shiro配置springboot的基本配置

 

標准配置

對比 https://www.cnblogs.com/xiaozhang666/p/12058341.html  的對應注入查看

 

 

package com.zys.sys.config;

import lombok.Data;
import org.springframework.boot.context.properties.ConfigurationProperties;

@ConfigurationProperties(prefix ="shiro")
@Data
public class ShiroPeopertoes {
    private String hashAlgorithmName = "md5";
    //散列次數
    private Integer hashIterations = 2;
    //登陸頁面
    private String loginUrl;
    //未授權的頁面
    private String unauthorizedUrl;

    private String[] anonUrls;

    private String logoutUrl;

    private String[] authcUrls;


}

 

#shiro的配置
shiro:
  hash-algorithm-name: md5
  hash-iterations: 2
  login-url: /index.html
  unauthorized-url: /unauthorized.html
  anon-urls:
    - /api/login/doLogin*
    - /api/druid/**
    - /api/swagger-ui.html
    - /api/webjars/**
    - /api/swagger-resources/**
    - /api/v2/**
    - /api/login/captcha
    - /api/login/checkLogin
  logout-url: /api/login/logout*
  authc-urls:
    - /**

 

 

package com.sxt.system.config;

import com.sxt.system.realm.UserRealm;
import com.sxt.system.shiro.ShiroLoginFilter;
import org.apache.shiro.authc.credential.CredentialsMatcher;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.session.mgt.eis.SessionDAO;
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.apache.shiro.web.session.mgt.DefaultWebSessionManager;
import org.crazycake.shiro.IRedisManager;
import org.crazycake.shiro.RedisManager;
import org.crazycake.shiro.RedisSessionDAO;
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.autoconfigure.data.redis.RedisProperties;
import org.springframework.boot.autoconfigure.web.servlet.DispatcherServletAutoConfiguration;
import org.springframework.boot.context.properties.EnableConfigurationProperties;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.filter.DelegatingFilterProxy;
import redis.clients.jedis.JedisPool;
import redis.clients.jedis.JedisPoolConfig;

import javax.servlet.Filter;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

/**
 * @program:
 * @author:
 * @create: 2019-12-18 15:
 **/
@Configuration
@EnableConfigurationProperties(ShiroProperties.class)
public class ShiroAutoConfiguration {

 @Autowired
 private ShiroProperties shiroProperties;

 @Autowired
 private RedisProperties redisProperties;
 /**
 * 創建憑證匹配器
 */
 @Bean
 public HashedCredentialsMatcher credentialsMatcher(){
 HashedCredentialsMatcher credentialsMatcher=new HashedCredentialsMatcher();
 credentialsMatcher.setHashAlgorithmName(shiroProperties.getHashAlgorithmName());
 credentialsMatcher.setHashIterations(shiroProperties.getHashIterations());
 return credentialsMatcher;
 }

 /**
 * 創建realm
 */
 @Bean
 public UserRealm userRealm(CredentialsMatcher credentialsMatcher){
 UserRealm userRealm=new UserRealm();
 //注入憑證匹配器
 userRealm.setCredentialsMatcher(credentialsMatcher);
 return userRealm;
 }

 /**
 * 聲明安全管理器
 */
 @Bean("securityManager")
 public SecurityManager securityManager(DefaultWebSessionManager defaultWebSessionManager, SessionDAO redisSession, UserRealm userRealm){
 DefaultWebSecurityManager securityManager=new DefaultWebSecurityManager();
 securityManager.setRealm(userRealm);
 defaultWebSessionManager.setSessionDAO(redisSession);
 securityManager.setSessionManager(defaultWebSessionManager);
 return securityManager;
 }


 /**
 * 配置過濾器 Shiro 的Web過濾器 id必須和web.xml里面的shiroFilter的 targetBeanName的值一樣
 */
 @Bean("shiroFilter")
 public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager){
 ShiroFilterFactoryBean bean=new ShiroFilterFactoryBean();
 //注入安全管理器
 bean.setSecurityManager(securityManager);
 //注入登陸頁面
 bean.setLoginUrl(shiroProperties.getLoginUrl());
 //注入未授權的頁面地址
 bean.setUnauthorizedUrl(shiroProperties.getUnauthorizedUrl());

