SpringMVC+SpringMVC+Mybatis项目

1：导入相关依赖

  1. <dependencies>
  2.         <!--测试依赖-->
  3.         <dependency>
  4.             <groupId>junit</groupId>
  5.             <artifactId>junit</artifactId>
  6.             <version>4.11</version>
  7.             <scope>test</scope>
  8.         </dependency>
  10.         <!--数据库驱动-->
  11.         <dependency>
  12.             <groupId>mysql</groupId>
  13.             <artifactId>mysql-connector-java</artifactId>
  14.             <version>5.1.47</version>
  15.         </dependency>
  16.         <!-- 数据库连接池 -->
  17.         <dependency>
  18.             <groupId>com.mchange</groupId>
  19.             <artifactId>c3p0</artifactId>
  20.             <version>0.9.5.2</version>
  21.         </dependency>
  22.         <!-- 数据库连接池 -->
  23.         <dependency>
  24.             <groupId>com.alibaba</groupId>
  25.             <artifactId>druid</artifactId>
  26.             <version>1.1.22</version>
  27.         </dependency>
  29.         <!--Mybatis-->
  30.         <dependency>
  31.             <groupId>org.mybatis</groupId>
  32.             <artifactId>mybatis</artifactId>
  33.             <version>3.5.2</version>
  34.         </dependency>
  36.         <dependency>
  37.             <groupId>org.mybatis</groupId>
  38.             <artifactId>mybatis-spring</artifactId>
  39.             <version>2.0.2</version>
  40.         </dependency>
  42.         <!--spring 数据源配置-->
  43.         <dependency>
  44.             <groupId>org.springframework</groupId>
  45.             <artifactId>spring-jdbc</artifactId>
  46.             <version>5.1.9.RELEASE</version>
  47.         </dependency>
  49.         <!--lombok-->
  50.         <dependency>
  51.             <groupId>org.projectlombok</groupId>
  52.             <artifactId>lombok</artifactId>
  53.             <version>1.18.10</version>
  54.         </dependency>
  56.         <!--AOP的jar包-->
  57.         <dependency>
  58.             <groupId>org.aspectj</groupId>
  59.             <artifactId>aspectjweaver</artifactId>
  60.             <version>1.9.4</version>
  61.         </dependency>
  63.         <!--Spring依赖-->
  64.         <dependency>
  65.             <groupId>org.springframework</groupId>
  66.             <artifactId>spring-webmvc</artifactId>
  67.             <version>5.1.9.RELEASE</version>
  68.         </dependency>
  70.         <dependency>
  71.             <groupId>javax.servlet.jsp</groupId>
  72.             <artifactId>jsp-api</artifactId>
  73.             <version>2.2</version>
  74.         </dependency>
  76.         <dependency>
  77.             <groupId>javax.servlet</groupId>
  78.             <artifactId>jstl</artifactId>
  79.             <version>1.2</version>
  80.         </dependency>
  82.         <dependency>
  83.             <groupId>javax.servlet</groupId>
  84.             <artifactId>servlet-api</artifactId>
  85.             <version>2.5</version>
  86.         </dependency>
  88.         <!--shiro核心包依赖-->
  89.         <dependency>
  90.             <groupId>org.apache.shiro</groupId>
  91.             <artifactId>shiro-core</artifactId>
  92.             <version>1.4.0</version>
  93.         </dependency>
  94.         <!--shiro web包依赖-->
  95.         <dependency>
  96.             <groupId>org.apache.shiro</groupId>
  97.             <artifactId>shiro-web</artifactId>
  98.             <version>1.4.0</version>
  99.         </dependency>
  101.     </dependencies>
  103.     <!--maven 静态资源管理，主要是为了导出mapper-->
  104.     <build>
  105.         <resources>
  106.             <resource>
  107.                 <directory>src/main/java</directory>
  108.                 <includes>
  109.                     <include>**/*.properties</include>
  110.                     <include>**/*.xml</include>
  111.                     <include>**/*.ini</include>
  112.                 </includes>
  113.                 <filtering>false</filtering>
  114.             </resource>
  115.             <resource>
  116.                 <directory>src/main/resources</directory>
  117.                 <includes>
  118.                     <include>**/*.properties</include>
  119.                     <include>**/*.xml</include>
  120.                     <include>**/*.ini</include>
  121.                 </includes>
  122.                 <filtering>false</filtering>
  123.             </resource>
  124.         </resources>
  125.     </build>

