Shiro教程_2 Shiro+SpringBoot+Mysql+Redis(缓存)

怼烎@ 2023-03-01 10:48 2阅读 0赞

源代码  
https://gitee.com/fakerlove/Shiro

## Shiro+SpringBoot+Mysql+Redis(缓存) ##

### 1. 添加依赖 ###

<?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
        <modelVersion>4.0.0</modelVersion>
        <parent>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-parent</artifactId>
            <version>2.3.1.RELEASE</version>
            <relativePath/> 
        </parent>
        <groupId>com.example</groupId>
        <artifactId>demo</artifactId>
        <version>0.0.1-SNAPSHOT</version>
        <name>demo</name>
        <description>Demo project for Spring Boot</description>
    
        <properties>
            <java.version>1.8</java.version>
        </properties>
    
        <dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-web</artifactId>
            </dependency>
            <dependency>
                <groupId>org.mybatis.spring.boot</groupId>
                <artifactId>mybatis-spring-boot-starter</artifactId>
                <version>2.1.3</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-devtools</artifactId>
                <scope>runtime</scope>
                <optional>true</optional>
            </dependency>
            <dependency>
                <groupId>mysql</groupId>
                <artifactId>mysql-connector-java</artifactId>
                <scope>runtime</scope>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-configuration-processor</artifactId>
                <optional>true</optional>
            </dependency>
            <dependency>
                <groupId>org.projectlombok</groupId>
                <artifactId>lombok</artifactId>
                <optional>true</optional>
            </dependency>
    
            
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>druid</artifactId>
                <version>1.1.23</version>
            </dependency>
    
            
            
            <dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-spring-boot-web-starter</artifactId>
                <version>1.5.3</version>
            </dependency>
            
            
            <dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-ehcache</artifactId>
                <version>1.5.3</version>
            </dependency>
            
            
            <dependency>
                <groupId>com.auth0</groupId>
                <artifactId>java-jwt</artifactId>
                <version>3.10.3</version>
            </dependency>
            
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-configuration-processor</artifactId>
                <optional>true</optional>
            </dependency>
            
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-data-redis</artifactId>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-freemarker</artifactId>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-thymeleaf</artifactId>
            </dependency>
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>fastjson</artifactId>
                <version>1.2.67</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-test</artifactId>
                <scope>test</scope>
                <exclusions>
                    <exclusion>
                        <groupId>org.junit.vintage</groupId>
                        <artifactId>junit-vintage-engine</artifactId>
                    </exclusion>
                </exclusions>
            </dependency>
        </dependencies>
    
        <build>
            <plugins>
                <plugin>
                    <groupId>org.springframework.boot</groupId>
                    <artifactId>spring-boot-maven-plugin</artifactId>
                </plugin>
            </plugins>
        </build>
    
    </project>

### 2. 配置 yml ###

server:
      port: 9099
    spring:
      application:
        name: demo1
      #    配置 mybatis
      datasource:
        driver-class-name: com.mysql.cj.jdbc.Driver
        url: jdbc:mysql://rm-uf682626j42h0nn6ljo.mysql.rds.aliyuncs.com:3306/faker?useUnicode=true&characterEncoding=utf-8&useSSL=true&serverTimezone=UTC
        username: joker
        password: 
        type: com.alibaba.druid.pool.DruidDataSource
    
    #    resources:
    #      static-locations:
    
      redis:
        host: 47.100.104.187
        database: 0
        password: 
        port: 6379
        jedis:
          pool:
            max-wait: 3600
            max-active: 8
        timeout: 3600
      mvc:
        static-path-pattern: classpath:/static/ classpath:/templates/
        view:
          suffix: .html
          prefix: classpath:/templates/
    
      resources:
        static-locations: classpath:/META-INF/resources/,classpath:/resources/,classpath:/static/,classpath:/public/
      thymeleaf:
        cache: false
        suffix: .html
        prefix: classpath:/templates/
    
    mybatis:
      mapper-locations: classpath:mapper/*.xml type-aliases-package: com.example.demo.entity

### 3. 创建 实体类 ###

package com.example.demo.entity;
    
    import lombok.AllArgsConstructor;
    import lombok.Data;
    import lombok.NoArgsConstructor;
    import lombok.experimental.Accessors;
    
    /** * 是 用户的 信息 */
    
    @Data
    @NoArgsConstructor
    @Accessors(chain = true)
    @AllArgsConstructor
    public class Person { 
        private int user_id;
        private String user_name;
        private String user_password;
        private Double user_money;
        private int user_lev;
        private String user_email;
        private String user_address;
        private String user_banner_img;
        private String user_telephone;
        private String user_introduce;
        private int user_gender;
        private String user_salt;
    }

package com.example.demo.entity;
    
    
    import lombok.AllArgsConstructor;
    import lombok.Data;
    import lombok.NoArgsConstructor;
    import lombok.experimental.Accessors;
    
