码迷,mamicode.com
首页 > 其他好文 > 详细

shiro权限认证Realm的四大用法

时间:2019-12-29 20:02:13      阅读:91      评论:0      收藏:0      [点我收藏+]

标签:加密   查询   getpass   span   md5   auth   自己   localhost   efault   

一、SimpleAccountRealm 

public class AuthenticationTest {
    
    SimpleAccountRealm sar=new SimpleAccountRealm();
    
    @Before
    public void addUser() {
        sar.addAccount("mark", "123456","admin","user");
    }
    
    @Test
    public void testAuthentication() {
        //1.构建seruritymanager环境
        DefaultSecurityManager dsm=new DefaultSecurityManager();
        dsm.setRealm(sar);
        
        //2.主题提交认证请求
        SecurityUtils.setSecurityManager(dsm);
        Subject subject=SecurityUtils.getSubject();
        
        UsernamePasswordToken token=new UsernamePasswordToken("mark","123456");
        subject.login(token);
        
        System.out.println("isAuthenticated:"+subject.isAuthenticated());
        
        subject.checkRoles("admin","user");

    }

 

二.IniRealm

public class IniRealmTest {
 
    
    @Test
    public void testIniRealm() {
        IniRealm realm=new IniRealm("classpath:user.ini");
        DefaultSecurityManager defaultSerurityManager=new DefaultSecurityManager();
        defaultSerurityManager.setRealm(realm);
        
        SecurityUtils.setSecurityManager(defaultSerurityManager);
        Subject subject = SecurityUtils.getSubject();
        
        UsernamePasswordToken upt=new UsernamePasswordToken("mark","123456");
        
        subject.login(upt);
        
        System.out.println("isAuthentication:"+subject.isAuthenticated());
        
        subject.checkRole("admin");
        
        subject.checkPermission("user:update");
        
    }
}

三、JDBCRealm

public class JDBCRealmTest {
    
    DruidDataSource dataSource=new DruidDataSource();
    {
        dataSource.setUrl("jdbc:mysql://localhost:3306/xxxx");
        dataSource.setUsername("root");
        dataSource.setPassword("root");
    }
    
    @Test
    public void testJDBCRealm() {
        JdbcRealm realm=new JdbcRealm();
        realm.setDataSource(dataSource);
        realm.setPermissionsLookupEnabled(true);
        //如果不用自己的sql,数据库表名必须与shiro默认的查询语句中的一致,一般情况下都是使用自定义的sql,如下:
        String sql="select password from test_user where user_name=?";
        realm.setAuthenticationQuery(sql);
        String roleSql="select role_name from test_user_roles where user_name=?";
        realm.setUserRolesQuery(roleSql);
        String permissionSql="select permission from test_roles_permissions where role_name=?";
        realm.setPermissionsQuery(permissionSql);
        
        DefaultSecurityManager dsm=new DefaultSecurityManager();
        dsm.setRealm(realm);
        
        SecurityUtils.setSecurityManager(dsm);
        Subject subject = SecurityUtils.getSubject();
        
        UsernamePasswordToken token=new UsernamePasswordToken("xm","123");
        subject.login(token);
        
        System.out.println("isAuthencation:"+subject.isAuthenticated());
        
        subject.checkRole("admin");
        subject.checkRoles("admin","user");
        subject.checkPermission("user:delete");
    }
 
}

四、自定义Realm

public class customRealmTest {
    
    @Test
    public void testCustomRealm() {
        CustomRealm realm=new CustomRealm();
        
        DefaultSecurityManager sdm=new DefaultSecurityManager();
        sdm.setRealm(realm);
        
        HashedCredentialsMatcher hcm=new HashedCredentialsMatcher();
        hcm.setHashAlgorithmName("md5");
        hcm.setHashIterations(1);
        
        realm.setCredentialsMatcher(hcm);
        
        SecurityUtils.setSecurityManager(sdm);
        Subject subject = SecurityUtils.getSubject();
        
        UsernamePasswordToken token=new UsernamePasswordToken("mark","123456");
        subject.login(token);
        System.out.println("isAuthencation:"+subject.isAuthenticated());
        
        subject.checkRole("admin");
        subject.checkRoles("admin","user");
        
        subject.checkPermission("user:delete");
    }
 
}
 
public class CustomRealm extends AuthorizingRealm {
    
    Map<String, String> userMap=new HashMap<>();
    
    {
        //模拟数据库中查询出的数据
        userMap.put("mark", "73bea81c6c06bacab41a995495239545");
        super.setName("customReal");
    }
 
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
 
        String userName = (String) principals.getPrimaryPrincipal();
        //通过用户名获取数据库或缓存中的角色
        Set<String> roles=getRolesByUserName(userName);
        Set<String> premissions=getpremissionsByUserName(userName);
        SimpleAuthorizationInfo info=new SimpleAuthorizationInfo();
        info.setStringPermissions(premissions);
        info.setRoles(roles);
        return info;
    }
 
    private Set<String> getpremissionsByUserName(String userName) {
        Set<String> permission=new HashSet<>();
        permission.add("user:delete");
        return permission;
    }
 
    private Set<String> getRolesByUserName(String userName) {
        Set<String> roles=new HashSet<>();
        roles.add("admin");
        roles.add("user");
        return roles;
    }
 
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        //1.通过主体传过来的信息获取用户名
        String userName=(String) token.getPrincipal();
        //2.通过用户名去数据库获取凭证
        String password=getPassowrdByUserName(userName);
        if(password==null) {
            return null;
        }
        
        SimpleAuthenticationInfo info=new SimpleAuthenticationInfo("mark",password,"customReal");
        //加盐--如果数据库中密码是加盐密文,此处应该设置盐的值
        info.setCredentialsSalt(ByteSource.Util.bytes("mark"));
        return info;
    }
 
    private String getPassowrdByUserName(String userName) {
        //实际中去查数据库   这个方便演示
        return userMap.get(userName);
    }
 
    public static void main(String[] args) {
        System.out.println((int)(1+Math.random()*10));
//        Md5Hash hsh=new Md5Hash("123456");  //md5加密
        Md5Hash hsh=new Md5Hash("123456","mark");  //MD5加密并加盐    更安全
        System.out.println(hsh);
    }
    
 
}

shiro权限认证Realm的四大用法

标签:加密   查询   getpass   span   md5   auth   自己   localhost   efault   

原文地址:https://www.cnblogs.com/wlv1314/p/12115946.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!