Shiro Mysql登录认证JDBC Realm

àì夳堔傛蜴生んèń 2024-02-18 20:55 24阅读 0赞

一.Subject 认证主体包含两个信息：  
(1)Principals：身份，可以是用户名，邮件，手机号码等等，用来标识一个登录主体身份

(2)Credentials：凭证，常见有密码，数字证书等等

二.身份认证流程;http://shiro.apache.org/authentication.html

![20180606153150719][]

三.Realm：意思是域，Shiro 从 Realm 中获取验证数据；

Realm 有很多种类，例如常见的 jdbc realm，jndi realm，text realm

四.用Mysql数据库来登录认证:

(1)数据库表 users (id,userName,password)

![20180606153446967][]

(2)创建maven工程

![20180606153614102][]

(3)在pom.xml文件中添加相应的依赖包

![20180606153645272][]

(4)jdbc\_Realm.ini配置文件

[main]
    #实例化对象jdbcRealm
    jdbcRealm=org.apache.shiro.realm.jdbc.JdbcRealm
    #实例化对象dataSource
    dataSource=com.mchange.v2.c3p0.ComboPooledDataSource
    #driver,url,user,password
    dataSource.driverClass=com.mysql.jdbc.Driver
    dataSource.jdbcUrl=jdbc:mysql://localhost:3306/db_shiro
    dataSource.user=root
    dataSource.password=root
    #设置jdbcRealm的数据源
    jdbcRealm.dataSource=$dataSource
    #设置securityManager的realms 
    securityManager.realms=$jdbcRealm

(5)创建类JdbcRealm

public class JdbcRealm {
    
        private static final transient Logger log = LoggerFactory.getLogger(JdbcRealm.class);
    
    
        public static void main(String[] args) {
    
    		//1>获得工厂对象
            Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:jdbc_Realm.ini");
    		//2>通过工程对象获得securityManager对象
            SecurityManager securityManager = factory.getInstance();
    
          
    		//3>SecurityUtils设置securityManager对象
            SecurityUtils.setSecurityManager(securityManager);
    
     
            // get the currently executing user:
    		//4>获得当前执行的用户
            Subject currentUser = SecurityUtils.getSubject();
    
            // let's login the current user so we can check against roles and permissions:
    		//5>测试当前用户是否被认证,是否登录了!
            if (!currentUser.isAuthenticated()) {
    			//把用户名和密码封装在令牌中UsernamePasswordToken
                UsernamePasswordToken token = new UsernamePasswordToken("admin", "aaa");
                 //记住我
    			token.setRememberMe(true);
                try {
    				//执行登录
                    currentUser.login(token);
                } 
    			 //如果没有指定的用户,则shiro抛出UnknownAccountException异常
    			catch (UnknownAccountException uae) {
                    log.info("==>There is no user with username of " + token.getPrincipal());
    				return;
                } 
    			//如果用户存在,密码不匹配,则shiro抛出IncorrectCredentialsException异常
    			catch (IncorrectCredentialsException ice) {  
                    log.info("==>Password for account " + token.getPrincipal() + " was incorrect!");
    				return;
                }
    			//用户被锁定异常LockedAccountException
    			catch (LockedAccountException lae) {
                    log.info("The account for username " + token.getPrincipal() + " is locked.  " +
                            "Please contact your administrator to unlock it.");
    				return;
                }
                // ... catch more exceptions here (maybe custom ones specific to your application?
    			//所有异常认证的父类
                catch (AuthenticationException ae) {
                    //unexpected condition?  error?
                }
            }
    
            //say who they are:
            //print their identifying principal (in this case, a username):
    		//输出登录成功!
            log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");
    
          
            //all done - log out!
    		//用户退出
            currentUser.logout();
        }
    }

(6)运行

![20180606153945237][]

![20180606153951388][]

![20180606153957301][]

![20180606154004645][]

[20180606153150719]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/6ad2556ad2624d60ba022d59a5e52f90.png
[20180606153446967]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/fd776376da3f48aca2daadef549522b8.png
[20180606153614102]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/44a038bee24d441dbe675b3d49d6d2f4.png
[20180606153645272]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/0633e302ad3f406e94642328ac627b09.png
[20180606153945237]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/1f27da9905e741fd9b777f3fd5cf8d65.png
[20180606153951388]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/900ef05797ad459ba1c7e3948cddabd2.png
[20180606153957301]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/b4cae8b92fc64f11aae4394fb460ebf6.png
[20180606154004645]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/310e1f8c78454703a7ab252460d2e1bd.png