleaf集成-优快云博客

本文链接：https://blog.youkuaiyun.com/qq_43580281/article/details/85256456

1.查找用户列表，并添加到当前session中

@Controller
	public class HomeController {
	    @Autowired
	    private SysUserService sysUserService;
	    @RequestMapping({"/","/index"})
	    public String index(HttpServletRequest request){
	        //通过安全管理工具，获取用户对象
	        Subject subject = SecurityUtils.getSubject();
	        //获取用户身份-------用户名
	        String username = (String)subject.getPrincipal();
	        //获取当前对象所在的session
	        Session session = subject.getSession();
	        //获取权限列表
	        List<SysPermission> permissionList = sysUserService.findPermission(username);
	        //添加权限列表到session回话中
	        session.setAttribute("menuList",permissionList);
	        return "index";
	    }
	}

2.index.html 使用th显示权限列表菜单

<!DOCTYPE html>
	<html xmlns:th="http://www.thymeleaf.org">
		<head>
		    <meta charset="UTF-8">
		    <title>Title</title>
		</head>
		<body>
		    index
		
		    <table>
		        <thead>
		        <tr>
		            <th>序号</th>
		            <th>菜单名称</th>
		            <th>权限</th>
		            <th>url路径</th>
		        </tr>
		        <tr th:each="menu:${session.menuList}">
		            <td th:text="${menu.id}"></td>
		            <td th:text="${menu.name}"></td>
		            <td th:text="${menu.percode}"></td>
		            <td th:text="${menu.url}"></td>
		        </tr>
		        </thead>
		    </table>
		</body>
	</html>

3.使用shiro控制哪些权限可见，哪些不可见

1.导入依赖

 <dependency>
			<groupId>com.github.theborakompanioni</groupId>
			<artifactId>thymeleaf-extras-shiro</artifactId>
			<version>1.2.1</version>
		</dependency>

2.index.html

<!DOCTYPE html>
	<html xmlns:th="http://www.thymeleaf.org"
	      xmlns:shiro="http://www.pollix.at/thymeleaf/shiro">
	<head>
	    <meta charset="UTF-8">
	    <title>Title</title>
	</head>
	<body>
	    <span shiro:authenticated="true" >
	          <span>我已登录</span>
	    </span>
	    <span shiro:haspermission="aaa" >
	          <span>没有权限</span>
	    </span>
	    <span shiro:haspermission="userInfo:delete" >
	          <span>我有权限</span>
	    </span>
	</body>
	</html>

密码登录次数限制