shiro第四讲 JDBC Realm使用（QQ14280784）

向右看齐 2022-05-30 11:27 125阅读 0赞

第一步：进入eclipse新建一个shiro的maven工程

第二步：修改shiro工程的编码为utf-8

第三步：新建一个mysql数据库shiro，在这个数据库

SET FOREIGN\_KEY\_CHECKS=0;  
\-- ----------------------------  
\-- Table structure for \`roles\_permissions\`  
\-- ----------------------------  
DROP TABLE IF EXISTS \`roles\_permissions\`;  
CREATE TABLE \`roles\_permissions\` (  
\`id\` bigint(20) NOT NULL AUTO\_INCREMENT,  
\`role\_name\` varchar(100) DEFAULT NULL,  
\`permission\` varchar(100) DEFAULT NULL,  
PRIMARY KEY (\`id\`),  
UNIQUE KEY \`idx\_roles\_permissions\` (\`role\_name\`,\`permission\`)  
) ENGINE=InnoDB DEFAULT CHARSET=utf8;

\-- ----------------------------  
\-- Records of roles\_permissions  
\-- ----------------------------  
  
\-- ----------------------------  
\-- Table structure for \`users\`  
\-- ----------------------------  
DROP TABLE IF EXISTS \`users\`;  
CREATE TABLE \`users\` (  
\`id\` bigint(20) NOT NULL AUTO\_INCREMENT,  
\`username\` varchar(100) DEFAULT NULL,  
\`password\` varchar(100) DEFAULT NULL,  
\`password\_salt\` varchar(100) DEFAULT NULL,  
PRIMARY KEY (\`id\`),  
UNIQUE KEY \`idx\_users\_username\` (\`username\`)  
) ENGINE=InnoDB AUTO\_INCREMENT=4 DEFAULT CHARSET=utf8;  
  
\-- ----------------------------  
\-- Records of users  
\-- ----------------------------  
INSERT INTO \`users\` VALUES ('1', 'zhang', '123', null);  
INSERT INTO \`users\` VALUES ('2', 'jin', '123', null);  
INSERT INTO \`users\` VALUES ('3', 'li', '456', null);  
  
\-- ----------------------------  
\-- Table structure for \`user\_roles\`  
\-- ----------------------------  
DROP TABLE IF EXISTS \`user\_roles\`;  
CREATE TABLE \`user\_roles\` (  
\`id\` bigint(20) NOT NULL AUTO\_INCREMENT,  
\`username\` varchar(100) DEFAULT NULL,  
\`role\_name\` varchar(100) DEFAULT NULL,  
PRIMARY KEY (\`id\`),  
UNIQUE KEY \`idx\_user\_roles\` (\`username\`,\`role\_name\`)  
) ENGINE=InnoDB DEFAULT CHARSET=utf8;  
  
\-- ----------------------------  
\-- Records of user\_roles  
\-- ----------------------------

第四步：加入pom中的内容，注意一定要加spring-jdbc；

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4\_0\_0.xsd">

<groupId>com.jintingbo.www</groupId>

<artifactId>shiro</artifactId>

<version>0.0.1-SNAPSHOT</version>

<name>shiro Maven Webapp</name>

<url>http://maven.apache.org</url>

<dependencies>  
  
  
 <dependency>  
 <groupId>junit</groupId>  
 <artifactId>junit</artifactId>  
 <version>4.9</version>  
 </dependency>  
  
  
 <dependency>  
 <groupId>commons-logging</groupId>  
 <artifactId>commons-logging</artifactId>  
 <version>1.1.3</version>  
 </dependency>  
 <dependency>  
 <groupId>org.apache.shiro</groupId>  
 <artifactId>shiro-core</artifactId>  
 <version>1.2.2</version>  
 </dependency>  
 <dependency>  
 <groupId>mysql</groupId>  
 <artifactId>mysql-connector-java</artifactId>  
 <version>5.1.25</version>  
 </dependency>  
 <dependency>  
 <groupId>com.alibaba</groupId>  
 <artifactId>druid</artifactId>  
 <version>0.2.23</version>  
 </dependency>  
 <dependency>  
 <groupId>org.springframework</groupId>  
 <artifactId>spring-jdbc</artifactId>  
 <version>4.3.13.RELEASE</version>  
 </dependency>  
 </dependencies>

