Shiro learning

Shiro小案例

在上篇Shiro入门学习中说到了Shiro可以完成认证，授权等流程。在学习认证流程之前，我们应该先入门一个Shiro小案例。

创建一个java maven项目

　

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>

    <groupId>groupId</groupId>
    <artifactId>Shrio-login</artifactId>
    <version>1.0-SNAPSHOT</version>

    <dependencies>

        <!-- https://mvnrepository.com/artifact/commons-logging/commons-logging -->
        <dependency>
            <groupId>commons-logging</groupId>
            <artifactId>commons-logging</artifactId>
            <version>1.2</version>
        </dependency>

        <!-- https://mvnrepository.com/artifact/org.apache.shiro/shiro-core -->
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-core</artifactId>
            <version>1.3.2</version>
        </dependency>


        <!-- https://mvnrepository.com/artifact/org.slf4j/slf4j-api -->
        <dependency>
            <groupId>org.slf4j</groupId>
            <artifactId>slf4j-api</artifactId>
            <version>1.7.25</version>
        </dependency>

        <!-- https://mvnrepository.com/artifact/org.slf4j/slf4j-log4j12 -->
        <dependency>
            <groupId>org.slf4j</groupId>
            <artifactId>slf4j-log4j12</artifactId>
            <version>1.7.25</version>
        </dependency>


        <dependency>
            <groupId>org.slf4j</groupId>
            <artifactId>slf4j-nop</artifactId>
            <version>1.7.2</version>
        </dependency>
    </dependencies>

</project>

log4j.rootLogger = info,stdout,file
log4j.appender.stdout=org.apache.log4j.ConsoleAppender 
log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
log4j.appender.stdout.layout.ConversionPattern=[%p][%d{yyyy-MM-dd HH:mm:ss}][%C{1}:%L] - %m%n
log4j.appender.file = org.apache.log4j.DailyRollingFileAppender
log4j.appender.file.file=C:\Users\amber.lei\Documents\Learning\Shiro\log\info(+).log

log4j.appender.file.DatePattern= '.'yyyy-MM-dd
log4j.appender.file.layout=org.apache.log4j.PatternLayout
log4j.appender.file.layout.ConversionPattern=[%p][%d{yyyy-MM-dd HH:mm:ss}][%C{1}:%L] - %m%n
log4j.appender.file.Encoding=UTF-8

 LoginDemo.java

package com.amber.login;

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UnknownAccountException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.config.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.subject.Subject;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

/**
 * Shiro入门
 */
public class LoginDemo {
    static Logger logger = LoggerFactory.getLogger(LoginDemo.class);
    public static void main(String[] args) {

        //1.获得SecurityManagerFactory
        IniSecurityManagerFactory iniSecurityManagerFactory = new IniSecurityManagerFactory("classpath:shiro.ini");
        //2.通过工厂获得SecurityManager
        SecurityManager securityManager =  iniSecurityManagerFactory.getInstance();
        //3.把SecurityManger放置到运行环境中
        SecurityUtils.setSecurityManager(securityManager);
        try {
            //4.通过SecurityUtis获取subject
            Subject subject =  SecurityUtils.getSubject();
            UsernamePasswordToken usernamePasswordToken = new UsernamePasswordToken("amber", "111111");//这里的amber 和 111111指用户输入的用户名和密码
            //登陆
            subject.login(usernamePasswordToken);
            //判断是否通过验证，true代表通过验证
            if (subject.isAuthenticated()) {
                logger.info("login successful");
            }
            subject.logout();
        } catch (UnknownAccountException e) {
            logger.error("ERROR incorrect username or passwod", e);
        } catch (AuthenticationException e) {
            logger.error("login failed", e);
        }
    }
}

Shiro.ini

[users]
amber=111111

[users]可以理解成一个用户组，里面有一个用户username：amber ,password：111111.当然在实际开发中，我们的用户名和密码都是从数据库中读取出来的。

Shiro案例流程：

• 通过shiro.ini文件获得到工厂，然后通过工厂获得SecurityManager.
• 把SecuityManager交给SecuityUtils
• 通过SecurityUtils获得到Subject对象
• 把用户传入的用户名和密码，生成UsernamePasswordToken实例
• 把token传给Subject.login(token)，如果验证失败抛出异常