2：数据库建表语句

  1. /*用户表*/
  2. CREATE TABLE `t_user` (
  3.   `id` int(11) NOT NULL AUTO_INCREMENT,
  4.   `username` varchar(20) NOT NULL,
  5.   `password` varchar(100) NOT NULL,
  6.   PRIMARY KEY (`id`),
  7.   UNIQUE KEY `username` (`username`)
  8. ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
  10. INSERT INTO `t_user` VALUES ('1', 'songsong', '123');
  11. INSERT INTO `t_user` VALUES ('2', 'yuanhang', '456');
  13. /*角色表*/
  14. CREATE TABLE `t_role` (
  15.   `id` int(11) NOT NULL AUTO_INCREMENT,
  16.   `role_name` varchar(50) NOT NULL,
  17.   `create_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
  18.   PRIMARY KEY (`id`),
  19.   UNIQUE KEY `role_name` (`role_name`)
  20. ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
  22. INSERT INTO `t_role` VALUES ('1', 'banzhang', '2019-10-10 00:00:00');
  23. INSERT INTO `t_role` VALUES ('2', 'student', '2019-10-09 00:00:00');
  25. /*权限表*/
  26. CREATE TABLE `t_permission` (
  27.   `id` int(11) NOT NULL AUTO_INCREMENT,
  28.   `permission_name` varchar(50) NOT NULL,
  29.   `create_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
  30.   PRIMARY KEY (`id`),
  31.   UNIQUE KEY `permission_name` (`permission_name`)
  32. ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
  34. INSERT INTO `t_permission` VALUES ('1', 'student:yq', '2019-10-09 00:00:00');
  35. INSERT INTO `t_permission` VALUES ('2', 'student:study', '2019-10-09 00:00:00');
  37. /*用户 角色关联表*/
  38. CREATE TABLE `t_user_role` (
  39.   `id` int(11) NOT NULL AUTO_INCREMENT,
  40.   `user_id` int(11) DEFAULT NULL,
  41.   `role_id` int(11) DEFAULT NULL,
  42.   PRIMARY KEY (`id`),
  43.   UNIQUE KEY `user_id` (`user_id`,`role_id`)
  44. ) ENGINE=InnoDB AUTO_INCREMENT=4 DEFAULT CHARSET=utf8;
  46. INSERT INTO `t_user_role` VALUES ('1', '1', '1');
  47. INSERT INTO `t_user_role` VALUES ('3', '1', '2');
  48. INSERT INTO `t_user_role` VALUES ('2', '2', '2');
  50. /*角色 权限关联表*/
  51. CREATE TABLE `t_role_permission` (
  52.   `id` int(11) NOT NULL AUTO_INCREMENT,
  53.   `permission_id` int(11) DEFAULT NULL,
  54.   `role_id` int(11) DEFAULT NULL,
  55.   PRIMARY KEY (`id`),
  56.   UNIQUE KEY `permission_id` (`permission_id`,`role_id`)
  57. ) ENGINE=InnoDB AUTO_INCREMENT=4 DEFAULT CHARSET=utf8;
  59. INSERT INTO `t_role_permission` VALUES ('1', '1', '1');
  60. INSERT INTO `t_role_permission` VALUES ('2', '2', '1');
  61. INSERT INTO `t_role_permission` VALUES ('3', '2', '2');

3：构建javaben对象

com\shiro\vo\UserVo.java

  1. package com.shiro.vo;
  3. import lombok.AllArgsConstructor;
  4. import lombok.Data;
  5. import lombok.NoArgsConstructor;
  7. @Data
  8. @AllArgsConstructor
  9. @NoArgsConstructor
  10. public class UserVo {
  12.     //用户id
  13.     private Integer id;
  14.     //用户名称
  15.     private String username;
  16.     //用户密码
  17.     private String password;
  18. }

com\shiro\vo\RoleVo.java

  1. package com.shiro.vo;
  3. import lombok.AllArgsConstructor;
  4. import lombok.Data;
  5. import lombok.NoArgsConstructor;
  6. import java.util.Date;
  8. @Data
  9. @AllArgsConstructor
  10. @NoArgsConstructor
  11. public class RoleVo {
  13.     //角色id
  14.     private Integer id;
  15.     //角色名称
  16.     private String roleName;
  17.     //创建时间
  18.     private Date createTime;
  19. }

com\shiro\vo\PermissionVo.java

  1. package com.shiro.vo;
  3. import lombok.AllArgsConstructor;
  4. import lombok.Data;
  5. import lombok.NoArgsConstructor;
  6. import java.util.Date;
  8. @Data
  9. @AllArgsConstructor
  10. @NoArgsConstructor
  11. public class PermissionVo {
  13.     //权限id
  14.     private Integer id;
  15.     //权限名称
  16.     private String permissionName;
  17.     //创建时间
  18.     private Date createTime;
  19. }