    /** * 返回结果 * @param <T> */
    
    @Data
    @AllArgsConstructor
    @NoArgsConstructor
    @Accessors(chain = true)
    public class ResultData<T>{ 
        private String message;
        private Integer code;
        private T data;
    }

### 4. 创建Mapper ###

<?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
    <mapper namespace="com.example.demo.mapper.PersonMapper">
    
        
        <resultMap id="PersonMap" type="com.example.demo.entity.Person">
            <id column="user_id" property="user_id" jdbcType="INTEGER"/>
            <result column="user_lev" jdbcType="INTEGER" property="user_lev"/>
            <result column="user_gender" jdbcType="INTEGER" property="user_gender"/>
            <result column="user_password" jdbcType="VARCHAR" property="user_password"/>
            <result column="user_email" jdbcType="VARCHAR" property="user_email"/>
            <result column="user_address" jdbcType="VARCHAR" property="user_address"/>
            <result column="user_banner_img" jdbcType="VARCHAR" property="user_banner_img"/>
            <result column="user_telephone" jdbcType="VARCHAR" property="user_telephone"/>
            <result column="user_introduce" jdbcType="VARCHAR" property="user_introduce"/>
            <result column="user_password" jdbcType="VARCHAR" property="user_password"/>
            <result column="user_money" property="user_money" jdbcType="DOUBLE"/>
            <result column="user_salt" property="user_salt" jdbcType="VARCHAR"/>
        </resultMap>
    
        <select id="checkLogin" resultType="int">
            SELECT count(*) FROM person
            where user_id=#{user_id} and user_password=#{user_password}
        </select>
    
        <select id="findPersonById" resultMap="PersonMap">
            SELECT * FROM person
            where user_id=#{user_id}
        </select>
    
        <select id="findPersonByName" resultMap="PersonMap">
            SELECT * FROM person
            where user_name=#{user_name}
        </select>
    
        <select id="findPersonAll" resultMap="PersonMap" parameterType="int">
            select * from person
            where user_lev=#{user_lev}
        </select>
    
    
        <insert id="addPerson" parameterType="Person">
           insert into person(user_name,user_password,user_money,user_lev,user_gender,user_salt)
           values(#{user_name},#{user_password},#{user_money},#{user_lev},#{user_gender},#{user_salt});
    
        </insert>
    
        <select id="findid" resultType="int">
               SELECT @@IDENTITY
        </select>
    
        <update id="modifyPerson" parameterType="Person">
            update person
            <set>
                <if test="user_name!=null and user_name!=''">
                    user_name=#{user_name},
                </if>
    
                <if test="user_money!=null and user_money!=''">
                    user_money=#{user_money},
                </if>
                <if test="user_email!=null and user_email!=''">
                    user_email=#{user_email},
                </if>
                <if test="user_address!=null and user_address!=''">
                    user_address=#{user_address},
                </if>
                <if test="user_banner_img!=null and user_banner_img!=''">
                    user_banner_img=#{user_banner_img},
                </if>
                <if test="user_telephone!=null and user_telephone!=''">
                    user_telephone=#{user_telephone},
                </if>
    
                <if test="user_introduce!=null and user_introduce!=''">
                    user_introduce=#{user_introduce},
                </if>
                <if test="user_gender!=null and user_gender!=''">
                    user_gender=#{user_gender},
                </if>
    
            </set>
            where user_id=#{user_id}
        </update>
    
        <update id="addMoney">
           update person set user_money=#{user_money} where user_id=#{user_id}
        </update>
    
        <delete id="deletePerson" parameterType="int">
            delete from person where user_id=#{user_id}
        </delete>
    
    </mapper>

### 5. 创建 db ###

CREATE DATABASE  IF NOT EXISTS `faker` /*!40100 DEFAULT CHARACTER SET utf8 */ /*!80016 DEFAULT ENCRYPTION='N' */;
    USE `faker`;
    -- MySQL dump 10.13 Distrib 8.0.17, for Win64 (x86_64)
    --
    -- Host: rm-uf682626j42h0nn6ljo.mysql.rds.aliyuncs.com Database: faker
    -- ------------------------------------------------------
    -- Server version 8.0.18
    
    /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
    /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
    /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
    /*!50503 SET NAMES utf8 */;
    /*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
    /*!40103 SET TIME_ZONE='+00:00' */;
    /*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
    /*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
    /*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
    /*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;
    SET @MYSQLDUMP_TEMP_LOG_BIN = @@SESSION.SQL_LOG_BIN;
    SET @@SESSION.SQL_LOG_BIN= 0;
    
