2020-02-27

庚子鼠年 戊寅月 庚子日

描述

完成作业，准备上课的环境，用百度云服务器安装docker Oracle

技术博客：

随笔

软件工程作业

问题：

这个是PPT里的软件开发流程，那么大型的互联网公司开发具体流程是什么?团队的开发流程是什么？个人的开发流程又是什么？

软件工程与架构又有什么关系？

在技术不足的情况下，我怎么知道我写的程序是安全的？

Shiro之ShiroFilterFactoryBean

@Bean
public ShiroFilterFactoryBean shirFilter(SecurityManager securityManager) {
    ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
    shiroFilterFactoryBean.setSecurityManager(securityManager);
    
    // 用LinkedHashMap添加拦截的uri,其中authc指定需要认证的uri，anon指定排除认证的uri
    Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>();
    filterChainDefinitionMap.put("/admin/auth/login", "anon");
    filterChainDefinitionMap.put("/admin/auth/401", "anon");
    filterChainDefinitionMap.put("/admin/auth/index", "anon");
    filterChainDefinitionMap.put("/admin/auth/403", "anon");
    filterChainDefinitionMap.put("/admin/**", "authc");
    
    // 设置登录失败，授权成功、授权失败之后的uri
    shiroFilterFactoryBean.setLoginUrl("/admin/auth/401");
    shiroFilterFactoryBean.setSuccessUrl("/admin/auth/index");
    shiroFilterFactoryBean.setUnauthorizedUrl("/admin/auth/403");
    
    
    shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
    return shiroFilterFactoryBean;
}

查询的SQL

select 
user.id as id,
user.user_name as user_name,
user.password as password,
role.id as rid,
role.role_name as role_name,
permissions.id as pid,
permissions.permissions_name as permissions_name
from 
(select * from user where user_name = 'chang') user
left join user_role on user.id = user_role.uid
left join role on role.id = user_role.rid
left join role_permissions on role.id = role_permissions.rid
left join permissions on role_permissions.pid = permissions.id