shiro实战（2）--ssm

一、web.xml的配置

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://xmlns.jcp.org/xml/ns/javaee"
xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
id="WebApp_ID" version="3.1">
<display-name>shiro_ssm</display-name>

<context-param>
<param-name>contextConfigLocation</param-name>
<param-value>
classpath:applicationContext.xml,
classpath:applicationContext-shiro.xml
</param-value>
</context-param>
<listener>
<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
</listener>

<servlet>
<servlet-name>mvc-dispatcher</servlet-name>
<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>

<init-param>
<param-name>contextConfigLocation</param-name>
<param-value>classpath:springMVC.xml</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>mvc-dispatcher</servlet-name>
<url-pattern>/</url-pattern>
</servlet-mapping>

<filter>
<filter-name>shiroFilter</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
<init-param>
<param-name>targetFilterLifecycle</param-name>
<param-value>true</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>shiroFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
</web-app>

二、数据库访问配置文件applicationContext.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:aop="http://www.springframework.org/schema/aop"
xmlns:tx="http://www.springframework.org/schema/tx" xmlns:jdbc="http://www.springframework.org/schema/jdbc"
xmlns:context="http://www.springframework.org/schema/context"
xmlns:mvc="http://www.springframework.org/schema/mvc"
xsi:schemaLocation="
http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.2.xsd
http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
http://www.springframework.org/schema/jdbc http://www.springframework.org/schema/jdbc/spring-jdbc-3.2.xsd
http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.2.xsd
http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.2.xsd
http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc.xsd">

<context:annotation-config />
<context:component-scan base-package="com.yuanbo.service"></context:component-scan>

<bean id="dataSource" class="org.springframework.jdbc.datasource.DriverManagerDataSource">
<property name="driverClassName">
<value>com.mysql.jdbc.Driver</value>
</property>
<property name="url">
<value>jdbc:mysql://127.0.0.1:3306/shiro?serverTimezone=GMT%2B8</value>
</property>
<property name="username">
<value>root</value>
</property>
<property name="password">
<value>123456</value>
</property>
</bean>

三、shiro配置文件applicationContext-shiro.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

    xmlns="http://www.springframework.org/schema/beans" xmlns:util="http://www.springframework.org/schema/util"

    xmlns:context="http://www.springframework.org/schema/context" xmlns:p="http://www.springframework.org/schema/p"

    xmlns:tx="http://www.springframework.org/schema/tx" xmlns:mvc="http://www.springframework.org/schema/mvc"

    xmlns:aop="http://www.springframework.org/schema/aop"

    xsi:schemaLocation="http://www.springframework.org/schema/beans

    http://www.springframework.org/schema/beans/spring-beans-3.2.xsd http://www.springframework.org/schema/tx

    http://www.springframework.org/schema/tx/spring-tx-3.2.xsd http://www.springframework.org/schema/context

    http://www.springframework.org/schema/context/spring-context-3.2.xsd http://www.springframework.org/schema/mvc

    http://www.springframework.org/schema/mvc/spring-mvc.xsd http://www.springframework.org/schema/aop

    http://www.springframework.org/schema/aop/spring-aop-3.2.xsd http://www.springframework.org/schema/util

    http://www.springframework.org/schema/util/spring-util.xsd">

    <!-- 配置shiro的过滤器工厂类，id- shiroFilter要和我们在web.xml中配置的过滤器一致 -->

    <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">

        <!-- 调用我们配置的权限管理器 -->

        <property name="securityManager" ref="securityManager" />

        <!-- 配置我们的登录请求地址 -->

        <property name="loginUrl" value="/login" />

        <!-- 如果您请求的资源不再您的权限范围，则跳转到/403请求地址 -->

        <property name="unauthorizedUrl" value="/unauthorized" />

        <!-- 退出 -->

        <property name="filters">

            <util:map>

                <entry key="logout" value-ref="logoutFilter" />

            </util:map>

        </property>

        <!-- 权限配置 -->

        <property name="filterChainDefinitions">

            <value>

                <!-- anon表示此地址不需要任何权限即可访问 -->

                /login=anon

                /index=anon

                /static/**=anon

                /doLogout=logout

                <!--所有的请求(除去配置的静态资源请求或请求地址为anon的请求)都要通过登录验证,如果未登录则跳到/login -->

                /** = authc

            </value>

        </property>

    </bean>

    <!-- 退出过滤器 -->

    <bean id="logoutFilter" class="org.apache.shiro.web.filter.authc.LogoutFilter">

        <property name="redirectUrl" value="/index" />

    </bean>

    <!-- 会话ID生成器 -->

    <bean id="sessionIdGenerator"

