shiro的使用详解~

package com.zys.sys.controller;

import com.zys.sys.common.ActiverUser;
import com.zys.sys.common.ResultObj;
import com.zys.sys.common.WebUtils;
import com.zys.sys.domain.Loginfo;
import com.zys.sys.service.LoginfoService;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import java.util.Date;

@RestController
@RequestMapping("login")
public class LoginController {

    @Autowired
    LoginfoService loginfoService;

    @RequestMapping("login")
    public ResultObj login(String loginname, String pwd){
        //创建Subject对象
        Subject subject = SecurityUtils.getSubject();
        //先把账号密码传入Shiro里面的UsernamePasswordToken对象里面。
        AuthenticationToken token = new UsernamePasswordToken(loginname,pwd);

        try{
　　         //调用安全管理器，安全管理器调用自定义Realm  此时先执行i定义realm
            subject.login(token);
            //登陆成功后就可以通过安全管理器获得用户对象。
            ActiverUser activerUser=(ActiverUser) subject.getPrincipal();
            System.out.println(activerUser.toString());
            WebUtils.getSession().setAttribute("user",activerUser.getUser());
            //记录登录日志，插入登录表
            System.out.println(WebUtils.getRequest().getRemoteAddr());
            Loginfo loginfo = new Loginfo();
            loginfo.setLoginname(activerUser.getUser().getName()+"-"+activerUser.getUser().getLoginname());
            loginfo.setLoginip(WebUtils.getRequest().getRemoteAddr());
            loginfo.setLogintime(new Date());
            this.loginfoService.save(loginfo);
            return ResultObj.LOGIN_SUCCESS;
        }catch (AuthenticationException e){
            return ResultObj.LOGIN_ERROR;
        }
    }
}

package com.zys.sys.UserRealm;

import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.zys.sys.common.ActiverUser;
import com.zys.sys.domain.User;
import com.zys.sys.service.UserService;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.util.ByteSource;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Lazy;

public class UserRealm extends AuthorizingRealm {


    @Autowired
    @Lazy
    UserService userService;

    @Override
    public String getName() {
        return this.getClass().getName();
    }

    @Override
    //认证方法
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {

        return null;
    }

    @Override
    //授权方法
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        QueryWrapper<User> querywapper = new QueryWrapper<>();
        System.out.println(token.getCredentials()+"mmmmmmmmmmmmmmmmmmmmmmmmmmmm");
        System.out.println(token.getPrincipal()+"mmmmmmmmmmmmmmmmmmmmmmmmmmmm");
        querywapper.eq("loginname",token.getPrincipal().toString());
        User user = userService.getOne(querywapper);
        if(null != user){
            ActiverUser auser = new ActiverUser();
            auser.setUser(user);
            ByteSource bs = ByteSource.Util.bytes(user.getSalt());
//            System.out.println(bs+"----------------------------------");
            SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(auser,user.getPwd(),bs,this.getName());
            return info;
        }
        return null;
    }
}