【安全认证框架】- shiro

小灰灰 2023-02-15 01:15 9阅读 0赞

### 文章目录 ###

*   *  shiro
     *   *   *  shiro的架构
         *  1.建项目，快速开始
         *   *  对Quickstart.java类的分析
         *  2.springboot集成shiro
         *   *  在springboot中整合shiro
         *  3.shiro的使用
         *   *  shiro的登录拦截

## shiro ##

#### shiro的架构 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70]

*  subject:当前的用户
 *  SecurityManager：管理所有的用户
 *  Realm：负责数据的交互

### 1.建项目，快速开始 ###

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 1]  
即把[https://github.com/apache/shiro][https_github.com_apache_shiro]下载下来参照shiro-master\\samples\\quickstart\\来建项目（注意自己添加pom文件的版本）。  
或根据[  
http://shiro.apache.org/10-minute-tutorial.html][http_shiro.apache.org_10-minute-tutorial.html]  
建项目

正常运行的结果  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 2]

#### 对Quickstart.java类的分析 ####

//获取当前的用户对象
    Subject currentUser = SecurityUtils.getSubject();
    
    // 通过当前用户拿到session
    Session session = currentUser.getSession();
            
    //currentUser.isAuthenticated()测试当前用户是否被认证
    if (!currentUser.isAuthenticated()) { 
    
    //获取验证信息
    currentUser.getPrincipal()
    
    //判断角色是否存在
    currentUser.hasRole("schwartz")
    
    //权限判断
    currentUser.isPermitted("lightsaber:wield")
    
    //注销
    currentUser.logout();

这些东西Spring Security都有

### 2.springboot集成shiro ###

在idea中新建一个springboot项目，只添加web就可以

然后在pom中导入thymeleaf的相关依赖

<dependency>
                <groupId>org.thymeleaf</groupId>
                <artifactId>thymeleaf-spring5</artifactId>
            </dependency>
    
            <dependency>
                <groupId>org.thymeleaf.extras</groupId>
                <artifactId>thymeleaf-extras-java8time</artifactId>
            </dependency>

然后写index.html和controller  
index.html

<!DOCTYPE html>
    <html lang="en" xmlns:th="http//www.thymeleaf.org"
          xmlns:shiro="http//www.thymeleaf.org/thymeleaf-extras-shiro">
    <head>
        <meta charset="UTF-8">
        <title>首页</title>
    </head>
    <body>
    <p>首页</p>
    <br>
    <p th:text="${msg}"></p>
    </body>
    </html>

MyController.java

@Controller
    public class MyController { 
    
        @Resource
        private UserService userService;
    
        @RequestMapping({ "/","/index"})
        public String toIndex(Model model){ 
            model.addAttribute("msg","hello shiro");
            return "index";
        }
    }

启动项目访问[http://localhost:8080/][http_localhost_8080]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 3]  
说明springboot的web和thymeleaf配置成功

#### 在springboot中整合shiro ####

1.添加shiro相关的依赖

<dependency>
        <groupId>org.apache.shiro</groupId>
        <artifactId>shiro-spring</artifactId>
        <version>1.5.3</version>
    </dependency>

2.添加shiro相关的配置文件  
shiro需要三个相关的bean

*  1.定义数据源Realm
 *  2.定义SecurityManager=> DefaultSecurityManager
 *  3.使用SecurityManager管理Subject  
    其中第一步数据源需要自己定义

新建UserRealm.java

public class UserRealm extends AuthorizingRealm { 
    
        @Resource
        private UserService userService;
    
        //授权
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { 
            System.out.println("执行力：授权=》doGetAuthorizationInfo");
            return null;
        }
    
    // 认证
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException { 
            System.out.println("执行力：认证=》doGetAuthorizationInfo");
            return null;
        }
    }

然后正式编写ShiroConfig.java

@Configuration
    public class ShiroConfig { 
    
        //定义数据源Realm
        @Bean
        public UserRealm userRealm(){ 
            return new UserRealm();
        }
    
        //2.定义SecurityManager=> DefaultSecurityManager
        //@Qualifier("userRealm")把userRealm的bean注入realm
        @Bean(name = "securityManager")
        public DefaultWebSecurityManager getDefaultWebSecurityManager(@Qualifier("userRealm") UserRealm realm){ 
            DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
            //关联Realm
            securityManager.setRealm(realm);
            return securityManager;
        }
    
        //3.使用SecurityManager管理Subject
        @Bean
        public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager){ 
            ShiroFilterFactoryBean bean = new ShiroFilterFactoryBean();
            //设置安全管理器
            bean.setSecurityManager(securityManager);
            return bean;
        }
    
        //ShiroDialect：用于整合thymeleaf模板
        @Bean
        public ShiroDialect getShiroDialect(){ 
            return new ShiroDialect();
        }
    }

现在shiro就正式导入进Springboot中了。  
为了验证shiro的功能在新建两个页面  
add.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>add</title>
    </head>
    <body>
    <h1>添加</h1>
    </body>
    </html>

update.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>update</title>
    </head>
    <body>
    <H2>Update</H2>
    </body>
    </html>

在MyController中添加相关的路径

@RequestMapping("/user/add")
        public String add(){ 
            return "user/add";
        }
    
        @RequestMapping("/user/update")
        public String update(){ 
            return "user/update";
        }

然后在index.html页面中使用上面两个页面

访问8080  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 4]  
所有我们需要的环境就搭建完成。下面正式来使用Shiro

### 3.shiro的使用 ###

#### shiro的登录拦截 ####

shiro的登录拦截是在ShiroConfig中实现的

这是对资源拦截的代码

@Bean
        public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager){ 
            ShiroFilterFactoryBean bean = new ShiroFilterFactoryBean();
            //设置安全管理器
            bean.setSecurityManager(securityManager);
    
            /**shiro的登录拦截*/
    
            //shiro的内置过滤器
            /* anon：无需认证就可以访问 authc：必须认证才能访问 user：必须拥有记住我功能才能访问 perms：必须对某个资源有权限才能访问 roles：必须拥有某个角色权限才能访问 */
    
            //添加资源过滤器
            Map<String, String> filterMap = new LinkedHashMap<>();
    
            //除了写具体的资源路径外，shiro还支持通配符
            //授权
            filterMap.put("/user/add","authc");
            filterMap.put("/user/update","authc");
            bean.setFilterChainDefinitionMap(filterMap);
    
            //设置登录页面
            bean.setLoginUrl("/login");
    
            return bean;
        }

此时直接访问8080然后点击-添加  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 5]  
然后一般如果没有权限说明用户没有登录，所以要跳转到登录界面中

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200604002957877.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200603235355174.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw==,size_16,color_FFFFFF,t_70
[https_github.com_apache_shiro]: https://github.com/apache/shiro
[http_shiro.apache.org_10-minute-tutorial.html]: http://shiro.apache.org/10-minute-tutorial.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/2020060323572052.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw==,size_16,color_FFFFFF,t_70
[http_localhost_8080]: http://localhost:8080/
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/2020060417251813.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200604174107224.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200604175137760.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2d5aGR4d2FuZw==,size_16,color_FFFFFF,t_70