<build>

<finalName>shiro2</finalName>

</build>

</project>

第五步：在src/main/resources下新建一个shiro-jdbc-realm.ini文件，内容如下：

\[main\]

dataSource=org.springframework.jdbc.datasource.DriverManagerDataSource

dataSource.driverClassName=com.mysql.jdbc.Driver

dataSource.url=jdbc:mysql://127.0.0.1:3306/shiro

dataSource.username=root

dataSource.password=12345678

jdbcRealm=org.apache.shiro.realm.jdbc.JdbcRealm

jdbcRealm.permissionsLookupEnabled = true

jdbcRealm.dataSource=$dataSource

jdbcRealm.authenticationQuery = SELECT password FROM sec\_user WHERE user\_name = ?

securityManager.realms=$jdbcRealm

\-------------

因为Realm采用了shiro默认的jdbcRealm,所以不需要自己再写Realm了，直接第六步写测试

\-------------

第六步：在src/test/java下新建一个test包 ，包下建一个类JdbcRealmTest，代码如下：

\-------------

package com.jintingbo.www;  
import org.apache.shiro.SecurityUtils;  
import org.apache.shiro.authc.AuthenticationException;  
import org.apache.shiro.authc.DisabledAccountException;  
import org.apache.shiro.authc.ExcessiveAttemptsException;  
import org.apache.shiro.authc.ExpiredCredentialsException;  
import org.apache.shiro.authc.IncorrectCredentialsException;  
import org.apache.shiro.authc.LockedAccountException;  
import org.apache.shiro.authc.UnknownAccountException;  
import org.apache.shiro.authc.UsernamePasswordToken;  
import org.apache.shiro.config.IniSecurityManagerFactory;  
import org.apache.shiro.subject.Subject;  
import org.apache.shiro.util.Factory;  
  
public class MyTest \{  
public static void main(String\[\] args) \{  
// 1、获取 SecurityManager 工厂，此处使用 Ini 配置文件初始化 SecurityManager  
Factory<org.apache.shiro.mgt.SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");  
// 2、得到 SecurityManager 实例 并绑定给 SecurityUtils  
org.apache.shiro.mgt.SecurityManager securityManager = factory.getInstance();  
SecurityUtils.setSecurityManager(securityManager);  
// 3、得到 Subject 及创建用户名/密码身份验证 Token（即用户身份/凭证）  
Subject subject = SecurityUtils.getSubject();  
UsernamePasswordToken token = new UsernamePasswordToken("li", "123");  
try \{  
subject.login(token);  
if(subject.isAuthenticated())\{  
System.out.println("成功！");  
\}else\{  
System.out.println("失败！");  
\}  
subject.logout();  
\}catch (IncorrectCredentialsException e) \{  
System.out.println("登录密码错误. Password for account "  
\+ token.getPrincipal() + " was incorrect.");  
\} catch (ExcessiveAttemptsException e) \{  
System.out.println("登录失败次数过多");  
\} catch (LockedAccountException e) \{  
System.out.println("帐号已被锁定. The account for username "  
\+ token.getPrincipal() + " was locked.");  
\} catch (DisabledAccountException e) \{  
System.out.println("帐号已被禁用. The account for username "  
\+ token.getPrincipal() + " was disabled.");  
\} catch (ExpiredCredentialsException e) \{  
System.out.println("帐号已过期. the account for username "  
\+ token.getPrincipal() + " was expired.");  
\} catch (UnknownAccountException e) \{  
System.out.println("帐号不存在. There is no user with username of "  
\+ token.getPrincipal());  
\}  
\}  
\}

第六步：运行；

完毕