 //創建自定義filter
 Map<String, Filter> map=new HashMap<>();
 map.put("authc",new ShiroLoginFilter());
 bean.setFilters(map);
 //注入過濾器
 Map<String, String> filterChainDefinition=new HashMap<>();

 //注入放行地址
 if(shiroProperties.getAnonUrls()!=null&&shiroProperties.getAnonUrls().length>0){
 String[] anonUrls = shiroProperties.getAnonUrls();
 for (String anonUrl : anonUrls) {
 filterChainDefinition.put(anonUrl,"anon");
 }
 }
 //注入登出的地址
 if(shiroProperties.getLogoutUrl()!=null){
 filterChainDefinition.put(shiroProperties.getLogoutUrl(),"logout");
 }
 //注攔截的地址
 String[] authcUrls = shiroProperties.getAuthcUrls();
 if(authcUrls!=null&&authcUrls.length>0){
 for (String authcUrl : authcUrls) {
 filterChainDefinition.put(authcUrl,"authc");
 }
 }
 bean.setFilterChainDefinitionMap(filterChainDefinition);


 return bean;
 }


 /**
 * 注冊過濾器
 */
 @Bean
 public FilterRegistrationBean<DelegatingFilterProxy> filterRegistrationBeanDelegatingFilterProxy(){
 FilterRegistrationBean<DelegatingFilterProxy> bean=new FilterRegistrationBean<>();
 //創建過濾器
 DelegatingFilterProxy proxy=new DelegatingFilterProxy();
 proxy.setTargetBeanName("shiroFilter");
 proxy.setTargetFilterLifecycle(true);
 bean.setFilter(proxy);
 List<String> servletNames=new ArrayList<>();
 servletNames.add(DispatcherServletAutoConfiguration.DEFAULT_DISPATCHER_SERVLET_BEAN_NAME);
 bean.setServletNames(servletNames);
 return bean;
 }

 /*加入注解的使用，不加入這個注解不生效--開始*/
 /**
 *
 * @param securityManager
 * @return
 */
 @Bean
 public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
 AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
 authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
 return authorizationAttributeSourceAdvisor;
 }
 @Bean
 public DefaultAdvisorAutoProxyCreator getDefaultAdvisorAutoProxyCreator() {
 DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator=new DefaultAdvisorAutoProxyCreator();
 advisorAutoProxyCreator.setProxyTargetClass(true);
 return advisorAutoProxyCreator;
 }
 /*加入注解的使用，不加入這個注解不生效--結束*/


 /**
 * 使用Redis 來存儲登錄的信息
 *sessionDao 還需要設置給sessionManager
 */
 @Bean
 public SessionDAO redisSessionDAO(IRedisManager redisManager) {
 RedisSessionDAO redisSessionDAO = new RedisSessionDAO();
 redisSessionDAO.setRedisManager(redisManager); //操作那個redis
 redisSessionDAO.setExpire(7*24*3600); // 用戶的登錄信息保存多久？ 7 天
 // redisSessionDAO.setKeySerializer(keySerializer); jdk
 // redisSessionDAO.setValueSerializer(valueSerializer);jdk
 return redisSessionDAO ;
 }



 @Bean
 public IRedisManager redisManager() {
 RedisManager redisManager = new RedisManager();
 JedisPoolConfig jedisPoolConfig = new JedisPoolConfig();
 jedisPoolConfig.setMaxTotal(redisProperties.getJedis().getPool().getMaxActive()); // 鏈接池的最量 20 ，並發特別大時，連接池的數據可以最大增加20個
 jedisPoolConfig.setMaxIdle(redisProperties.getJedis().getPool().getMaxIdle());// 連接池的最大剩余量15個 ：並發不大，池里面的對象用不上，里面對象太多了。浪費空間
 jedisPoolConfig.setMinIdle(redisProperties.getJedis().getPool().getMinIdle()); // 連接池初始就有10 個
 JedisPool jedisPool = new JedisPool(jedisPoolConfig, redisProperties.getHost(), redisProperties.getPort(),2000,redisProperties.getPassword());
 redisManager.setJedisPool(jedisPool );
 return redisManager ;
 }
}