4：构建mapper接口以及配置文件

查询用户mapper：com\shiro\mapper\UserMapper.java

  1. package com.shiro.mapper;
  3. import com.shiro.vo.UserVo;
  4. import org.apache.ibatis.annotations.Param;
  6. public interface UserMapper {
  8.     //通过用户名查询用户信息
  9.     public UserVo queryUserByUsername(@Param("username") String username);
  10. }

查询用户配置文件：com\shiro\mapper\UserMapper.xml

  1. <?xml version="1.0" encoding="UTF-8" ?>
  2. <!DOCTYPE mapper
  3.         PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
  4.         "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
  6. <mapper namespace="com.shiro.mapper.UserMapper">
  8.     <select id="queryUserByUsername" parameterType="string" resultType="UserVo">
  9.         select * from t_user where username = #{username}
  10.     </select>
  12. </mapper>

查询角色mapper：com\shiro\mapper\RoleMapper.java

  1. package com.shiro.mapper;
  3. import org.apache.ibatis.annotations.Param;
  4. import java.util.Set;
  6. public interface RoleMapper {
  8.     //通过用户名查询角色
  9.     public Set<String> queryAllRoleNameByUsername(@Param("username") String username);
  10. }

查询角色配置文件：com\shiro\mapper\RoleMapper.xml

  1. <?xml version="1.0" encoding="UTF-8" ?>
  2. <!DOCTYPE mapper
  3.         PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
  4.         "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
  6. <mapper namespace="com.shiro.mapper.RoleMapper">
  8.     <select id="queryAllRoleNameByUsername" parameterType="string" resultType="string">
  9.         SELECT t_role.role_name FROM t_user
  10.         INNER JOIN t_user_role on t_user.id = t_user_role.user_id
  11.         INNER JOIN t_role on t_role.id = t_user_role.role_id
  12.         where t_user.username = #{username}
  13.     </select>
  15. </mapper>

查询权限mapper：com\shiro\mapper\PermissionMapper.java

  1. package com.shiro.mapper;
  3. import org.apache.ibatis.annotations.Param;
  4. import java.util.Set;
  6. public interface PermissionMapper {
  8.     //通过用户名查询权限
  9.     public Set<String> queryAllPermissionByUsername(@Param("username") String username);
  10. }

查询权限配置文件：com\shiro\mapper\PermissionMapper.xml

  1. <?xml version="1.0" encoding="UTF-8" ?>
  2. <!DOCTYPE mapper
  3.         PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
  4.         "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
  6. <mapper namespace="com.shiro.mapper.PermissionMapper">
  8.     <select id="queryAllPermissionByUsername" parameterType="string" resultType="string">
  10.         SELECT DISTINCT t_permission.permission_name FROM t_user
  11.         INNER JOIN t_user_role on t_user.id = t_user_role.user_id
  12.         INNER JOIN t_role on t_role.id = t_user_role.role_id
  13.         INNER JOIN t_role_permission on t_role_permission.role_id = t_role.id
  14.         INNER JOIN t_permission on t_permission.id = t_role_permission.permission_id
  15.         where t_user.username = #{username}
  17.     </select>
  19. </mapper>

5：构建数据库连接文件

resources\jdbc.properties

  1. jdbc.driver=com.mysql.jdbc.Driver
  2. jdbc.url=jdbc:mysql://ip:3306/my_test?useUnicode=true&characterEncoding=utf8
  3. jdbc.username=root
  4. jdbc.password=xxxxxxx

6：构建mybatis配置文件

resources\mybatis-config.xml

  1. <?xml version="1.0" encoding="UTF-8" ?>
  2. <!DOCTYPE configuration
  3.         PUBLIC "-//mybatis.org//DTD Config 3.0//EN"
  4.         "http://mybatis.org/dtd/mybatis-3-config.dtd">
  5. <configuration>
  7.     <settings>
  8.         <!--打印sql语句-->
  9.         <setting name="logImpl" value="STDOUT_LOGGING" />
  10.         <!-- 全局性设置懒加载 -->
  11.         <setting name="lazyLoadingEnabled" value="true"/>
  12.         <!-- 每个属性都按需加载 -->
  13.         <setting name="aggressiveLazyLoading" value="false"/>
  14.         <!-- 开启驼峰命名 -->
  15.         <setting name="mapUnderscoreToCamelCase" value="true" />
  16.     </settings>
  18.     <!--开启别名-->
  19.     <typeAliases>
  20.         <package name="com.shiro.vo" />
  21.     </typeAliases>
  23.     <!--mapper文件-->
  24.     <mappers>
  25.         <mapper resource="com/shiro/mapper/UserMapper.xml" />
  26.         <mapper resource="com/shiro/mapper/RoleMapper.xml" />
  27.         <mapper resource="com/shiro/mapper/PermissionMapper.xml" />
  28.     </mappers>
  30. </configuration>

