spring boot 整合apache shiro

package books.shiro;

import books.pojo.Permission;
import books.service.PermissionService;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import javax.annotation.Resource;
import java.util.LinkedHashMap;
import java.util.List;

/**
* @author: GPJ
* @Description: Shiro 核心配置
* @Date Created in 10:16 2018/1/22
* @Modified By:
*/
@Configuration
public class ShiroConfig {

@Resource
private PermissionService permissionService;

@Bean
public ShiroFilterFactoryBean shiroFilter(@Qualifier("securityManager") SecurityManager securityManager) {
ShiroFilterFactoryBean factoryBean = new ShiroFilterFactoryBean();
factoryBean.setSecurityManager(securityManager);

// 默认配置
factoryBean.setLoginUrl("/s/login");
factoryBean.setSuccessUrl("/s/index");
factoryBean.setUnauthorizedUrl("/s/unauthorized");
// 权限配置
LinkedHashMap<String , String> filterChainDefinitionMap = new LinkedHashMap<String , String>();
// 数据库动态配置

List<Permission> permissionList = permissionService.list();
for (Permission permission : permissionList) {
if (permission.getStatus() == 1 && permission.getType() != 1) {
// 字符串拼接权限
filterChainDefinitionMap.put(permission.getUrl(), "rest[" + permission.getUrl() + "]");
}
}

// 其他配置
filterChainDefinitionMap.put("/web/grade/belong", "anon");
filterChainDefinitionMap.put("/s/index", "authc");
filterChainDefinitionMap.put("/s/login", "anon");
filterChainDefinitionMap.put("/s/unauthorized", "anon");
filterChainDefinitionMap.put("/s/logout", "logout");

filterChainDefinitionMap.put("/**", "authc");
factoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
return factoryBean;
}

@Bean("securityManager")
public SecurityManager securityManager(@Qualifier("myRealm") MyRealm myRealm) {
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
securityManager.setRealm(myRealm);
return securityManager;
}

@Bean("myRealm")
public MyRealm myRealm() {
// 定义加密
HashedCredentialsMatcher matcher = new HashedCredentialsMatcher();
matcher.setHashAlgorithmName("MD5");
matcher.setHashIterations(21);

MyRealm realm = new MyRealm();
realm.setCredentialsMatcher(matcher);
return realm;
}

@Bean
public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(@Qualifier("securityManager") SecurityManager securityManager) {
AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
advisor.setSecurityManager(securityManager);
return advisor;
}

@Bean
public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
DefaultAdvisorAutoProxyCreator creator = new DefaultAdvisorAutoProxyCreator();
creator.setProxyTargetClass(true);
return creator;
}
}