亚洲在线久爱草,狠狠天天香蕉网,天天搞日日干久草,伊人亚洲日本欧美

shiro

1 創建SecurityManager 環境

2 主體提交（Subject）認證

3 通過SecurityManager認證

4 通過Authenticator 認證

5 通過Realm 認證

控制角色權限的注解，requirePermissions可以寫入多個角色權限，推薦使用

加鹽

MD5加密

中間

開始?

項目結構圖

springmvc.xml的配置

<?

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
? ? ? xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
? ? ? xmlns:context="http://www.springframework.org/schema/context"
? ? ? xmlns:mvc="http://www.springframework.org/schema/mvc"
? ? ? xsi:schemaLocation="http://www.springframework.org/schema/beans
? ?http://www.springframework.org/schema/beans/spring-beans.xsd
? ?http://www.springframework.org/schema/context
? ?http://www.springframework.org/schema/context/spring-context.xsd
? ?http://www.springframework.org/schema/mvc
? ?http://www.springframework.org/schema/mvc/spring-mvc-3.0.xsd">
? ? ? ?<context:component-scan base-package="com.imooc.controller"/>
? ? ? ?<mvc:annotation-driven/>
? ? ? ?<!--排除靜態文件-->
? ? ? ?<mvc:resources mapping="/*" location="/"/>
</beans>

spring.xml的配置

<?

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
? ? ? xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
? ? ? xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
? ?<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">
? ? ? ?<property name="securityManager" ref="securityManager"/>
? ? ? ?<property name="loginUrl" value="login.html"/>
? ? ? ?<property name="unauthorizedUrl" value="403.html"/>
? ? ? ?<property name="filterChainDefinitions">
? ? ? ? ? ?<value>
? ? ? ? ? ? ? ?/login.html = anon
? ? ? ? ? ? ? ?/subLogin = anon
? ? ? ? ? ? ? ?/* = authc
? ? ? ? ? ?</value>
? ? ? ?</property>
? ?</bean>
? ?<!--創建SecurityMananger對象-->
? ?<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
? ? ? ?<!--設置自定義Realm-->
? ? ? ?<property name="realm" ref="realm"/>
? ?</bean>

? ?<!--定義自定義的Realm-->
? ?<bean id="realm" class="com.imooc.shiro.realm.CustomerRealm">
? ? ? ?<property name="credentialsMatcher" ref="credentialsMatcher"/>
? ?</bean>

? ?<!--設置加密的算法-->
? ?<bean class="org.apache.shiro.authc.credential.HashedCredentialsMatcher"
? ? ? ? ?id="credentialsMatcher">
? ? ? ?<property name="hashAlgorithmName" value="md5"/>
? ? ? ?<property name="hashIterations" value="1"/>
? ?</bean>
</beans>

web.xml的配置

<?xml?version="1.0"?encoding="UTF-8"?>
<web-app?xmlns="http://xmlns.jcp.org/xml/ns/javaee"
?????????xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
?????????xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee?http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
?????????version="3.1">
????<filter>
????????<filter-name>shiroFilter</filter-name>
????????<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
????</filter>
????<filter-mapping>
????????<filter-name>shiroFilter</filter-name>
????????<url-pattern>/*</url-pattern>
????</filter-mapping>

????<context-param>
????????<param-name>contextConfigLocation</param-name>
????????<param-value>classpath:spring/spring.xml</param-value>
????</context-param>
????<listener>
????????<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
????</listener>

????<servlet>
????????<servlet-name>DispatcherServlet</servlet-name>
????????<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
????????<init-param>
????????????<param-name>contextConfigLocation</param-name>
????????????<param-value>classpath:spring/springmvc.xml</param-value>
????????</init-param>
????????<load-on-startup>1</load-on-startup>
????????<async-supported>true</async-supported>
????</servlet>

????<servlet-mapping>
????????<servlet-name>DispatcherServlet</servlet-name>
????????<url-pattern>/</url-pattern>
????</servlet-mapping>

????<!--?注冊spring提供的針對POST請求的中文亂碼問題?-->
????<filter>
????????<filter-name>CharacterEncodingFilter</filter-name>
????????<filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>
????????<init-param>
????????????<param-name>encoding</param-name>
????????????<param-value>UTF-8</param-value>
????????</init-param>
????</filter>
????<filter-mapping>
????????<filter-name>CharacterEncodingFilter</filter-name>
????????<url-pattern>/*</url-pattern>
????</filter-mapping>
</web-app>

MD5加密，加鹽。

Shiro加密