    --
    -- GTID state at the beginning of the backup 
    --
    
    SET @@GLOBAL.GTID_PURGED=/*!80000 '+'*/ '58413bdc-b9ef-11ea-8020-00163e0ab18f:1-66';
    
    --
    -- Table structure for table `person`
    --
    
    DROP TABLE IF EXISTS `person`;
    /*!40101 SET @saved_cs_client = @@character_set_client */;
    /*!50503 SET character_set_client = utf8mb4 */;
    CREATE TABLE `person` (
      `user_id` int(10) NOT NULL AUTO_INCREMENT,
      `user_name` varchar(20) NOT NULL,
      `user_password` varchar(100) NOT NULL,
      `user_money` double NOT NULL DEFAULT '0',
      `user_lev` int(11) NOT NULL DEFAULT '1',
      `user_address` varchar(100) DEFAULT '"没有写地址"',
      `user_email` varchar(100) DEFAULT NULL,
      `user_banner_img` varchar(1000) DEFAULT NULL,
      `user_telephone` varchar(100) DEFAULT NULL,
      `user_introduce` varchar(1000) DEFAULT NULL,
      `user_gender` int(11) NOT NULL DEFAULT '1',
      `user_salt` varchar(45) DEFAULT NULL,
      PRIMARY KEY (`user_id`)
    ) ENGINE=InnoDB AUTO_INCREMENT=10 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci;
    /*!40101 SET character_set_client = @saved_cs_client */;
    
    --
    -- Dumping data for table `person`
    --
    
    LOCK TABLES `person` WRITE;
    /*!40000 ALTER TABLE `person` DISABLE KEYS */;
    INSERT INTO `person` VALUES (1,'joker','123',126,1,'南京','203462009@qq.com','https://timgsa.baidu.com/timg?image&quality=80&size=b9999_10000&sec=1590311354953&di=ea3b02c8f9e45664f87794a4c3692e26&imgtype=0&src=http%3A%2F%2Fa3.att.hudong.com%2F35%2F34%2F19300001295750130986345801104.jpg','15651771520','炸鸡店',0,NULL),(2,'peter','123456',997,2,'北京','203462009@qq.com','https://timgsa.baidu.com/timg?image&quality=80&size=b9999_10000&sec=1590311354953&di=ea3b02c8f9e45664f87794a4c3692e26&imgtype=0&src=http%3A%2F%2Fa3.att.hudong.com%2F35%2F34%2F19300001295750130986345801104.jpg','15651771520','新石器烤肉',0,NULL),(3,'admin','123wan',888,2,'北京','203462009@qq.com','https://timgsa.baidu.com/timg?image&quality=80&size=b9999_10000&sec=1590311354953&di=ea3b02c8f9e45664f87794a4c3692e26&imgtype=0&src=http%3A%2F%2Fa3.att.hudong.com%2F35%2F34%2F19300001295750130986345801104.jpg','15651771520','黄焖鸡店',0,NULL),(5,'pp','213',0,1,NULL,'','https://timgsa.baidu.com/timg?image&quality=80&size=b9999_10000&sec=1590311354953&di=ea3b02c8f9e45664f87794a4c3692e26&imgtype=0&src=http%3A%2F%2Fa3.att.hudong.com%2F35%2F34%2F19300001295750130986345801104.jpg','15651771520',NULL,1,NULL),(6,'dd','123',0,1,NULL,'','https://timgsa.baidu.com/timg?image&quality=80&size=b9999_10000&sec=1590311354953&di=ea3b02c8f9e45664f87794a4c3692e26&imgtype=0&src=http%3A%2F%2Fa3.att.hudong.com%2F35%2F34%2F19300001295750130986345801104.jpg','15651771520',NULL,1,NULL),(7,'joker','123',19988,1,NULL,'203462009@qq.com','D:\\code\\shopping\\src\\main\\resources\\upload\\8474d5bf-9486-4a60-a349-59448e408972.jpg','15651771520','苦而不言，喜而不语',1,NULL),(8,'akk','f9704410c5d8cca9c920102b92e2d3e2',0,1,'\"没有写地址\"',NULL,NULL,NULL,NULL,1,'3uhku6bx'),(9,'ad','cbfc5f5fd18dc905266d0272a93ebc62',0,2,'\"没有写地址\"',NULL,NULL,NULL,NULL,1,'1chsswry');
    /*!40000 ALTER TABLE `person` ENABLE KEYS */;
    UNLOCK TABLES;
    
