Shiro权限控制框架 ---SpringMVC+Spring+My batis+Mysql+Maven集成开发Web项目

约定不等于承诺〃 2022-07-16 08:45 117阅读 0赞

在之前的博文简单的介绍shiro权限控制框架，现在我们接着讲解使用    SpringMVC+Spring+My batis+Mysql+Maven集成开发Web项目

1.先由Maven选择MavenProject创建一个Web项目（如果你还不会使用Maven的话可以去看看我讲解Maven博文）

这里你看到我创建完成后为什么项目画把 X，因为自己的笔记本电脑上安装的JDK和Maven版本有些低所以就这样，但是这不会影响到项目的正常编码。

![Center][]

2.编写pom.xml文件引入开发是需要的Jar架包，因为我们使用的是Maven所以管理Jar架包很方便。

<span style="font-size:18px;"><project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
      <modelVersion>4.0.0</modelVersion>
      <groupId>com.java1234.shiro</groupId>
      <artifactId>ShiroWeb2</artifactId>
      <packaging>war</packaging>
      <version>0.0.1-SNAPSHOT</version>
      <name>ShiroWeb2 Maven Webapp</name>
      <url>http://maven.apache.org</url>
      <dependencies>
        <dependency>
          <groupId>junit</groupId>
          <artifactId>junit</artifactId>
          <version>3.8.1</version>
          <scope>test</scope>
        </dependency>
        
      	<dependency>
    		<groupId>javax.servlet</groupId>
    		<artifactId>javax.servlet-api</artifactId>
    		<version>3.1.0</version>
    	</dependency>
    	<dependency>
    		<groupId>javax.servlet.jsp</groupId>
    		<artifactId>javax.servlet.jsp-api</artifactId>
    		<version>2.3.1</version>
    	</dependency>
    	
    	<dependency>
    		<groupId>javax.servlet</groupId>
    		<artifactId>jstl</artifactId>
    		<version>1.2</version>
    	</dependency>
      	
    	<dependency>
      		<groupId>org.springframework</groupId>
      		<artifactId>spring-core</artifactId>
      		<version>4.1.7.RELEASE</version>
      	</dependency>
      	<dependency>
      		<groupId>org.springframework</groupId>
      		<artifactId>spring-beans</artifactId>
      		<version>4.1.7.RELEASE</version>
      	</dependency>
      	<dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-tx</artifactId>
             <version>4.1.7.RELEASE</version>
            </dependency>
      	<dependency>
      		<groupId>org.springframework</groupId>
      		<artifactId>spring-context</artifactId>
      		<version>4.1.7.RELEASE</version>
      	</dependency>
      	<dependency>
      		<groupId>org.springframework</groupId>
      		<artifactId>spring-context-support</artifactId>
      		<version>4.1.7.RELEASE</version>
      	</dependency>
      	<dependency>
    		<groupId>org.springframework</groupId>
    		<artifactId>spring-web</artifactId>
    		<version>4.1.7.RELEASE</version>
    	</dependency>
    	<dependency>
    		<groupId>org.springframework</groupId>
    		<artifactId>spring-webmvc</artifactId>
    		<version>4.1.7.RELEASE</version>
    	</dependency>
    	<dependency>
    		<groupId>org.springframework</groupId>
    		<artifactId>spring-aop</artifactId>
    		<version>4.1.7.RELEASE</version>
    	</dependency>
    	<dependency>
    		<groupId>org.springframework</groupId>
    		<artifactId>spring-aspects</artifactId>
    		<version>4.1.7.RELEASE</version>
    	</dependency>
    	<dependency>
    		<groupId>org.springframework</groupId>
    		<artifactId>spring-jdbc</artifactId>
    		<version>4.1.7.RELEASE</version>
    	</dependency>
    	  <dependency>
    		<groupId>org.mybatis</groupId>
    		<artifactId>mybatis-spring</artifactId>
    		<version>1.2.3</version>
    	</dependency>
      	
      	<dependency>
    		<groupId>log4j</groupId>
    		<artifactId>log4j</artifactId>
    		<version>1.2.17</version>
    	</dependency>
    	
