SpringMVC+Shiro权限管理

 

 使用SHIRO的步骤：
1，导入jar
2，配置web.xml
3，建立dbRelm
4，在Spring中配置

pom.xml中配置如下：

Xml代码 

1        <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 

2          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0http://maven.apache.org/maven-v4_0_0.xsd"> 

3          <modelVersion>4.0.0</modelVersion> 

4          <groupId>com.hyx</groupId> 

5          <artifactId>springmvc</artifactId> 

6          <packaging>war</packaging> 

7          <version>0.0.1-SNAPSHOT</version> 

8          <name>springmvc Maven Webapp</name> 

9          <url>http://maven.apache.org</url> 

10      <dependencies> 

11        <dependency> 

12          <groupId>junit</groupId> 

13          <artifactId>junit</artifactId> 

14          <version>3.8.1</version> 

15          <scope>test</scope> 

16        </dependency> 

17        <!-- SpringMVC核心jar --> 

18        <dependency> 

19            <groupId>org.springframework</groupId> 

20            <artifactId>spring-webmvc</artifactId> 

21            <version>3.2.4.RELEASE</version> 

22        </dependency> 

23        <!-- springmvc连接数据库需要的jar --> 

24        <dependency> 

25            <groupId>org.springframework</groupId> 

26            <artifactId>spring-jdbc</artifactId> 

27            <version>3.2.4.RELEASE</version> 

28        </dependency> 

29        <dependency> 

30            <groupId>org.springframework</groupId> 

31            <artifactId>spring-orm</artifactId> 

32            <version>3.2.4.RELEASE</version> 

33        </dependency> 

34        <!--************************************ --> 

35        <!-- Hibernate相关jar --> 

36        <dependency> 

37            <groupId>org.hibernate</groupId> 

38            <artifactId>hibernate-core</artifactId> 

39            <version>4.2.5.Final</version> 

40        </dependency> 

41        <dependency> 

42            <groupId>org.hibernate</groupId> 

43            <artifactId>hibernate-ehcache</artifactId> 

44            <version>4.2.5.Final</version> 

45        </dependency> 

46        <dependency> 

47            <groupId>net.sf.ehcache</groupId> 

48            <artifactId>ehcache</artifactId> 

49            <version>2.7.2</version> 

50        </dependency> 

51        <dependency> 

52            <groupId>commons-dbcp</groupId> 

53            <artifactId>commons-dbcp</artifactId> 

54            <version>1.4</version> 

55        </dependency> 

56        <dependency> 

57            <groupId>mysql</groupId> 

58            <artifactId>mysql-connector-java</artifactId> 

59            <version>5.1.26</version> 

60        </dependency> 

61        <!-- javax提供的annotation --> 

62        <dependency> 

63            <groupId>javax.inject</groupId> 

64            <artifactId>javax.inject</artifactId> 

65            <version>1</version> 

66        </dependency>         

67        <!-- ****************************--> 

68          

69        <!-- hibernate验证 --> 

70        <dependency> 

71            <groupId>org.hibernate</groupId> 

72            <artifactId>hibernate-validator</artifactId> 

73            <version>5.0.1.Final</version> 

74        </dependency> 

75        <!-- 用于对@ResponseBody注解的支持 --> 

76        <dependency> 

77            <groupId>org.codehaus.jackson</groupId> 

78            <artifactId>jackson-mapper-asl</artifactId> 

79            <version>1.9.13</version> 

80        </dependency>         

81        <!-- 提供对c标签的支持 --> 

82        <dependency> 

83            <groupId>javax.servlet</groupId> 

84            <artifactId>jstl</artifactId> 

85            <version>1.2</version> 

86        </dependency> 

87        <!-- servlet api --> 

88        <dependency> 

89          <groupId>javax.servlet</groupId> 

90          <artifactId>servlet-api</artifactId> 

91          <version>2.5</version> 

92        </dependency> 

93          

94        <!--Apache Shiro所需的jar包-->   

95        <dependency>   

96          <groupId>org.apache.shiro</groupId>   

97          <artifactId>shiro-core</artifactId>   

98          <version>1.2.2</version>   

99        </dependency>   

100      <dependency>   

101        <groupId>org.apache.shiro</groupId>   

102        <artifactId>shiro-web</artifactId>   

103        <version>1.2.2</version>   

104      </dependency>   

105      <dependency>   

106        <groupId>org.apache.shiro</groupId>   

107        <artifactId>shiro-spring</artifactId>   

108        <version>1.2.2</version>   

109      </dependency>  

110    </dependencies> 

111      

112    <build> 

113      <finalName>springmvc</finalName> 

114      <!-- maven的jetty服务器插件 --> 

115      <plugins>  

116          <plugin> 

117            <groupId>org.mortbay.jetty</groupId> 

118            <artifactId>jetty-maven-plugin</artifactId> 

119            <configuration> 

120              <scanIntervalSeconds>10</scanIntervalSeconds> 

121              <webApp> 

122                <contextPath>/</contextPath> 

123              </webApp> 

124              <!-- 修改jetty的默认端口 --> 

125              <connectors> 

126                 <connector implementation="org.eclipse.jetty.server.nio.SelectChannelConnector"> 