    --
    -- Dumping events for database 'faker'
    --
    
    --
    -- Dumping routines for database 'faker'
    --
    SET @@SESSION.SQL_LOG_BIN = @MYSQLDUMP_TEMP_LOG_BIN;
    /*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */;
    
    /*!40101 SET SQL_MODE=@OLD_SQL_MODE */;
    /*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */;
    /*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */;
    /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
    /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
    /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
    /*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;
    
    -- Dump completed on 2020-07-24 12:20:42

### 6. 创建Dao 层 ###

package com.example.demo.mapper;
    
    
    import com.example.demo.entity.Person;
    import org.apache.ibatis.annotations.Mapper;
    import org.apache.ibatis.annotations.Param;
    import org.springframework.stereotype.Repository;
    
    import java.util.List;
    
    @Mapper
    @Repository
    public interface PersonMapper { 
    
        /** * 表示登录 * * @param user_id * @param user_password * @return */
        int checkLogin(@Param("user_id") int user_id, @Param("user_password") String user_password);
    
        /** * 返回的是刚刚插入的主键值 * @param p * @return */
        int addPerson(Person p);
    
        /** * 根据用户 的id 来查找用户信息 * @param id * @return */
        Person findPersonById(int id);
    
        /** * 修改用户 信息 * @param person * @return */
        int modifyPerson(Person person);
    
        /** * 根据 用户等级，查找所有用户 * @param user_lev * @return */
        List<Person> findPersonAll(int user_lev);
    
        /** * 删除 用户 * @param user_id * @return */
        int deletePerson(int user_id);
    
        /** * 修改钱 * * @param user_money * @param user_id * @return */
        int addMoney(@Param("user_money") Double user_money, @Param("user_id") int user_id);
    
        int findid();
    
        Person findPersonByName(String user_name);
    }

### 7. 创建 service ###

package com.example.demo.service;
    
    import com.example.demo.entity.Person;
    import org.springframework.stereotype.Service;
    import org.springframework.transaction.annotation.Transactional;
    
    import java.util.List;
    
    @Service
    public interface LoginService{ 
    
        Person loginCheck(int user_id, String user_name);
    
        List<Person> findall(int user_lev);
    
        Person selectPersonById(Integer id);
    
        Person selectPersonByName(String name);
    
        Boolean addPerson(Person person);
    }

package com.example.demo.service.impl;
    
    import com.example.demo.entity.Person;
    import com.example.demo.mapper.PersonMapper;
    import com.example.demo.service.LoginService;
    import lombok.extern.java.Log;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.stereotype.Service;
    import org.springframework.transaction.annotation.Transactional;
    
    import java.util.List;
    
    @Service
    @Transactional
    public class LoginServiceImpl implements LoginService { 
    
        @Autowired
        PersonMapper personMapper;
    
        /** * * @param user_id * @param user_name * @return */
        @Override
        public Person loginCheck(int user_id, String user_name) { 
            return personMapper.findPersonById(user_id);
        }
    
    
        /** * 按照等级查找用户 * @param user_lev * @return */
        @Override
        public List<Person> findall(int user_lev) { 
            return personMapper.findPersonAll(user_lev);
        }
    
        @Override
        public Person selectPersonById(Integer id) { 
            return personMapper.findPersonById(id);
        }
    
        @Override
        public Person selectPersonByName(String name) { 
            return personMapper.findPersonByName(name);
        }
    
        @Override
        public Boolean addPerson(Person person) { 
            int result=personMapper.addPerson(person);
            return result>0;
        }
    
    
    }

### 8. 创建 Controller ###

package com.example.demo.controller;
    
    import org.springframework.stereotype.Controller;
    import org.springframework.web.bind.annotation.RequestMapping;
    
    /** * @author bn */
    @Controller
    public class JumpController { 
    
        @RequestMapping("/login")
        public String user(){ 
            return "login";
        }
    
        @RequestMapping("/register")
        public String red(){ 
            return "register";
        }
    }

package com.example.demo.controller;
    
    
    import com.example.demo.entity.Person;
    import com.example.demo.entity.ResultData;
    import com.example.demo.service.LoginService;
    import com.example.demo.utils.ShiroUtils;
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.IncorrectCredentialsException;
    import org.apache.shiro.authc.UnknownAccountException;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.authz.annotation.RequiresRoles;
    import org.apache.shiro.subject.Subject;
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.stereotype.Controller;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RequestParam;
    import org.springframework.web.bind.annotation.ResponseBody;
    
    import java.util.ArrayList;
    import java.util.List;
    
    /** * 用户控制类 */
    @Controller
    @RequestMapping("/person")
    public class LoginController { 
    
        protected static final Logger logger = LoggerFactory.getLogger(com.example.demo.controller.LoginController.class);
    