7：构建dao层配置文件

resources\spring-mapper.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <beans xmlns="http://www.springframework.org/schema/beans"
  3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4.        xsi:schemaLocation="http://www.springframework.org/schema/beans
  5.         https://www.springframework.org/schema/beans/spring-beans.xsd">
  7.     <!--加载jdbc配置文件-->
  8.     <bean class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
  9.         <property name="locations">
  10.             <list>
  11.                 <value>classpath:jdbc.properties</value>
  12.             </list>
  13.         </property>
  14.     </bean>
  16.     <!--数据源配置 数据源提供者包括：spring、c3p0、dbcp、druid-->
  17.     <bean id="dataSource" class="org.springframework.jdbc.datasource.DriverManagerDataSource">
  18.         <property name="driverClassName" value="${jdbc.driver}"></property>
  19.         <property name="url" value="${jdbc.url}"></property>
  20.         <property name="username" value="${jdbc.username}"></property>
  21.         <property name="password" value="${jdbc.password}"></property>
  22.     </bean>
  24.     <!--配置得到SqlSessionFactory-->
  25.     <bean id="sqlSessionFactory" class="org.mybatis.spring.SqlSessionFactoryBean">
  26.         <property name="dataSource" ref="dataSource"></property>
  27.         <!--绑定mybatis配置文件-->
  28.         <property name="configLocation" value="classpath:mybatis-config.xml"></property>
  29.     </bean>
  31.     <!--通过MapperScannerConfigurer配置dao接口扫描包 实现动态注入到spring容器中-->
  32.     <bean class="org.mybatis.spring.mapper.MapperScannerConfigurer">
  33.         <!--注入sqlSessionFactory-->
  34.         <property name="sqlSessionFactoryBeanName" value="sqlSessionFactory" />
  35.         <!--要扫描的dao包-->
  36.         <property name="basePackage" value="com.shiro.mapper" />
  37.     </bean>
  39. </beans>

8：构建service接口以及实现类

接口：com\shiro\service\UserService.java

  1. package com.shiro.service;
  3. import com.shiro.vo.UserVo;
  4. import java.util.Set;
  6. public interface UserService {
  8.     /*查询用户*/
  9.     public UserVo queryUserByUsername(String username);
  10.     /*查询角色*/
  11.     public Set<String> queryAllRoleNameByUsername(String username);
  12.     /*查询权限*/
  13.     public Set<String> queryAllPermissionByUsername(String username);
  14. }

实现类：com\shiro\service\impl\UserServiceImpl.java

  1. package com.shiro.service.impl;
  3. import com.shiro.mapper.PermissionMapper;
  4. import com.shiro.mapper.RoleMapper;
  5. import com.shiro.mapper.UserMapper;
  6. import com.shiro.service.UserService;
  7. import com.shiro.vo.UserVo;
  8. import org.springframework.beans.factory.annotation.Autowired;
  9. import org.springframework.stereotype.Service;
  10. import java.util.Set;
  12. @Service
  13. public class UserServiceImpl implements UserService {
  15.     @Autowired
  16.     UserMapper userMapper;
  18.     @Autowired
  19.     RoleMapper roleMapper;
  21.     @Autowired
  22.     PermissionMapper permissionMapper;
  24.     public UserVo queryUserByUsername(String username) {
  25.         return this.userMapper.queryUserByUsername(username);
  26.     }
  28.     public Set<String> queryAllRoleNameByUsername(String username) {
  29.         return this.roleMapper.queryAllRoleNameByUsername(username);
  30.     }
  32.     public Set<String> queryAllPermissionByUsername(String username) {
  33.         return permissionMapper.queryAllPermissionByUsername(username);
  34.     }
  35. }