        class="org.apache.shiro.session.mgt.eis.JavaUuidSessionIdGenerator" />

    <!-- 会话Cookie模板 关闭浏览器立即失效 -->

    <bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie">

        <constructor-arg value="sid" />

        <property name="httpOnly" value="true" />

        <property name="maxAge" value="-1" />

    </bean>

    <!-- 会话DAO -->

    <bean id="sessionDAO"

        class="org.apache.shiro.session.mgt.eis.EnterpriseCacheSessionDAO">

        <property name="sessionIdGenerator" ref="sessionIdGenerator" />

    </bean>

    <!-- 会话验证调度器，每30分钟执行一次验证 ，设定会话超时及保存 -->

    <bean name="sessionValidationScheduler"

        class="org.apache.shiro.session.mgt.ExecutorServiceSessionValidationScheduler">

        <property name="interval" value="1800000" />

        <property name="sessionManager" ref="sessionManager" />

    </bean>

    <!-- 会话管理器 -->

    <bean id="sessionManager"

        class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">

        <!-- 全局会话超时时间（单位毫秒），默认30分钟 -->

        <property name="globalSessionTimeout" value="1800000" />

        <property name="deleteInvalidSessions" value="true" />

        <property name="sessionValidationSchedulerEnabled" value="true" />

        <property name="sessionValidationScheduler" ref="sessionValidationScheduler" />

        <property name="sessionDAO" ref="sessionDAO" />

        <property name="sessionIdCookieEnabled" value="true" />

        <property name="sessionIdCookie" ref="sessionIdCookie" />

    </bean>

    <!-- 安全管理器 -->

    <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">

        <property name="realm" ref="databaseRealm" />

        <property name="sessionManager" ref="sessionManager" />

    </bean>

    <!-- 相当于调用SecurityUtils.setSecurityManager(securityManager) -->

    <bean

        class="org.springframework.beans.factory.config.MethodInvokingFactoryBean">

        <property name="staticMethod"

            value="org.apache.shiro.SecurityUtils.setSecurityManager" />

        <property name="arguments" ref="securityManager" />

    </bean>

    <bean id="databaseRealm" class="com.yuanbo.realm.DatabaseRealm">

    </bean>

    <!-- 保证实现了Shiro内部lifecycle函数的bean执行 -->

    <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />

</beans>

四、springmvc基本配置springMVC.xml

<?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans"

    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:aop="http://www.springframework.org/schema/aop"

    xmlns:tx="http://www.springframework.org/schema/tx" xmlns:jdbc="http://www.springframework.org/schema/jdbc"

    xmlns:context="http://www.springframework.org/schema/context"

    xmlns:mvc="http://www.springframework.org/schema/mvc"

    xsi:schemaLocation="http://www.springframework.org/schema/jdbc http://www.springframework.org/schema/jdbc/spring-jdbc-3.0.xsd

        http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd

        http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd

        http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd

        http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.0.xsd

        http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-3.2.xsd">

     <context:annotation-config />

     <context:component-scan base-package="com.yuanbo.controller">

         <context:include-filter type="annotation" expression="org.springframework.stereotype.Controller"/>

     </context:component-scan>

     <mvc:annotation-driven/>

     <mvc:default-servlet-handler/>

     <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">

         <property name="viewClass" value="org.springframework.web.servlet.view.JstlView"></property>

         <property name="prefix" value="/WEB-INF/jsp"></property>

         <property name="suffix" value=".jsp"></property>

     </bean>

     <!-- 启用shiro注解 -->

     <bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"

             depends-on="lifecycleBeanPostProcessor">

         <property name="proxyTargetClass" value="true"></property>

     </bean>

     <bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">

         <property name="securityManager" ref="securityManager"></property>

     </bean>

     <!-- 控制器异常处理 -->

     <bean id="exceptionHandlerExceptionResolver" class="org.springframework.web.servlet.mvc.method.annotation.ExceptionHandlerExceptionResolver"></bean>

     <bean class="com.yuanbo.exception.DefaultExceptionHandler"></bean>

</beans>

五、日志文件log4j.properties

# Global logging configuration

log4j.rootLogger=ERROR, stdout

# MyBatis logging configuration...

log4j.logger.com.yuanbo=TRACE

# Console output...

log4j.appender.stdout=org.apache.log4j.ConsoleAppender

log4j.appender.stdout.layout=org.apache.log4j.PatternLayout

log4j.appender.stdout.layout.ConversionPattern=%5p [%t] - %m%n

六、PageController

package com.yuanbo.controller;

import org.apache.shiro.authz.annotation.RequiresPermissions;

import org.apache.shiro.authz.annotation.RequiresRoles;

import org.springframework.stereotype.Controller;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.bind.annotation.RequestMethod;