        LoginService loginService;
    
        @Autowired
        public void setLoginService(LoginService loginService) { 
            this.loginService = loginService;
        }
    
    
        @RequestMapping("/test")
        @RequiresRoles("user")
        public String test(){ 
            return "test";
        }
    
        @RequestMapping("/admin")
        @RequiresRoles("admin")
        public String amdin(){ 
            return "admin";
        }
    
        @RequestMapping("/user")
        public String user(){ 
            return "user";
        }
    
    
    
        @RequestMapping("/login")
        public String login(String user_name, String user_password){ 
            System.out.println(user_name+" "+user_password);
    
            try { 
                UsernamePasswordToken usernamePasswordToken=new UsernamePasswordToken(user_name,user_password);
                Subject subject= SecurityUtils.getSubject();
                subject.login(usernamePasswordToken);
            }catch (UnknownAccountException e){ 
                e.printStackTrace();
                System.out.println("用户名错误");
                return "login";
            } catch (IncorrectCredentialsException e){ 
                System.out.println("密码错误");
                e.printStackTrace();
                return "login";
            }catch (Exception e){ 
                e.printStackTrace();
                return "login";
            }
           return "success";
        }
    
        @RequestMapping("/findAll")
        @ResponseBody
        public ResultData<List<Person>> findAll(@RequestParam("user_lev") int user_lev){ 
            ResultData<List<Person>> data=new ResultData<>();
            System.out.println(user_lev);
            try { 
                List<Person> result= new ArrayList<>();
                result=loginService.findall(user_lev);
    
                if(result!=null&&result.size()>=0){ 
                    data.setCode(200);
                    data.setMessage("查找成功");
                    data.setData(result);
                }else { 
                    data.setCode(-1);
                    data.setMessage("查找失败");
                    data.setData(null);
                }
            }catch (Exception e){ 
                e.printStackTrace();
                logger.info("对不起 登录出现问题");
            }
            return data;
        }
    
        @RequestMapping("/register")
        public String register(String user_name, String user_password,Integer user_lev){ 
            System.out.println(user_name+" "+user_password);
            Person person=new Person();
            String salt=ShiroUtils.getRandomSalt(8);
    
            // 这里进行盐处理
            String password=ShiroUtils.md5(user_password,salt);
            person.setUser_name(user_name);
            person.setUser_password(password);
            person.setUser_address("");
            person.setUser_lev(user_lev);
            person.setUser_salt(salt);
            person.setUser_gender(1);
            person.setUser_money(0.0);
            System.out.println("存储的"+person);
            Boolean result=loginService.addPerson(person);
            if(result){ 
                return "login";
            }else { 
                return "register";
            }
        }
    }

### 9. 创建Redis 配置类 ###

package com.example.demo.config.redis;
    
    import com.alibaba.fastjson.JSON;
    import com.alibaba.fastjson.serializer.SerializerFeature;
    import com.fasterxml.jackson.databind.JavaType;
    import com.fasterxml.jackson.databind.ObjectMapper;
    import com.fasterxml.jackson.databind.type.TypeFactory;
    import org.springframework.data.redis.serializer.RedisSerializer;
    import org.springframework.data.redis.serializer.SerializationException;
    import com.alibaba.fastjson.parser.ParserConfig;
    import org.springframework.util.Assert;
    import java.nio.charset.Charset;
    import java.nio.charset.StandardCharsets;
    /** * FastJson2JsonRedisSerializer * Redis使用FastJson序列化 * by zhengkai.blog.csdn.net */
    public class FastJson2JsonRedisSerializer<T> implements RedisSerializer<T> { 
        private ObjectMapper objectMapper = new ObjectMapper();
        public static final Charset DEFAULT_CHARSET = Charset.forName("UTF-8");
    
        private Class<T> clazz;
        
       static { 
       		ParserConfig.getGlobalInstance().setAutoTypeSupport(true); 
       		//如果遇到反序列化autoType is not support错误，请添加并修改一下包名到bean文件路径
           // ParserConfig.getGlobalInstance().addAccept("com.xxxxx.xxx");
        }
        public FastJson2JsonRedisSerializer(Class<T> clazz) { 
            super();
            this.clazz = clazz;
        }
    
        @Override
        public byte[] serialize(T t) throws SerializationException { 
            if (t == null) { 
                return new byte[0];
            }
            return JSON.toJSONString(t, SerializerFeature.WriteClassName).getBytes(DEFAULT_CHARSET);
        }
    