    	 <dependency>
    		<groupId>org.mybatis</groupId>
    		<artifactId>mybatis</artifactId>
    		<version>3.3.0</version>
    	</dependency>
    	
    	<dependency>
    		<groupId>mysql</groupId>
    		<artifactId>mysql-connector-java</artifactId>
    		<version>5.1.37</version>
    	</dependency>
    	<dependency>
    		<groupId>org.apache.shiro</groupId>
    		<artifactId>shiro-core</artifactId>
    		<version>1.3.2</version>
    	</dependency>
    	<dependency>
    		<groupId>org.slf4j</groupId>
    		<artifactId>slf4j-log4j12</artifactId>
    		<version>1.7.12</version>
    	</dependency>
    	<dependency>
    		<groupId>org.apache.shiro</groupId>
    		<artifactId>shiro-web</artifactId>
    		<version>1.2.4</version>
    	</dependency>
    	<dependency>
    		<groupId>org.apache.shiro</groupId>
    		<artifactId>shiro-spring</artifactId>
    		<version>1.2.4</version>
    	</dependency>
      </dependencies>
      <build>
        <finalName>ShiroWeb2</finalName>
      </build>
    </project>
    </span>

3.搭建项目架构（创建每个层的包）

![Center 1][]

4.创建数据库 （这里我们使用的MySQL数据库）直接复制到MYSQL上运行即可

分别有三张表：用户表T\_User,角色表t\_role，权限表：t\_permission这三张表间相关联

<span style="font-size:18px;">/*
    SQLyog Ultimate v11.33 (64 bit)
    MySQL - 5.1.49-community : Database - db_shiro
    *********************************************************************
    */
    /*!40101 SET NAMES utf8 */;
    /*!40101 SET SQL_MODE=''*/;
    /*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
    /*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
    /*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
    /*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;
    CREATE DATABASE /*!32312 IF NOT EXISTS*/`db_shiro` /*!40100 DEFAULT CHARACTER SET utf8 */;
    USE `db_shiro`;
    
    /*Table structure for table `t_permission` */
    DROP TABLE IF EXISTS `t_permission`;
    CREATE TABLE `t_permission` (
      `id` int(11) NOT NULL AUTO_INCREMENT,
      `permissionName` varchar(50) DEFAULT NULL,
      `roleId` int(11) DEFAULT NULL,
      PRIMARY KEY (`id`),
      KEY `roleId` (`roleId`),
      CONSTRAINT `t_permission_ibfk_1` FOREIGN KEY (`roleId`) REFERENCES `t_role` (`id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
    
    /*Data for the table `t_permission` */
    
    insert  into `t_permission`(`id`,`permissionName`,`roleId`) values (1,'user:*',1),(2,'student:*',2);
    
    /*Table structure for table `t_role` */
    
    DROP TABLE IF EXISTS `t_role`;
    
    CREATE TABLE `t_role` (
      `id` int(11) NOT NULL AUTO_INCREMENT,
      `roleName` varchar(20) DEFAULT NULL,
      PRIMARY KEY (`id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
    
    /*Data for the table `t_role` */
    
    insert  into `t_role`(`id`,`roleName`) values (1,'admin'),(2,'teacher');
    
    /*Table structure for table `t_user` */
    
    DROP TABLE IF EXISTS `t_user`;
    
    CREATE TABLE `t_user` (
      `id` int(11) NOT NULL AUTO_INCREMENT,
      `userName` varchar(20) DEFAULT NULL,
      `password` varchar(100) DEFAULT NULL,
      `roleId` int(11) DEFAULT NULL,
      PRIMARY KEY (`id`),
      KEY `roleId` (`roleId`),
      CONSTRAINT `t_user_ibfk_1` FOREIGN KEY (`roleId`) REFERENCES `t_role` (`id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;
    
    /*Data for the table `t_user` */
    insert  into `t_user`(`id`,`userName`,`password`,`roleId`) values (1,'java1234','123456',1),(2,'jack','123',2),</span></span>