9：构建service层配置文件

resources\spring-service.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <beans xmlns="http://www.springframework.org/schema/beans"
  3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4.        xmlns:context="http://www.springframework.org/schema/context" xmlns:tx="http://www.springframework.org/schema/tx"
  5.        xmlns:aop="http://www.springframework.org/schema/aop"
  6.        xsi:schemaLocation="http://www.springframework.org/schema/beans
  7.         https://www.springframework.org/schema/beans/spring-beans.xsd
  8.         http://www.springframework.org/schema/context
  9.         https://www.springframework.org/schema/context/spring-context.xsd
  10.         http://www.springframework.org/schema/tx
  11.         http://www.springframework.org/schema/tx/spring-tx.xsd
  12.         http://www.springframework.org/schema/aop
  13.         https://www.springframework.org/schema/aop/spring-aop.xsd">
  15.     <!--注解版扫描包，这个包下面的注解就会生效-->
  16.     <context:component-scan base-package="com.shiro.service" />
  18.     <!--配置事务管理器-->
  19.     <bean id="transactionManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
  20.         <property name="dataSource" ref="dataSource"></property>
  21.     </bean>
  23.     <!--配置事务通知-->
  24.     <tx:advice id="txAdvice" transaction-manager="transactionManager">
  25.         <!--给哪些方法配置事务-->
  26.         <tx:attributes>
  27.             <tx:method name="*" propagation="REQUIRED"/>
  28.         </tx:attributes>
  29.     </tx:advice>
  31.     <!--配置事务切入-->
  32.     <aop:config>
  33.         <aop:pointcut id="txpoint" expression="execution(* com.shiro.mapper.*.*(..))"></aop:pointcut>
  34.         <aop:advisor advice-ref="txAdvice" pointcut-ref="txpoint"></aop:advisor>
  35.     </aop:config>
  37. </beans>

10：构建controller控制类

com\shiro\controller\LoginController.java

  1. package com.shiro.controller;
  3. import com.shiro.vo.UserVo;
  4. import org.apache.shiro.SecurityUtils;
  5. import org.apache.shiro.authc.UsernamePasswordToken;
  6. import org.apache.shiro.subject.Subject;
  7. import org.springframework.stereotype.Controller;
  8. import org.springframework.web.bind.annotation.GetMapping;
  9. import org.springframework.web.bind.annotation.PostMapping;
  10. import org.springframework.web.bind.annotation.RequestMapping;
  12. @Controller
  13. @RequestMapping("/user")
  14. public class LoginController {
  16.     /*跳转登录界面*/
  17.     @GetMapping("/login")
  18.     public String login(){
  19.         System.out.println("goto login page");
  20.         return "login";
  21.     }
  23.     /*登录请求*/
  24.     @PostMapping("/login")
  25.     public String loginLogic(UserVo userVo){
  26.         System.out.println("login logic");
  27.         //获取subject
  28.         Subject subject = SecurityUtils.getSubject();
  29.         //获取令牌
  30.         UsernamePasswordToken token = new UsernamePasswordToken(userVo.getUsername(), userVo.getPassword());
  31.         //自动调用自定义的realm进行身份认证
  32.         subject.login(token);
  33.         System.out.println("登录状态为：" + subject.getPrincipal());
  34.         return "login"; //登录成功
  35.     }
  37.     /*无权限页面，通过shiro.ini进行跳转*/
  38.     @GetMapping("/error")
  39.     public String userError(){
  40.         System.out.println("没有权限访问的跳转页面");
  41.         return "user_error";
  42.     }
  43. }

11：构建controller层配置文件

resources\springmvc-servlet.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <beans xmlns="http://www.springframework.org/schema/beans"
  3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4.        xmlns:context="http://www.springframework.org/schema/context"
  5.        xmlns:mvc="http://www.springframework.org/schema/mvc"
  6.        xsi:schemaLocation="http://www.springframework.org/schema/beans
  7.         https://www.springframework.org/schema/beans/spring-beans.xsd
  8.         http://www.springframework.org/schema/context
  9.         https://www.springframework.org/schema/context/spring-context.xsd
  10.         http://www.springframework.org/schema/mvc
  11.         https://www.springframework.org/schema/mvc/spring-mvc.xsd">
  13.     <!-- 自动扫描包，让指定包下的注解生效,由IOC容器统一管理 -->
  14.     <context:component-scan base-package="com.shiro.controller"/>
  16.     <!-- 让Spring MVC不处理静态资源 -->
  17.     <mvc:default-servlet-handler />
  19.     <!--annotation-driven配置帮助我们完成处理器映射器和处理器适配器-->
  20.     <mvc:annotation-driven />
  22.     <!--视图解析器:DispatcherServlet给他的ModelAndView-->
  23.     <bean id="viewResolver" class="org.springframework.web.servlet.view.InternalResourceViewResolver">
  24.         <!--前缀-->
  25.         <property name="prefix" value="/WEB-INF/jsp/"/>
  26.         <!--后缀-->
  27.         <property name="suffix" value=".jsp"/>
  28.     </bean>
  29. </beans>