        @Override
        public T deserialize(byte[] bytes) throws SerializationException { 
            if (bytes == null || bytes.length <= 0) { 
                return null;
            }
            String str = new String(bytes, DEFAULT_CHARSET);
    
            return JSON.parseObject(str, clazz);
        }
        public void setObjectMapper(ObjectMapper objectMapper) { 
            Assert.notNull(objectMapper, "'objectMapper' must not be null");
            this.objectMapper = objectMapper;
        }
    
        protected JavaType getJavaType(Class<?> clazz) { 
            return TypeFactory.defaultInstance().constructType(clazz);
        }
    
    }

package com.example.demo.config.redis;
     
    import com.alibaba.fastjson.support.spring.FastJsonRedisSerializer;
    import lombok.Data;
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.data.redis.connection.RedisConnectionFactory;
    import org.springframework.data.redis.core.RedisTemplate;
    import org.springframework.data.redis.serializer.StringRedisSerializer;
    import org.springframework.stereotype.Component;
     
    /** * @author bn */
    @Data
    @Component
    @Configuration
    @Slf4j
    public class RedisConfig { 
     
        @Bean
        public RedisTemplate<String, Object> redisTemplate(RedisConnectionFactory redisConnectionFactory) { 
    
            RedisTemplate<String, Object> redisTemplate = new RedisTemplate<>();
            redisTemplate.setConnectionFactory(redisConnectionFactory);
    
            FastJsonRedisSerializer<Object> fastJsonRedisSerializer = new FastJsonRedisSerializer<>(Object.class);
    
            // 设置值value的序列化方式
            redisTemplate.setValueSerializer(fastJsonRedisSerializer);
            redisTemplate.setHashValueSerializer(fastJsonRedisSerializer);
    
            // 设置键key的序列化方式
            redisTemplate.setKeySerializer(new StringRedisSerializer());
            redisTemplate.setHashKeySerializer(new StringRedisSerializer());
    
            redisTemplate.afterPropertiesSet();
            return redisTemplate;
        }
     
    }

### 10 .创建 RedisUtils ###

package com.example.demo.utils;
    
    import org.springframework.beans.BeansException;
    import org.springframework.context.ApplicationContext;
    import org.springframework.context.ApplicationContextAware;
    import org.springframework.data.redis.core.RedisTemplate;
    import org.springframework.stereotype.Component;
    import org.springframework.util.StringUtils;
    
    import javax.annotation.Resource;
    
    @Component
    public  class RedisUtil implements ApplicationContextAware { 
    
    
        private static RedisTemplate redisTemplate;
    
        public static   RedisTemplate get(){ 
            return redisTemplate;
        }
    
        @Override
        public void setApplicationContext(ApplicationContext applicationContext) throws BeansException { 
            redisTemplate=(RedisTemplate)applicationContext.getBean("redisTemplate");
        }
    
    // public String get(String key) { 
    // if (StringUtils.isEmpty(key)) { 
    // return null;
    // }
    // return redisTemplate.opsForValue().get(key);
    // }
    //
    // public void set(String key, String value) { 
    // if (StringUtils.isEmpty(key) || StringUtils.isEmpty(value)) { 
    // return;
    // }
    // redisTemplate.opsForValue().set(key, value);
    // }
    }

### 11. 创建自定义 Realm ###

package com.example.demo.config.shiro;
    
    import com.example.demo.entity.Person;
    import com.example.demo.service.LoginService;
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.SimpleAuthenticationInfo;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.authz.Permission;
    import org.apache.shiro.authz.SimpleAuthorizationInfo;
    import org.apache.shiro.crypto.hash.Md5Hash;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import org.springframework.beans.factory.annotation.Autowired;
    
    /** * 自定义的 Realm 这里进行 用户认证和授权的操作 * 我们这里假定 user_lev =1 就是用户的操作，user_lev=2 就是 管理员的操作 */
    public class ShiroRealm extends AuthorizingRealm { 
    
        @Autowired
        LoginService loginService;
    
    
        /** * 这里进行授权 * @param principalCollection * @return */
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { 
    
            System.out.println("=======授权=====");
            String name=(String)principalCollection.getPrimaryPrincipal();
            System.out.println("身份信息为 "+name);
    
            // 查询数据库，获取 角色信息
            Person person=loginService.selectPersonByName(name);
            int lev=person.getUser_lev();
    
            SimpleAuthorizationInfo simpleAuthorizationInfo=new SimpleAuthorizationInfo();
            // 等级为 1 ,就是 user
            if(lev==1){ 
                simpleAuthorizationInfo.addRole("user");
                // 等级为 2 ,就是 admin
            }else{ 
                simpleAuthorizationInfo.addRole("admin");
            }
            return simpleAuthorizationInfo;
        }
    
    
    
        /** * 认证是否有这个用户 * @param authenticationToken * @return * @throws AuthenticationException */
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException { 
    