<span style="font-size:18px;">(3,'marry','234',NULL),(4,'json','345',NULL);
    /*Table structure for table `users` */
    
    DROP TABLE IF EXISTS `users`;
    
    CREATE TABLE `users` (
      `id` int(11) NOT NULL AUTO_INCREMENT,
      `userName` varchar(20) DEFAULT NULL,
      `password` varchar(20) DEFAULT NULL,
      PRIMARY KEY (`id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
    
    /*Data for the table `users` */
    
    insert  into `users`(`id`,`userName`,`password`) values (1,'java1234','123456');
    
    /*!40101 SET SQL_MODE=@OLD_SQL_MODE */;
    /*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */;
    /*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */;
    /*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */                                                                            </span>

<span style="font-size:18px;">5.创建于数据库表相对应的实体类因为我们这里拿登入做实例讲解，然后user表又和角色表、权限表有关联所以一个实体类就足够了</span>

<span style="font-size:18px;">package com.java1234.entity;
    public class User {
    	private Integer id;
    	private String userName;
    	private String password;
    	
    	public Integer getId() {
    		return id;
    	}
    	public void setId(Integer id) {
    		this.id = id;
    	}
    	public String getUserName() {
    		return userName;
    	}
    	public void setUserName(String userName) {
    		this.userName = userName;
    	}
    	public String getPassword() {
    		return password;
    	}
    	public void setPassword(String password) {
    		this.password = password;
    	}
    }
    </span>

6.编写配置applicationContext.xml

<span style="font-size:18px;"><?xml version="1.0" encoding="UTF-8"?>    
    <beans xmlns="http://www.springframework.org/schema/beans"    
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"   
        xmlns:p="http://www.springframework.org/schema/p"  
        xmlns:aop="http://www.springframework.org/schema/aop"   
        xmlns:context="http://www.springframework.org/schema/context"  
        xmlns:jee="http://www.springframework.org/schema/jee"  
        xmlns:tx="http://www.springframework.org/schema/tx"  
        xsi:schemaLocation="    
            http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-4.0.xsd  
            http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.0.xsd  
            http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.0.xsd  
            http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-4.0.xsd  
            http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-4.0.xsd">    
            
    	
    	<context:component-scan base-package="com.java1234.service" />
    	
    	
    	<bean id="dataSource"
    		class="org.springframework.jdbc.datasource.DriverManagerDataSource">
    		<property name="driverClassName" value="com.mysql.jdbc.Driver"/>
    		<property name="url" value="jdbc:mysql://localhost:3306/db_shiro"/>
    		<property name="username" value="root"/>
    		<property name="password" value="root"/>
    	</bean>
    
    	
    	<bean id="sqlSessionFactory" class="org.mybatis.spring.SqlSessionFactoryBean">
    		<property name="dataSource" ref="dataSource" />
    		
    		<property name="mapperLocations" value="classpath:com/java1234/mappers/*.xml"></property>
    		
    		<property name="configLocation" value="classpath:mybatis-config.xml"></property>
    	</bean>
    
    	
    	<bean class="org.mybatis.spring.mapper.MapperScannerConfigurer">
    		<property name="basePackage" value="com.java1234.dao" />
    		<property name="sqlSessionFactoryBeanName" value="sqlSessionFactory"></property>
    	</bean>
    
    	
    	<bean id="transactionManager"
    		class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
    		<property name="dataSource" ref="dataSource" />
    	</bean>
    	
    	
    	<bean id="myRealm" class="com.java1234.realm.MyRealm"/>  
    	
    	
    	<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">  
      	  <property name="realm" ref="myRealm"/>  
    	</bean>  
    	
    	
    	<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">  
    	      
    	    <property name="securityManager" ref="securityManager"/>
    	      
    	    <property name="loginUrl" value="/index.jsp"/>
    	      
    	    <property name="unauthorizedUrl" value="/unauthor.jsp"/>  
    	      
    	    <property name="filterChainDefinitions">  
    	        <value>  
    	             /login=anon   
    		     /admin*=authc   
    		     /student=roles[teacher]  
    		     /teacher=perms["user:create"]
    	        </value>  
    	    </property>
    	</bean>  
    	