127                    <port>80</port> 

128                    <maxIdleTime>60000</maxIdleTime> 

129                 </connector> 

130              </connectors> 

131            </configuration> 

132          </plugin> 

133      </plugins> 

134    </build> 

135  </project> 

 

 web.xml中的配置：

Xml代码 

136  <?xml version="1.0" encoding="UTF-8" ?> 

137  <web-app version="2.5"  

138      xmlns="http://java.sun.com/xml/ns/javaee"  

139      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"  

140      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee  

141      http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"> 

142    <display-name>Archetype Created Web Application</display-name> 

143      

144    <!-- spring-orm-hibernate4的OpenSessionInViewFilter--> 

145    <filter> 

146      <filter-name>opensessioninview</filter-name> 

147      <filter-class>org.springframework.orm.hibernate4.support.OpenSessionInViewFilter</filter-class> 

148    </filter> 

149    <filter-mapping> 

150      <filter-name>opensessioninview</filter-name> 

151      <url-pattern>/*</url-pattern> 

152    </filter-mapping> 

153      

154    <!-- 配置springmvc servlet --> 

155    <servlet> 

156      <servlet-name>springmvc</servlet-name> 

157      <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> 

158      <load-on-startup>1</load-on-startup> 

159    </servlet> 

160    <servlet-mapping> 

161      <servlet-name>springmvc</servlet-name> 

162      <!-- / 表示所有的请求都要经过此serlvet --> 

163      <url-pattern>/</url-pattern> 

164    </servlet-mapping> 

165      

166    <!-- spring的监听器 --> 

167    <context-param> 

168      <param-name>contextConfigLocation</param-name> 

169      <param-value>classpath:applicationContext*.xml</param-value> 

170    </context-param> 

171    <listener> 

172      <listener-class> 

173          org.springframework.web.context.ContextLoaderListener 

174      </listener-class> 

175    </listener> 

176      

177    <!-- Shiro配置 -->   

178    <filter>   

179      <filter-name>shiroFilter</filter-name>   

180      <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>   

181    </filter>   

182    <filter-mapping>   

183      <filter-name>shiroFilter</filter-name>   

184      <url-pattern>/*</url-pattern>   

185    </filter-mapping> 

186      

187  </web-app> 

 

  

 在spring的配置文件中配置，为了区别spring原配置和shiro我们将shiro的配置独立出来。

applicationContext-shiro.xml

Xml代码 

188  <?xml version="1.0" encoding="UTF-8" ?> 

189  <beans xmlns="http://www.springframework.org/schema/beans" 

190         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 

191         xmlns:aop="http://www.springframework.org/schema/aop" 

192         xmlns:tx="http://www.springframework.org/schema/tx" 

193         xmlns:context="http://www.springframework.org/schema/context" 

194         xsi:schemaLocation=" 

195  http://www.springframework.org/schema/beanshttp://www.springframework.org/schema/beans/spring-beans.xsd 

196  http://www.springframework.org/schema/txhttp://www.springframework.org/schema/tx/spring-tx.xsd 

197  http://www.springframework.org/schema/aophttp://www.springframework.org/schema/aop/spring-aop.xsd 

198  http://www.springframework.org/schema/contexthttp://www.springframework.org/schema/context/spring-context.xsd"> 

199    

200      <!-- 配置权限管理器 --> 

201      <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">   

202          <!-- ref对应我们写的realm MyShiro --> 

203          <property name="realm" ref="myShiro"/>   

204          <!-- 使用下面配置的缓存管理器 --> 

205          <property name="cacheManager" ref="cacheManager"/>   

206      </bean> 

207        

208      <!-- 配置shiro的过滤器工厂类，id- shiroFilter要和我们在web.xml中配置的过滤器一致 --> 

209      <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">  

210          <!-- 调用我们配置的权限管理器 -->  

211          <property name="securityManager" ref="securityManager"/>  

212          <!-- 配置我们的登录请求地址 -->  

213          <property name="loginUrl" value="/login"/>   

214          <!-- 配置我们在登录页登录成功后的跳转地址，如果你访问的是非/login地址，则跳到您访问的地址 --> 

215          <property name="successUrl" value="/user"/>   

216          <!-- 如果您请求的资源不再您的权限范围，则跳转到/403请求地址 --> 

217          <property name="unauthorizedUrl" value="/403"/>   

218          <!-- 权限配置 --> 

219          <property name="filterChainDefinitions">   

220              <value>   

221                  <!-- anon表示此地址不需要任何权限即可访问 --> 

222                  /static/**=anon 

223                  <!-- perms[user:query]表示访问此连接需要权限为user:query的用户 --> 

224                  /user=perms[user:query] 

225                  <!-- roles[manager]表示访问此连接需要用户的角色为manager --> 

226                  /user/add=roles[manager] 

227                  /user/del/**=roles[admin] 

228                  /user/edit/**=roles[manager] 

229                  <!--所有的请求(除去配置的静态资源请求或请求地址为anon的请求)都要通过登录验证,如果未登录则跳到/login-->   

230                  /** = authc 

231              </value>   

232          </property>   

233      </bean> 

234        

235        

236      <bean id="cacheManager" class="org.apache.shiro.cache.MemoryConstrainedCacheManager" />   

237      <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />  

238        

239  </beans>