            // 获取用户的 name
            String name=(String) authenticationToken.getPrincipal();
            Person person=loginService.selectPersonByName(name);
            System.out.println("=======认证=====");
            System.out.println(name);
            // 表示有这个用户
            if(person!=null&&person.getUser_name()!=null){ 
                String password=person.getUser_password();
                String salt=person.getUser_salt();
    
                // 这里是 和 Controller 层中的UsernamePasswordToken 密码进行比较
                SimpleAuthenticationInfo simpleAuthorizationInfo=new SimpleAuthenticationInfo(name,password,new Md5Hash(salt),this.getName());
                return simpleAuthorizationInfo;
            }
            return null;
        }
    }

### 12. 创建Shiro缓存 ###

package com.example.demo.config.shiro;
    
    
    import com.example.demo.utils.RedisUtil;
    import org.apache.shiro.cache.Cache;
    import org.apache.shiro.cache.CacheException;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.data.redis.core.RedisTemplate;
    import org.springframework.stereotype.Component;
    
    import javax.annotation.Resource;
    import java.util.Collection;
    import java.util.Set;
    
    /** * 重写Shiro 中的缓存 * @param <K> * @param <V> */
    //@Component
    public class ShiroCache<K,V> implements Cache<K,V> { 
    
    
    
    
    
    
    
        /** * 获取Cache * @param k * @return * @throws CacheException */
        @Override
        public V get(K k) throws CacheException { 
            System.out.println("ShiroCache get===key "+ k);
            if(k==null){ 
                return  null;
            }else { 
                RedisTemplate redisTemplate=RedisUtil.get();
                return (V)redisTemplate.opsForValue().get(k);
            }
    
        }
    
        /** * * @param k * @param v * @return * @throws CacheException */
        @Override
        public V put(K k, V v) throws CacheException { 
            System.out.println(k+"=ShiroCache=="+v);
    // System.out.println("redisUtils=="+redisUtil);
            RedisTemplate redisTemplate=RedisUtil.get();
    // System.out.println("redisTemplate=="+redisTemplate);
    // System.out.println(redisUtil==null);
            redisTemplate.opsForValue().set(k.toString(),v);
            return null;
        }
    
        @Override
        public V remove(K k) throws CacheException { 
            RedisTemplate redisTemplate=RedisUtil.get();
            redisTemplate.delete(k);
            return null;
        }
    
        @Override
        public void clear() throws CacheException { 
            RedisTemplate redisTemplate=RedisUtil.get();
            Set<String> keys = redisTemplate.keys("*");
            redisTemplate.delete(keys);
        }
    
        @Override
        public int size() { 
            return 0;
        }
    
        @Override
        public Set<K> keys() { 
            return null;
        }
    
        @Override
        public Collection<V> values() { 
            return null;
        }
    }

package com.example.demo.config.shiro;
    
    import org.apache.shiro.cache.Cache;
    import org.apache.shiro.cache.CacheException;
    import org.apache.shiro.cache.CacheManager;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.stereotype.Component;
    import org.springframework.stereotype.Service;
    
    /** * @author bn */
    @Component
    public class ShiroCacheManager implements CacheManager { 
    
        @Override
        public <K, V> Cache<K, V> getCache(String s) throws CacheException { 
            System.out.println("shiro 缓存"+s);
            return new ShiroCache<K,V>();
        }
    }

### 13. 创建 自定义的ShiroFilter ###

package com.example.demo.config.shiro;
    
    import com.example.demo.service.LoginService;
    import com.example.demo.utils.ShiroUtils;
    import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
    import org.apache.shiro.realm.Realm;
    import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    import java.util.HashMap;
    import java.util.Map;
    
    /** * 配置shiro */
    @Configuration
    public class ShiroConfig { 
    
        @Autowired
        LoginService loginService;
    
        // 1. 创建 ShiroFilter
        @Bean("shiroFilterFactoryBean")
        public ShiroFilterFactoryBean getshiroFilterFactoryBean(DefaultWebSecurityManager defaultWebSecurityManager){ 
    
            ShiroFilterFactoryBean bean=new ShiroFilterFactoryBean();
            // 设置 安全管理器
            System.out.println("=======ShiroFilterFactoryBean======");
            bean.setSecurityManager(defaultWebSecurityManager);
    