    	  
    	<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>  
    	
    	
    	<bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor"/>  
      		<bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">  
      	  <property name="securityManager" ref="securityManager"/>  
        </bean>  
      
    	  
        <tx:advice id="txAdvice" transaction-manager="transactionManager">  
              
            <tx:attributes>  
                <tx:method name="insert*" propagation="REQUIRED" />  
                <tx:method name="update*" propagation="REQUIRED" />  
                <tx:method name="edit*" propagation="REQUIRED" />  
                <tx:method name="save*" propagation="REQUIRED" />  
                <tx:method name="add*" propagation="REQUIRED" />  
                <tx:method name="new*" propagation="REQUIRED" />  
                <tx:method name="set*" propagation="REQUIRED" />  
                <tx:method name="remove*" propagation="REQUIRED" />  
                <tx:method name="delete*" propagation="REQUIRED" />  
                <tx:method name="change*" propagation="REQUIRED" />  
                <tx:method name="check*" propagation="REQUIRED" />  
                <tx:method name="get*" propagation="REQUIRED" read-only="true" />  
                <tx:method name="find*" propagation="REQUIRED" read-only="true" />  
                <tx:method name="load*" propagation="REQUIRED" read-only="true" />  
                <tx:method name="*" propagation="REQUIRED" read-only="true" />  
            </tx:attributes>  
        </tx:advice>  
      
          
        <aop:config>  
            <aop:pointcut id="serviceOperation"  
                expression="execution(* com.java1234.service.*.*(..))" />  
            <aop:advisor advice-ref="txAdvice" pointcut-ref="serviceOperation" />  
        </aop:config>  
        
       
    </beans></span>

7.配置SpringMVC.xml

8.配置核心Web.xml文件

<span style="font-size:18px;"><?xml version="1.0" encoding="UTF-8"?>
    <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">
      <display-name>ShiroWeb2</display-name>
      
        
    	<filter>  
    	    <filter-name>shiroFilter</filter-name>  
    	    <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>  
        <init-param>  
          
        <param-name>targetFilterLifecycle</param-name>  
        <param-value>true</param-value>  
        </init-param>  
    	</filter>  
    	<filter-mapping>  
    	        <filter-name>shiroFilter</filter-name>  
    	        <url-pattern>/*</url-pattern>  
    	</filter-mapping>
    	
    	
        
    	<context-param>
    		<param-name>contextConfigLocation</param-name>
    		<param-value>classpath:applicationContext.xml</param-value>
    	</context-param>
    	
    	<filter>
    		<filter-name>encodingFilter</filter-name>
    		<filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
    		<init-param>
    			<param-name>encoding</param-name>
    			<param-value>UTF-8</param-value>
    		</init-param>
    	</filter>
    	<filter-mapping>
    		<filter-name>encodingFilter</filter-name>
    		<url-pattern>/*</url-pattern>
    	</filter-mapping>
    	
    	<listener>
    		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    	</listener> 
    	
    	
    	<servlet>
    		<servlet-name>springMVC</servlet-name>
    		<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    		<init-param>
    			<param-name>contextConfigLocation</param-name>
    			<param-value>classpath:spring-mvc.xml</param-value>
    		</init-param>
    		<load-on-startup>1</load-on-startup>
    	</servlet>
    	<servlet-mapping>
    		<servlet-name>springMVC</servlet-name>
    		<url-pattern>*.do</url-pattern>
    	</servlet-mapping>
      
      <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
      </welcome-file-list>
     
    </web-app></span>

9.编写数据访问层Dao   （因为使用Sping的注解模式，使用注解代替原本应用的UserDaoImpl）

<span style="font-size:18px;">package com.java1234.dao;
    
    import java.util.Set;
    
    import com.java1234.entity.User;
    
    public interface UserDao {
    
    	/**
    	 * 通过用户名查询用户
    	 * @param userName
    	 * @return
    	 */
    	public User getByUserName(String userName);
    	