12：构建Spring总配置文件

resources\applicationContext.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <beans xmlns="http://www.springframework.org/schema/beans"
  3.        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4.        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
  6.     <import resource="spring-mapper.xml"/>
  7.     <import resource="spring-service.xml"/>
  8.     <import resource="springmvc-servlet.xml"/>
  9. </beans>

13：构建自定义shiro的Realm

com\shiro\realm\MyRealm.java

  1. package com.shiro.realm;
  3. import com.shiro.service.UserService;
  4. import com.shiro.vo.UserVo;
  5. import org.apache.shiro.authc.AuthenticationException;
  6. import org.apache.shiro.authc.AuthenticationInfo;
  7. import org.apache.shiro.authc.AuthenticationToken;
  8. import org.apache.shiro.authc.SimpleAuthenticationInfo;
  9. import org.apache.shiro.authz.AuthorizationInfo;
  10. import org.apache.shiro.authz.SimpleAuthorizationInfo;
  11. import org.apache.shiro.realm.AuthorizingRealm;
  12. import org.apache.shiro.subject.PrincipalCollection;
  13. import org.springframework.stereotype.Component;
  14. import org.springframework.web.context.ContextLoader;
  15. import java.util.Set;
  17. @Component
  18. /*自定义realm*/
  19. public class MyRealm extends AuthorizingRealm {
  21.     /*查询权限信息
  22.     * 触发：请求触发：/user/query = roles["admin"]
  23.     * /user/insert = perms["user:insert"]  <shiro:hasRole  <shiro:hasPermission
  24.     * 查询方式：通过用户名查询角色 权限信息
  25.     * */
  26.     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
  27.         //获取用户登录时发送过来的用户名
  28.         String username = principalCollection.getPrimaryPrincipal().toString();
  29.         //查询用户权限（DB）
  30.         UserService userServiceImpl = ContextLoader.getCurrentWebApplicationContext().getBean("userServiceImpl", UserService.class);
  31.         Set<String> roles = userServiceImpl.queryAllRoleNameByUsername(username);
  32.         Set<String> perms = userServiceImpl.queryAllPermissionByUsername(username);
  34.         SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(roles);
  35.         info.setStringPermissions(perms);
  36.         return info;
  37.     }
  39.     /*查询身份信息
  40.     * 触发：subject.login(token)
  41.     * */
  42.     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
  44.         //获取用户登录时发送过来的用户名
  45.         String username = token.getPrincipal().toString();
  46.         //查询用户信息（DB）
  47.         UserService userServiceImpl = ContextLoader.getCurrentWebApplicationContext().getBean("userServiceImpl", UserService.class);
  48.         UserVo userVo = userServiceImpl.queryUserByUsername(username);
  49.         if(userVo==null){
  50.             return null;
  51.         }
  53.         return new SimpleAuthenticationInfo(userVo.getUsername(), userVo.getPassword(),this.getName());
  54.     }
  55. }

14：构建shiro配置文件

resources\shiro.ini

  1. [main]
  2. #没有身份认证时的跳转地址（自定义）
  3. shiro.loginUrl= /user/login
  4. #角色权限校验不通过时的跳转地址
  5. shiro.unauthorizedUrl = /user/error
  6. #登出后的跳转地址
  7. shiro.redirectUrl = /user/login
  8. #声明自定义realm
  9. realm = com.shiro.realm.MyRealm
  10. #注册安装自定义realm
  11. securityManager.realms=$realm
  13. [urls]
  14. #不拦截
  15. /user/login = anon
  16. /getuser = anon
  17. /getrole = anon
  18. #删除用户 要登录而且角色必须是管理员和经理
  19. /user/delUser = authc,roles["admin","manager"]
  20. #查询用户 要登录而且必须有user:query的权限
  21. /user/getallUsers = authc
  22. #登出
  23. /user/logout = logout