            // 设置文件资源
            Map<String ,String> map=new HashMap<>();
            // 开放了 login ,和 register 页面
            map.put("/login","anon");// 开放首页
            map.put("/register","anon");
            map.put("/person/login","anon");
            map.put("/person/register","anon");
            // 拦截了 /findAll 这个请求 ,这个资源需要 授权加上认证。所以访问不了
            map.put("/person/findAll","authc");
            // 剩下的两个 路由，因为添加了 注解，所以这里不需要添加 ，也是有用的
            bean.setFilterChainDefinitionMap(map);
    
            bean.setUnauthorizedUrl("quanxian");
            // 如果文件资源没有权限，跳转到那个页面
            bean.setLoginUrl("login");
    
            return bean;
        }
    
        /** * 2. 创建 web 类型的 安全管理器 * @param realm * @return */
        @Bean
        DefaultWebSecurityManager getDefaultWebSecurityManager(@Qualifier("getRealm") Realm realm){ 
            DefaultWebSecurityManager manager=new DefaultWebSecurityManager();
            manager.setRealm(realm);
            return manager;
        }
    
        /** * 自定义一个 Realm 管理器 * @return */
        @Bean("getRealm")
        public Realm realm(){ 
            // 设置算法的密度
            HashedCredentialsMatcher hashedCredentialsMatcher=new HashedCredentialsMatcher();
            //设置Md5 加密
            hashedCredentialsMatcher.setHashAlgorithmName(ShiroUtils.hashAlgorithmName);
            // 设置hash 散列度
            hashedCredentialsMatcher.setHashIterations(ShiroUtils.hashIterations);
            ShiroRealm realm=new ShiroRealm();
            realm.setCredentialsMatcher(hashedCredentialsMatcher);
    
            realm.setCacheManager(new ShiroCacheManager());
            realm.setCachingEnabled(true);// 开启全局缓存
            realm.setAuthenticationCachingEnabled(true);
            realm.setAuthenticationCacheName("renZhenCache");
            realm.setAuthorizationCachingEnabled(true);
            realm.setAuthorizationCacheName("shouQuanCache");
    
    
            return realm;
        }
    }

### 14. 创建异常处理器 ###

package com.example.demo.exception;
    
    import com.example.demo.entity.ResultData;
    import org.springframework.web.bind.annotation.ControllerAdvice;
    import org.springframework.web.bind.annotation.ExceptionHandler;
    import org.springframework.web.bind.annotation.ResponseBody;
    
    /**
     * @author bn
     */
    @ControllerAdvice
    public class MyControllerAdvice {
    
        /**
         * 全局异常捕捉处理
         * @param ex
         * @return
         */
        @ResponseBody
        @ExceptionHandler(value = Exception.class)
        public ResultData<String> errorHandler(Exception ex) {
           ResultData<String> data=new ResultData<>();
           data.setCode(-1);
           data.setMessage("对不起没有权限");
           data.setData("错误");
           return data;
        }
    
        /**
         * 拦截捕捉自定义异常 MyException.class
         * @param ex
         * @return
         */
    //    @ResponseBody
    //    @ExceptionHandler(value = MyException.class)
    //    public Map myErrorHandler(MyException ex) {
    //        Map map = new HashMap();
    //        map.put("code", ex.getCode());
    //        map.put("msg", ex.getMsg());
    //        return map;
    //    }
    
    }

## 3.2 内置过滤器 ##

<table> 
 <thead> 
  <tr> 
   <th>过滤器名字</th> 
   <th>名称</th> 
   <th>用途</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>anon（匿名）</td> 
   <td>org.apache.shiro.web.filter.authc.AnonymousFilter</td> 
   <td>公共资源</td> 
  </tr> 
  <tr> 
   <td>authc（身份验证）</td> 
   <td>org.apache.shiro.web.filter.authc.FormAuthenticationFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>authcBasic（http基本验证）</td> 
   <td>org.apache.shiro.web.filter.authc.BasicHttpAuthenticationFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>logout（退出）</td> 
   <td>org.apache.shiro.web.filter.authc.LogoutFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>noSessionCreation（不创建session）</td> 
   <td>org.apache.shiro.web.filter.session.NoSessionCreationFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>perms(许可验证)</td> 
   <td>org.apache.shiro.web.filter.authz.PermissionsAuthorizationFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>port（端口验证）</td> 
   <td>org.apache.shiro.web.filter.authz.PortFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>rest (rest方面)</td> 
   <td>org.apache.shiro.web.filter.authz.HttpMethodPermissionFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>roles（权限验证）</td> 
   <td>org.apache.shiro.web.filter.authz.RolesAuthorizationFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>ssl （ssl方面）</td> 
   <td>org.apache.shiro.web.filter.authz.SslFilter</td> 
   <td></td> 
  </tr> 
  <tr> 
   <td>user （用户方面）</td> 
   <td>org.apache.shiro.web.filter.authc.UserFilter</td> 
   <td></td> 
  </tr> 
 </tbody> 
</table>