    	/**
    	 * 通过用户名查询角色信息
    	 * @param userName
    	 * @return
    	 */
    	public Set<String> getRoles(String userName);
    	
    	/**
    	 * 通过用户名查询权限信息
    	 * @param userName
    	 * @return
    	 */
    	public Set<String> getPermissions(String userName);
    }
    </span>

10.编写业务层UserService

<span style="font-size:18px;">package com.java1234.service;
    
    import java.util.Set;
    
    import com.java1234.entity.User;
    
    public interface UserService {
    
    	/**
    	 * 通过用户名查询用户
    	 * @param userName
    	 * @return
    	 */
    	public User getByUserName(String userName);
    	
    	/**
    	 * 通过用户名查询角色信息
    	 * @param userName
    	 * @return
    	 */
    	public Set<String> getRoles(String userName);
    	
    	/**
    	 * 通过用户名查询权限信息
    	 * @param userName
    	 * @return
    	 */
    	public Set<String> getPermissions(String userName);
    }
    </span>

编写UserServiceImpl实现类

<span style="font-size:18px;">package com.java1234.service.impl;
    
    import java.util.Set;
    
    import javax.annotation.Resource;
    
    import org.springframework.stereotype.Service;
    
    import com.java1234.dao.UserDao;
    import com.java1234.entity.User;
    import com.java1234.service.UserService;
    
    @Service("userService")
    public class UserServiceImpl implements UserService{
    
    	@Resource
    	private UserDao userDao;
    	
    	public User getByUserName(String userName) {
    		return userDao.getByUserName(userName);
    	}
    
    	public Set<String> getRoles(String userName) {
    		return userDao.getRoles(userName);
    	}
    
    	public Set<String> getPermissions(String userName) {
    		return userDao.getPermissions(userName);
    	}
    
    }
    </span>

11.编写UserController控制器

<span style="font-size:18px;">package com.java1234.controller;
    import javax.servlet.http.HttpServletRequest;
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.session.Session;
    import org.apache.shiro.subject.Subject;
    import org.springframework.stereotype.Controller;
    import org.springframework.web.bind.annotation.RequestMapping;
    import com.java1234.entity.User;
    
    /**
     * 用户Controller层
     * @author Administrator
     *
     */
    @Controller
    @RequestMapping("/user")
    public class UserController {
    	/**
    	 * 用户登录
    	 * @param user
    	 * @param request
    	 * @return
    	 */
    	@RequestMapping("/login")
    	public String login(User user,HttpServletRequest request){
    		Subject subject=SecurityUtils.getSubject();
    		//Shiro获取用户名密码
    		UsernamePasswordToken token=new UsernamePasswordToken(user.getUserName(), user.getPassword());
    		try{
    			//验证用户角色
    			subject.login(token);
    			Session session=subject.getSession();
    			System.out.println("sessionId:"+session.getId());
    			System.out.println("sessionHost:"+session.getHost());
    			System.out.println("sessionTimeout:"+session.getTimeout());
    			session.setAttribute("info", "session的数据");
    			return "redirect:/success.jsp";
    		}catch(Exception e){
    			e.printStackTrace();
    			request.setAttribute("user", user);
    			request.setAttribute("errorMsg", "用户名或密码错误！");
    			return "index";
    		}
    	}
    }
    </span>

12.编写UserMapper.xml文件

<span style="font-size:18px;"><?xml version="1.0" encoding="UTF-8" ?>
    <!DOCTYPE mapper
    PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
    "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
    <mapper namespace="com.java1234.dao.UserDao">
    
    	<resultMap type="User" id="UserResult">
    		<result property="id" column="id"/>
    		<result property="userName" column="userName"/>
    		<result property="password" column="password"/>
    	</resultMap>
    	
    	<select id="getByUserName" parameterType="String" resultMap="UserResult">
    		select * from t_user where userName=#{userName}
    	</select>
    	
    	<select id="getRoles" parameterType="String" resultType="String">
    		select r.roleName from t_user u,t_role r where u.roleId=r.id and u.userName=#{userName}
    	</select>
    	