15：配置web.xml配置spring及shiro加载项

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
  3.          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4.          xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd"
  5.          version="4.0">
  7.     <!--
  8.     在启动时初始化shiro环境 将securityManager托管到SecurityUtils工具类中
  9.     -->
  10.     <filter>
  11.         <filter-name>shiroFilter</filter-name>
  12.         <filter-class>org.apache.shiro.web.servlet.ShiroFilter</filter-class>
  13.     </filter>
  14.     <filter-mapping>
  15.         <filter-name>shiroFilter</filter-name>
  16.         <url-pattern>/*</url-pattern>
  17.     </filter-mapping>
  19.     <!--加载shiro.ini默认配置-->
  20.     <listener>
  21.         <listener-class>org.apache.shiro.web.env.EnvironmentLoaderListener</listener-class>
  22.     </listener>
  24.     <!--1.注册DispatcherServlet-->
  25.     <servlet>
  26.         <servlet-name>springmvc</servlet-name>
  27.         <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
  28.         <!--关联一个springmvc的配置文件:【servlet-name】-servlet.xml-->
  29.         <init-param>
  30.             <param-name>contextConfigLocation</param-name>
  31.             <param-value>classpath:applicationContext.xml</param-value>
  32.         </init-param>
  33.         <!--启动级别-1-->
  34.         <load-on-startup>1</load-on-startup>
  35.     </servlet>
  37.     <!--/ 匹配所有的请求；（不包括.jsp）-->
  38.     <!--/* 匹配所有的请求；（包括.jsp）-->
  39.     <servlet-mapping>
  40.         <servlet-name>springmvc</servlet-name>
  41.         <url-pattern>/</url-pattern>
  42.     </servlet-mapping>
  44.     <!--启动Web容器时，初始化spring配置，可以让自定义realm拿到bean-->
  45.     <listener>
  46.         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
  47.     </listener>
  48.     <context-param>
  49.         <param-name>contextConfigLocation</param-name>
  50.         <param-value>classpath:applicationContext.xml</param-value>
  51.     </context-param>
  53. </web-app>

16：构建相关界面

WEB-INF\jsp\login.jsp

  1. <%@ page contentType="text/html;charset=UTF-8" language="java" %>
  2. <%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %>
  3. <html>
  4. <head>
  5.     <title>Title</title>
  6. </head>
  7. <body>
  8. <shiro:guest>
  9.     欢迎您 游客~~~
  10. </shiro:guest>
  11. <br />
  12. <shiro:notAuthenticated>
  13.     请登录：
  14.     <form action="/user/login" method="post">
  15.         username:<input type="text" name="username"><br />
  16.         password:<input type="text" name="password"><br />
  17.         <button type="submit">登录</button>
  18.     </form>
  19. </shiro:notAuthenticated>
  20. <br />
  21. <shiro:authenticated>
  23.         你已经登录 欢迎你：<shiro:principal /> <a href="/user/logout">退出</a>
  25.     <br />
  26.     <%--角色是banzhang或者student--%>
  27.     <shiro:hasAnyRoles name="banzhang,student">
  28.         都要学习【songsong、yuanhang】
  29.     </shiro:hasAnyRoles>
  30.     <br />
  31.     <%--角色是student的--%>
  32.     <shiro:hasRole name="student">
  33.         我是学生【songsong、yuanhang】
  34.     </shiro:hasRole>
  35.     <br />
  36.     <%--角色不是banzhang的--%>
  37.     <shiro:lacksRole name="banzhang">
  38.         我不是班长【yuanhang】
  39.     </shiro:lacksRole>
  40.     <br />
  41.     <%--角色是banzhang的--%>
  42.     <shiro:hasRole name="banzhang">
  43.         我是班长【songsong】
  44.     </shiro:hasRole>
  45.     <br />
  46.     <%--权限包含student:yq--%>
  47.     <shiro:hasPermission name="student:yq">
  48.         我有收钱的权限【songsong】
  49.     </shiro:hasPermission>
  50.     <br />
  51.     <%--权限不包含student:yq的--%>
  52.     <shiro:lacksPermission name="student:yq">
  53.         我没有收钱的权限【yuanhang】
  54.     </shiro:lacksPermission>
  56. </shiro:authenticated>
  58. </body>
  59. </html>

WEB-INF\jsp\user_error.jsp

  1. <%@ page contentType="text/html;charset=UTF-8" language="java" %>
  2. <html>
  3. <head>
  4.     <title>Title</title>
  5. </head>
  6. <body>
  7.     权限不足
  8. </body>
  9. </html>

17：访问测试

shiro：自定义remle（二）的更多相关文章

  1. Shiro笔记（二）身份验证

    Shiro笔记(二)身份验证 一.核心代码 @Test public void helloWorldTest(){ IniSecurityManagerFactory factory = new In ...

  2. Shiro 自定义登陆、授权、拦截器

    Shiro 登陆.授权.拦截 按钮权限控制 一.目标 Maven+Spring+shiro 自定义登陆.授权 自定义拦截器 加载数据库资源构建拦截链 使用总结: 1.需要设计的数据库:用户.角色.权限 ...

