Shiro(Java权限框架)入门

        <!-- shiro核心包 -->
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-core</artifactId>
            <version>${shiro.version}</version>
        </dependency>
        <!-- 添加shiro web支持 -->
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-web</artifactId>
            <version>${shiro.version}</version>
        </dependency>

[users]
zs=123,role1,role2,role3
ls=123,role2
ww=123,role3
admin=123,role1,role2,role3,admin


[roles]
role1=user:create,user:update,user:delete,user:view,user:load
role2=user:create,user:delete
role3=user:create
admin=user:*

package com.star.demo;

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.config.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.subject.Subject;

import java.util.ArrayList;
import java.util.Arrays;
import java.util.List;

public class Demo {

    public static void main(String[] args) {

        //org.apache.shiro.authc.IncorrectCredentialsException: Submitted credentials for token 密码错误认证失败
        //org.apache.shiro.authc.UnknownAccountException: Realm [org.apache.shiro...] was unable to find account data
        // 账户不存在错误

        //1：获取securityFactory工厂类
        IniSecurityManagerFactory iniSecurityManagerFactory = new IniSecurityManagerFactory("classpath:shiro" +
                "-permission" +
                ".ini");
        //2.获取安全管理器对象
        SecurityManager instance = iniSecurityManagerFactory.getInstance();
        //3.设置subjectManager对象,把subjec对象交给SecurityUtils管理
        SecurityUtils.setSecurityManager(instance);
        //4.获取subject对象
        Subject subject = SecurityUtils.getSubject();
        //5.生成token
        UsernamePasswordToken usernamePasswordToken = new UsernamePasswordToken("admin","123");
        //6.进行验证
        try {
            //7.登陆（身份认证）
            subject.login(usernamePasswordToken);
            System.out.println("身份认证成功！");
        } catch (AuthenticationException e) {
            e.printStackTrace();
            System.out.println("身份认证失败！");
        }

        //8.用户授权
        try {
//            if(subject.hasRole("role6")){//1.普通授权方式，检查单个授权
            //2.传集合用户授权,有一个未授权的就返回false
//            List<String> list= new ArrayList<>();
//            list.add("role1");
//            list.add("role6");
//            list.add("role3");
//            if(subject.hasAllRoles(list)){//传集合判断权限
            //3.hasRoles方式判断权限
            boolean[] booleans = subject.hasRoles(Arrays.asList("role1", "role2", "role3"));
            boolean f = false;
            int n = 0;
            for (int i = booleans.length - 1; i >= 0; i--) {
                if(booleans[i])
                    ++n;
                if(n==booleans.length){
                    f = true;
                    break;
                }
            }
            if(f){
                System.out.println("用户授权成功！");
            }else {
                System.out.println("用户未授权！");
            }
        } catch (Exception e) {
            e.printStackTrace();
        }

        //9.check方式检查授权,未授权直接报错
        try {
            //1.checkRole方式不存在权限直接报错org.apache.shiro.authz.UnauthorizedException: Subject does not have role [role7]
//            subject.checkRole("role7");
            //2.checkRoles方式不存在直接报错，可以传可变的String参数或者是数组
            subject.checkRoles(Arrays.asList("role1","role2","role3"));
            subject.checkRoles("role1","role2","role3");
            System.out.println("用户已授权~");
        } catch (Exception e) {
            e.printStackTrace();
            System.out.println("用户未授权！");
        }

        //10.permission方式检查权限
        try {
//            //isPermitted可以接受String可变参数，集合等
//            if(subject.isPermitted("user:*"))
//                System.out.println("用户已授权！");
//            else
//                System.out.println("用户未授权！");
            //checkPermitted方式（*代表所有权限不管权限是否存在）
            subject.checkPermission("user:234234");
            System.out.println("用户已授权！");
        } catch (Exception e) {
            e.printStackTrace();
            System.out.println("用户未授权！");
        }


    }

}