@Controller

@RequestMapping("")

public class PageController {

    @RequestMapping("index")

    public String index() {

        return "index";

    }

    @RequiresPermissions("deleteOrder")

    @RequestMapping("deleteOrder")

    public String deleteOrder() {

        return "deleteOrder";

    }

    @RequiresRoles("productManager")

    @RequestMapping("deleteProduct")

    public String deleteProduct() {

        return "deleteProduct";

    }

    @RequestMapping("listProduct")

    public String listProduct() {

        return "listProduct";

    }

    @RequestMapping(value="/login",method=RequestMethod.GET)

    public String login() {

        return "login";

    }

    @RequestMapping("unauthorized")

    public String noPerms() {

        return "unauthorized";

    }

}

七、LoginController

package com.yuanbo.controller;

import org.apache.shiro.SecurityUtils;

import org.apache.shiro.authc.UsernamePasswordToken;

import org.apache.shiro.session.Session;

import org.apache.shiro.subject.Subject;

import org.springframework.stereotype.Controller;

import org.springframework.ui.Model;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.bind.annotation.RequestMethod;

@Controller

@RequestMapping("")

public class LoginController {

    @RequestMapping(value = "/login", method = RequestMethod.POST)

    public String login(Model model, String name, String password) {

        Subject subject = SecurityUtils.getSubject();

        UsernamePasswordToken token = new UsernamePasswordToken(name, password);

        try {

            subject.login(token);

            Session session = subject.getSession();

            session.setAttribute("subject", subject);

            return "redirect:index";

        } catch (Exception e) {

            model.addAttribute("error","验证失败");

            return "login";

        }

    }

}

八、realm

package com.yuanbo.realm;

import java.util.Set;

import org.apache.shiro.authc.AuthenticationException;

import org.apache.shiro.authc.AuthenticationInfo;

import org.apache.shiro.authc.AuthenticationToken;

import org.apache.shiro.authc.SimpleAuthenticationInfo;

import org.apache.shiro.authc.UsernamePasswordToken;

import org.apache.shiro.authz.AuthorizationInfo;

import org.apache.shiro.authz.SimpleAuthorizationInfo;

import org.apache.shiro.realm.AuthorizingRealm;

import org.apache.shiro.subject.PrincipalCollection;

import org.springframework.beans.factory.annotation.Autowired;

import com.yuanbo.service.PermissionService;

import com.yuanbo.service.RoleService;

import com.yuanbo.service.UserService;

public class DatabaseRealm extends AuthorizingRealm {

    @Autowired

    private UserService userService;

    @Autowired

    private RoleService roleService;

    @Autowired

    private PermissionService permissionService;

    @Override

    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {

        String userName = principalCollection.getPrimaryPrincipal().toString();

        Set<String> roles = roleService.listRoles(userName);

        Set<String> permissions = permissionService.listPermissions(userName);

        SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();

        authorizationInfo.setRoles(roles);

        authorizationInfo.setStringPermissions(permissions);

        return authorizationInfo;

    }

    @Override

    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {

        UsernamePasswordToken t = (UsernamePasswordToken) token;

        String userName = t.getUsername();

        String password = t.getPassword().toString();

        String passwordInDB = userService.getPassword(userName);

        if (passwordInDB == null || !password.equals(passwordInDB))

            throw new AuthenticationException();

        SimpleAuthenticationInfo authenticationInfo = new SimpleAuthenticationInfo(userName, password, getName());

        return authenticationInfo;

    }

}

九、exception

package com.yuanbo.exception;

import org.apache.shiro.authz.UnauthorizedException;

import org.springframework.http.HttpStatus;

import org.springframework.web.bind.annotation.ControllerAdvice;

import org.springframework.web.bind.annotation.ExceptionHandler;

import org.springframework.web.bind.annotation.ResponseStatus;

import org.springframework.web.context.request.NativeWebRequest;

import org.springframework.web.servlet.ModelAndView;

@ControllerAdvice

public class DefaultExceptionHandler {

    @ExceptionHandler({ UnauthorizedException.class })

    @ResponseStatus(HttpStatus.UNAUTHORIZED)

    public ModelAndView processUnauthenticatedException(NativeWebRequest request, UnauthorizedException exception) {