    	<select id="getPermissions" parameterType="String" resultType="String">
    		select p.permissionName from t_user u,t_role r,t_permission p where u.roleId=r.id and p.roleId=r.id and u.userName=#{userName}
    	</select>
    </mapper> </span>

13.编写自定义MyRealm

<span style="font-size:18px;">package com.java1234.realm;
    import javax.annotation.Resource;
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.SimpleAuthenticationInfo;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.authz.SimpleAuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import com.java1234.entity.User;
    import com.java1234.service.UserService;
    public class MyRealm extends AuthorizingRealm{
    	@Resource
    	private UserService userService;
    	
    	/**
    	 * 为当限前登录的用户授予角色和权
    	 */
    	@Override
    	protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    		//获取当前登入的用户名
    		String userName=(String)principals.getPrimaryPrincipal();
    		
    		SimpleAuthorizationInfo authorizationInfo=new SimpleAuthorizationInfo();
    		//根据此用户名查询是否拥有   此角色
    		//返回的是一个字符串集合
    		authorizationInfo.setRoles(userService.getRoles(userName));
    		//根据用户名查询是否拥有   此权限
    		authorizationInfo.setStringPermissions(userService.getPermissions(userName));
    		return authorizationInfo;
    	}
    	/**
    	 * 验证当前登录的用户
    	 */
    	@Override
    	protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
    		//获取当前登入的用户名
    		String userName=(String)token.getPrincipal();
    			//根据用户名查询此用户是否存在
    			User user=userService.getByUserName(userName);
    			if(user!=null){
    				//如果存在就
    				AuthenticationInfo authcInfo=new SimpleAuthenticationInfo(user.getUserName(),user.getPassword(),"xx");
    				return authcInfo;
    			}else{
    				return null;				
    			}
    	}
    }
    </span>

14.配置mybatis-config.xml

15.表示登入页面index.jsp

<span style="font-size:18px;"><%@ page language="java" contentType="text/html; charset=UTF-8"
        pageEncoding="UTF-8"%>
    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <title>Insert title here</title>
    </head>
    <body>
    <form action="${pageContext.request.contextPath }/user/login.do" method="post">
    	userName:<input type="text" name="userName" value="${user.userName }"/><br/>
    	password:<input type="password" name="password" value="${user.password }"><br/>
    	<input type="submit" value="login"/><font color="red">${errorMsg }</font>
    </form>
    </body>
    </html></span>

表示成功页面success.jsp

<span style="font-size:18px;"><%@ page language="java" contentType="text/html; charset=UTF-8"
        pageEncoding="UTF-8"%>
    <%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %>
    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <title>Insert title here</title>
    </head>
    <body>
    ${info }
    欢迎你!
    <shiro:hasRole name="admin">
    	欢迎有admin角色的用户！<shiro:principal/>
    </shiro:hasRole>
    <shiro:hasPermission name="student:create">
    	欢迎有student:create权限的用户！<shiro:principal/>
    </shiro:hasPermission>
    </body>
    </html></span>

以及失败页面unauthor.jsp

整个项目已登入为主：1.首先登入页面index.jsp发送login登入请求。

2.然后该请求最初经过Web.xml文件进行拦截在解析一系列的配置文件----->在到UserController       控制器-------------------->执行对应的login()方法把页面传过来的用户密码塞给Shirok框架中的                                          UsernamePasswordToken对象----->在丢给Shiro框架中的Subject对象的subject.login(token);

方法验证用户角色。

3.就到自定义MyRealm里面执行步骤是首先执行doGetAuthenticationInfo()方法获取shiro框架                                         中保存的用户名String userName=(String)token.getPrincipal();------->根据用户名查询此用户                                         是否存在User user=userService.getByUserName(userName);if判断如果存在就在执行----->  
              doGetAuthorizationInfo()方法为当限前登录的用户授予角色和权。

4.最终验证次用户是否拥有此角色、此权限，操作登入。

[Center]: /images/20220716/c01bc69ea3fd41f5bb37cbe6cd3837e7.png
[Center 1]: /images/20220716/401e4a228fbf4074b2c9e90af8345a96.png