shiro学习笔记（7）--cacheManager、sessionManager、rememberMe配置

曾经终败给现在 2022-05-12 12:50 459阅读 0赞

1、授权：在自定义realm的doGetAuthorizationInfo方法中读取用户权限并授权

@Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
            System.out.println("---------------授权----------------");
    
            //模拟授权
            List<String> list = new ArrayList<>();
            list.add("sys:user:view");
            list.add("sys:user:edit");
    
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
            info.addStringPermissions(list);
            return info;
        }

2、在controller或jsp中添加权限控制符并检验授权情况

1、控制器
    @RequiresPermissions("sys:user:edit")
    2、jsp页面
    <shiro:hasPermission name="sys:user:view">...</shiro:hasPermission>

3、缓存管理  
当同一用户对某一资源的权限多次授权认证时，可以将其放入缓存中。在shiro-all包下默认有一个ehcache的包，也可以单独添加一个

<dependency>
          <groupId>org.apache.shiro</groupId>
          <artifactId>shiro-ehcache</artifactId>
          <version>1.4.0</version>
    </dependency>

注：ehcache.xml配置文件放在classpath路径下；xml配置文件在shiro-ehcache.jar包下或shiro-all.jar包的cache/ehcache目录下  
![在这里插入图片描述][70]  
4、session和rememberMe设置

<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
    	<property name="realm" ref="myRealm" />
    	<property name="cacheManager" ref="cacheManager"/>
    	**<property name="sessionManager" ref="sessionManager"/>
    	<property name="rememberMeManager" ref="rememberMeManager"/>**
    </bean>
    
    
    <bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">
    	<property name="globalSessionTimeout" value="6000"/>
    	<property name="deleteInvalidSessions" value="true"/>
    </bean>
    
    
    <bean id="rememberMeManager" class="org.apache.shiro.web.mgt.CookieRememberMeManager">
    	<property name="cookie" ref="rememberMeCookie"/>
    </bean>
    <bean id="rememberMeCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
    	<property name="maxAge" value="604800"/>
    	<property name="name" value="rememberMe"/>
    </bean>
    
    
    <bean id="authc" class="org.apache.shiro.web.filter.authc.FormAuthenticationFilter">
    	<property name="usernameParam" value="name"/>
    	<property name="passwordParam" value="pwd"/>
    
    	
    	**<property name="rememberMeParam" value="rememberMe"/>**
    </bean>
    
    login.jsp
    <label class="fancy-checkbox element-left">
        <input type="checkbox" name="**rememberMe**">
        <span>Remember me</span>
    </label>

[70]: /images/20220512/c9dcf4459d95445e8b712176ae139763.png