官方文档: https://shiro.apache.org/reference.html https://shiro.apache.org/java-authentication-guide.html Terminology you’ll need Subject - Security specific user ‘view’ of an application user. It can be a human being, a third-party process, a server con…