Spring Mvc整合Apache Shiro

ゞ浴缸里的玫瑰 2022-12-28 09:27 191阅读 0赞

## Apache Shiro简介 ##

### Apache Shiro ###

Apache Shiro是一个强大易用的java安全框架，虽然不如Spring Security强大，但是对于大部分项目而言也够用了。而且在SSM/SSH中整合Spring Security都是比较麻烦的操作，所以在以上两个框架中使用shiro更多一点。

### 常用技术栈 ###

*  SSM+Shiro
 *  Spring Boot/Spring Cloud + Spring Security

## 整合Shiro ##

### 目录结构 ###

![e316ae39db00a76b9c8d83d2d9e6d5d9.png][]

### 添加依赖（pom.xml） ###

<dependency>  
        <groupId>org.apache.shiro</groupId>  
        <artifactId>shiro-core</artifactId>  
        <version>1.7.0</version>  
    </dependency>  
    <dependency>  
        <groupId>org.apache.shiro</groupId>  
        <artifactId>shiro-web</artifactId>  
        <version>1.7.0</version>  
    </dependency>  
    <dependency>  
        <groupId>org.apache.shiro</groupId>  
        <artifactId>shiro-ehcache</artifactId>  
        <version>1.7.0</version>  
    </dependency>  
    <dependency>
        <groupId>org.apache.shiro</groupId>
        <artifactId>shiro-spring</artifactId>
        <version>1.7.0</version>
    </dependency>

### 配置ShiroFilter(web.xml) ###

<filter>
        <description>shiro 权限拦截</description>
        <filter-name>shiroFilter</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
        <init-param>
            <param-name>targetFilterLifecycle</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>shiroFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

### 新建shiro配置文件（spring-shiro.xml） ###

<?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd">
    
        
        <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
            <property name="cacheManager" ref="cacheManager"/>
            <property name="realm" ref="myRealm"/>
        </bean>
        
        
        <bean id="cacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
    	    
    	    <property name="cacheManagerConfigFile" value="classpath:spring/ehcache-shiro.xml"/>
        </bean>
        
        
        <bean id="myRealm" class="com.sqtg.shiro.ShiroRealm">
            
        </bean>
        
        
        <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/>
        
        
        <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator" depends-on="lifecycleBeanPostProcessor">
        </bean>
        <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
        	<property name="securityManager" ref="securityManager"></property>
        </bean>
        
        
        <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
            
            <property name="securityManager" ref="securityManager"/>
            
            <property name="loginUrl" value="/login.jsp"/>
            
            <property name="successUrl" value="/user.jsp"/>
            
            <property name="unauthorizedUrl" value="/index.jsp"/>
            
            <property name="filterChainDefinitions">
                <value>
                	/swagger-ui.html=anon
                    /swagger-resources/** = anon
                    /v2/api-docs/** = anon
                    /webjars/springfox-swagger-ui/** = anon
                    
                    /index.jsp=anon
                    /login.jsp=anon
                    /** = authc
                </value>
            </property>
        </bean>
    
    </beans>

### 新建shiro缓存配置文件（ehcache-shiro.xml） ###

<ehcache>
    
        
        <diskStore path="java.io.tmpdir/shiro-spring-sample"/>
    
    
        
    
        <defaultCache maxElementsInMemory="10000" eternal="false" timeToIdleSeconds="120" timeToLiveSeconds="120" overflowToDisk="false" diskPersistent="false" diskExpiryThreadIntervalSeconds="120" />
    
        
        <cache name="shiro-activeSessionCache" maxElementsInMemory="10000" eternal="true" overflowToDisk="true" diskPersistent="true" diskExpiryThreadIntervalSeconds="600"/>
    
        <cache name="org.apache.shiro.realm.SimpleAccountRealm.authorization" maxElementsInMemory="100" eternal="false" timeToLiveSeconds="600" overflowToDisk="false"/>
    
    </ehcache>

### 实现自定义Realm ###

package com.sqtg.shiro;
    
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.SimpleAuthenticationInfo;
    import org.apache.shiro.authz.SimpleAuthorizationInfo;
    import org.apache.shiro.subject.PrincipalCollection;
    
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    
    
    /** * 获取用户的角色和权限信息 * @author Administrator * */
    public class ShiroRealm extends AuthorizingRealm { 
        private static Logger logger = LoggerFactory.getLogger(ShiroRealm.class);
        
        @Autowired
        private IClientService cs;
        /** * 权限控制 * * @param principalCollection * @return */
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { 
            SimpleAuthorizationInfo simpleAuthorizationInfo = new SimpleAuthorizationInfo();
            
            return simpleAuthorizationInfo;
        }
    
        /** * 用户认证 * * @param authenticationToken * @return * @throws AuthenticationException */
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException { 
            return null;
        }
    
    }

以上就是配置shiro的全过程了，不出意外的话访问user.jsp将会自动跳转到login.jsp

### 可能会出现的问题 ###

[SSM整合Shiro出现no ContextLoaderListener registered的问题][SSM_Shiro_no ContextLoaderListener registered]

[e316ae39db00a76b9c8d83d2d9e6d5d9.png]: /images/20221120/343adb180057446fa0dcfeb46cb6cb6b.png
[SSM_Shiro_no ContextLoaderListener registered]: https://www.cnblogs.com/bcxx/p/13975343.html