[spring-boot] 集成shiro （二）

版权声明：本文为博主原创文章，未经博主允许不得转载。 https://blog.csdn.net/crazyman2010/article/details/76168284

session

shiro有自己的session管理类，因为之前已经在项目中集成了spring session，shiro也可以使用spring session，只要配置shiro使用容器的session管理即可，spring session在后面拦截了容器的session实现。

    @Bean(name = "securityManager")
    public SecurityManager createSecurityManager(UserRealm userRealm,SessionManager shiroSessionManager) {
        DefaultWebSecurityManager manager = new DefaultWebSecurityManager(userRealm);
        manager.setSessionManager(new ServletContainerSessionManager());
        return manager;
    }

spring session可用于分布式环境，所以在授权后，把用户信息存到session中，可以方便共享：

//验证
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        String userName = (String) token.getPrincipal();
        String password = new String((char[]) token.getCredentials());

        User user = userService.findUserByAccount(userName, password);
        if (user == null) {
            throw new IncorrectCredentialsException(); //如果验证失败返回错误信息
        }

        //如果身份认证验证成功，将用户信息保存起来
        return new SimpleAuthenticationInfo(user, password, getName());
    }
//登录api
     try {
          subject.login(token);
          //if no exception, that's it, we're done!
      } catch (AuthenticationException ae) {
          throw new BusinessException("用户名或密码错误");
      }

      User user = (User) subject.getPrincipal();
      subject.getSession().setAttribute("user", user); //将用户信息存放到session

//读取
//一般放到BaseController中
    @Autowired
    protected HttpServletRequest request;

    protected User getUser() {
        return (User) request.getSession().getAttribute("user");
    }

cache

可以使用redis来缓存，实现shiro的CacheManager和Cache的接口即可.
SpringShiroCache.java

import org.apache.shiro.cache.Cache;
import org.apache.shiro.cache.CacheException;
import org.springframework.data.redis.core.ValueOperations;

import java.util.Collection;
import java.util.Set;


public class SpringShiroCache<K, V> implements Cache<K, V> {
    private ValueOperations<K, V> valueOperations;
    private org.springframework.cache.Cache springCache;

    public SpringShiroCache(ValueOperations<K, V> valueOperations, org.springframework.cache.Cache redisCache) {
        this.springCache = redisCache;
        this.valueOperations = valueOperations;
    }

    @Override
    public V get(K k) throws CacheException {
        return valueOperations.get(k);
    }

    @Override
    public V put(K k, V v) throws CacheException {
        valueOperations.set(k, v);
        return v;
    }

    @Override
    public V remove(K k) throws CacheException {
        V v = valueOperations.get(k);
        springCache.evict(k);
        return v;
    }

    @Override
    public void clear() throws CacheException {
        springCache.clear();
    }

    @Override
    public int size() {
        throw new UnsupportedOperationException();
    }

    @Override
    public Set<K> keys() {
        throw new UnsupportedOperationException();
    }

    @Override
    public Collection<V> values() {
        throw new UnsupportedOperationException();
    }
}

RedisShiroCacheManager.java

import org.apache.shiro.cache.Cache;
import org.apache.shiro.cache.CacheException;
import org.apache.shiro.cache.CacheManager;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.redis.cache.RedisCacheManager;
import org.springframework.data.redis.connection.RedisConnectionFactory;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.stereotype.Component;


@Component("shiroCacheManager")
public class RedisShiroCacheManager implements CacheManager {
    @Autowired
    private RedisCacheManager cacheManager;

    @Autowired
    private RedisConnectionFactory redisConnectionFactory;

    @Override
    public <K, V> Cache<K, V> getCache(String s) throws CacheException {
        RedisTemplate<K,V> redisTemplate=new RedisTemplate<>();
        redisTemplate.setConnectionFactory(redisConnectionFactory);
        redisTemplate.afterPropertiesSet();
        return new SpringShiroCache<>(redisTemplate.opsForValue(),cacheManager.getCache(s));
    }
}

ShiroConfig.java

//创建一个securityManager
    @Bean(name = "securityManager")
    public SecurityManager createSecurityManager(UserRealm userRealm, CacheManager shiroCacheManager, SessionManager shiroSessionManager) {
        DefaultWebSecurityManager manager = new DefaultWebSecurityManager(userRealm);
        manager.setCacheManager(shiroCacheManager);
        manager.setSessionManager(shiroSessionManager);
        return manager;
    }