        ModelAndView mav = new ModelAndView();

        mav.addObject("ex", exception);

        mav.setViewName("unauthorized");

        return mav;

    }

}

最后，推荐一个java学习平台吧，感觉挺不错的，写得挺细的，还有问答，可以解疑

https://how2j.cn/k/shiro/shiro-ssm/1727.html?p=81485

shiro实战（2）--ssm的更多相关文章

模仿天猫实战【SSM版】——后台开发
上一篇文章链接:模仿天猫实战[SSM版]--项目起步后台需求分析在开始码代码之前,还是需要先清楚自己要做什么事情,后台具体需要实现哪些功能: 注意: 订单.用户.订单.推荐链接均不提供增删的功能. ...
模仿天猫实战【SSM】——总结
第一篇文章链接:模仿天猫实战[SSM版]--项目起步第二篇文章链接:模仿天猫实战[SSM版]--后台开发总结:项目从4-27号开始写,到今天5-7号才算真正的完工,有许多粗糙的地方,但总算完成了, ...
Shiro实战教程-刘志敏-专题视频课程
Shiro实战教程-62人已学习课程介绍本教程只介绍基本的 Shiro 使用,不会过多分析源码等,重在使用. 适用人群: 1.了解基于Servlet进行Web应用开发 2.了解Spr ...
shiro实战系列(二)之入门实战续
下面讲解基于实战系列一,所以相关的java文件获取pom.xml及其log4j文件同样适用于本次讲解. 一.Using Shiro Using Shiro 现在我们的 SecurityManager ...
shiro实战系列(一)之入门实战
一.什么是shiro? Apache Shiro 是一个强大而灵活的开源安全框架,它干净利落地处理身份认证,授权,企业会话管理和加密. Apache Shiro 的首要目标是易于使用和理解.安全有 ...
shiro实战整合
引入依赖(包括缓存等):  <dependency> <groupId>org.apache.shiro</gr ...
Springmvc+Shiro实战
原文链接:http://blog.csdn.net/qq_37936542/article/details/79010449 springmvc+shiro实现系统粗细粒度的权限管理步骤: 1:表格设 ...
PageHelper分页实战（SSM整合）
步骤一:引入SSM相关的jar包,包列表如下: 步骤二:创建或修改配置文件,配置文件清单如下: applicationContext.xml <?xml version="1.0&qu ...
shiro框架整合ssm框架
下面我通过一个web的maven项目来讲解如何将shiro整合ssm框架,具体结构如下图一.引入依赖的jar包 <?xml version="1.0" encoding=& ...

随机推荐

SSM非springboot配置swagger2
前提:maven,ssm,不是springboot项目 1.在maven中添加依赖   ...
poj 2955 Brackets (区间dp基础题)
We give the following inductive definition of a “regular brackets” sequence: the empty sequence is a ...
JVM 学习笔记二：JVM内存区域
一.内存分配概述
因特尔CPU上TM和R标识的区别
TM是英文trademark的缩写,TM标志并非对商标起到保护作用,它与R不同,TM表示的是该商标已经向国家商标局提出申请,并且国家商标局也已经下发了<受理通知书>,进入了异议期,这样就可 ...
Android 日期对话框 DatePickerDialog
private int year; private int monthOfYear; private int dayOfMonth; @Override protected void onCreate ...
java基础练习题
1变量.运算符和类型转换:1.1手动输入一个学生的成绩,对这个成绩进行一次加分,加当前成绩的20%,输出加分后成绩 Scanner scan = new Scanner(System.in); Sys ...
html和css的基本功
1.块级元素和行内元素和行内块元素的区别块级元素:独占一行的,可以设置宽高和内外边距的(<div>/<h1>~<h6>/<p>/<ul>/ ...
<离散数学>代数系统——群，半群
------运算的定义及性质设S是一个非空集合,映射f:Sn->S称为S上的一个n元运算.假设“•”是定义在集合S上的一个二元运算.若: ∀x,y∈S,x•y∈S,则称“•”在S上是封闭的. ...
Docker Compose部署Nexus3时的docker-compose,yml代码
场景 Docker-Compose简介与Ubuntu Server 上安装Compose: https://blog.csdn.net/BADAO_LIUMANG_QIZHI/article/deta ...
.netcore2.1 ef 使用外键关联查询
//实体类 [Table("invoiceinfo", Schema = "obs")] public class invoice { [Key] public ...

shiro实战（2）--ssm

shiro实战（2）--ssm的更多相关文章

随机推荐

热门专题