  3. 解决shiro自定义filter后，ajax登录无法登录，并且无法显示静态资源的问题

    这个问题困扰了我一天,看了下面两个文章,豁然开朗: https://www.cnblogs.com/gj1990/p/8057348.html https://412887952-qq-com.ite ...

  4. Android自定义视图二：如何绘制内容

    这个系列是老外写的,干货!翻译出来一起学习.如有不妥,不吝赐教! Android自定义视图一:扩展现有的视图,添加新的XML属性 Android自定义视图二:如何绘制内容 Android自定义视图三: ...

  5. PHP自定义生成二维码跳转地址

      比较简单的一款PHP自定义生成二维码跳转地址,手机端微信扫码,自动跳转到定义好的链接.支持自定义生成二维码尺寸.间距等.    鼠标悬浮显示二维码弹出层,离开后消失.js实现,代码如下: $(fu ...

  6. vue2.0 自定义 生成二维码（QRCode）组件

    1.自定义 生成二维码组件 QRCode.vue <!-- 生成二维码 组件 --> <template> <canvas class="qrcode-canv ...

  7. Apcahe Shiro学习笔记(二)：通过JDBC进行权限控制

    一.概述: 官方对Realm(领域)的描述:https://www.infoq.com/articles/apache-shiro 其功能本质上是一个安全特定的DAO,用于链接数据持久层(任何形式的都 ...

  8. shiro基础学习(二)—shiro认证

    一.shiro简介      shiro是apache旗下一个开源框架,它将软件系统的安全认证相关的功能抽取出来,实现用户身份认证.权限授权.加密.会话管理等功能,组成了一个通用的安全认证框架. 以下 ...

  9. Shiro自定义realm实现密码验证及登录、密码加密注册、修改密码的验证

    一:先从登录开始,直接看代码 @RequestMapping(value="dologin",method = {RequestMethod.GET, RequestMethod. ...

随机推荐

  1. 使用Keras进行深度学习：（三）使用text-CNN处理自然语言（上）

    欢迎大家关注我们的网站和系列教程:http://www.tensorflownews.com/,学习更多的机器学习.深度学习的知识! 上一篇文章中一直围绕着CNN处理图像数据进行讲解,而CNN除了处理 ...

  2. nginx IF 指令

    变量名可以使用"="或"!="运算符 ~ 符号表示区分大小写字母的匹配 "~*"符号表示不区分大小写字母的匹配 "!"和 ...

  3. iOS 缩小 ipa 大小

    一.爱奇艺 爱奇艺移动应用优化之路:如何让崩溃率小于千分之二 iOS8 对于 App 的 text 段有 60MB 的限制: 超过 200MB 的 App 需要连接 WIFI 下载(之前是 150MB ...

  4. [斯坦福大学2014机器学习教程笔记]第五章-控制语句：for,while,if语句

    在本节中,我们将学习如何为Octave程序写控制语句. 首先,我们先学习如何使用for循环.我们将v设为一个10行1列的零向量. 接着,我们写一个for循环,让i等于1到10.写出来就是for i = ...

  5. Validation框架的应用

    Validation框架的应用 一,前言 这篇博客只说一下Validation框架的应用,不涉及相关JSR,相关理论,以及源码的解析. 如果之后需要的话,会再开博客描写,这样会显得主题突出一些. 后续 ...

  6. python编程心得（1）

    1.创建字典     字典名 = {键名1:键值1,键名2:键值2,...}     sanguo = {"诸葛亮草船借箭":"满载而归","关公赴会 ...

  7. LeetCode | 136. 只出现一次的数字Ⅰ Ⅱ

    给定一个非空整数数组,除了某个元素只出现一次以外,其余每个元素均出现两次.找出那个只出现了一次的元素. 说明: 你的算法应该具有线性时间复杂度. 你可以不使用额外空间来实现吗? 示例 1: 输入: [ ...

  8. web font各浏览器兼容问题以及格式

    语法: @font-face { font-family: <identifier>; src: <fontsrc> [, <fontsrc>]*; <fon ...

  9. cephfs分布式系统

                                                               cephfs分布式系统 CephFS:分布式文件系统 l 什么是CephFS: 分 ...

  10. Linux基础管理篇，软件管理程序，yum与rpm

    一.RPM 一般来说,rpm类型的文件在安装的时候,会检测当前的系统是否满足当前软件需要的环境.若符合,则该软件就会被安装,并且会把软件的相关信息写入/var/lib/rpm/目录下的数据库文件中. ...