shiro权限控制

1.shiro权限管理
1.新建shiroConfiguration类，与po、vo包同级

@Configuration
public class ShiroCinfiguration {

//创建realm
@Bean
public NewsRealm getRealm(){return new NewsRealm();}

//创建安全管理器
@Bean
public SecurityManager securityManager(NewsRealm realm){
//使用默认的安全管理器
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager(realm);
//将自定义realm交给安全管理器统一调度管理
return securityManager;
}

//配置shiroguol器工厂
@Bean
public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager){
ShiroFilterFactoryBean shiroFilterFactory = new ShiroFilterFactoryBean();
shiroFilterFactory.setSecurityManager(securityManager);
//通用配置
shiroFilterFactory.setLoginUrl("/admin");
shiroFilterFactory.setUnauthorizedUrl("/admin");
/*
* key：请求路径
* value：过滤器类型
* */
Map<String,String> filterMap = new LinkedHashMap<>();
filterMap.put("/admin/types","perms[user-types]");
filterMap.put("/admin/news","perms[user-news]");
filterMap.put("/admin/tags","perms[user-tags]");
filterMap.put("/admin/login","anon");
filterMap.put("/admin/**","authc");
System.out.println(filterMap);
//设置过滤器
shiroFilterFactory.setFilterChainDefinitionMap(filterMap);
return shiroFilterFactory;

}
//开启shiro注解支持
@Bean
public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager){
AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
advisor.setSecurityManager(securityManager);
return advisor;
}
}

2.建立role实体类

@Entity
@Table(name="t_role")
public class Role implements Serializable {
private static final long serialVersionUID = 2057484709089375773L;
@Id
@GeneratedValue(strategy = GenerationType.IDENTITY)
private Long id;
private String name;
private String description;

@ManyToMany(mappedBy = "roles")
private Set<User> users = new HashSet<>(0);

@ManyToMany(fetch = FetchType.EAGER)
private Set<Permission> permissions = new HashSet<>(0);
}

3.建立permission实体类

@Entity
@Table(name="t_permission")
public class Permission implements Serializable{
private static final long serialVersionUID = 423698596935410559L;
@Id
@GeneratedValue(strategy = GenerationType.IDENTITY)
private Long id;
private String name;
private String code;
private String description;
}

5.logincontroller类修改

@PostMapping("/login")
public String login(@RequestParam String username, @RequestParam String password,
HttpSession session, RedirectAttributes attributes){
try{
//构造登陆令牌
UsernamePasswordToken upToken = new UsernamePasswordToken(username,password);
//获取subject
Subject subject = SecurityUtils.getSubject();
subject.login(upToken);
User user = (User) subject.getPrincipal();
session.setAttribute("user",user);
return "admin/index";
}catch (Exception e){
attributes.addFlashAttribute("message","用户名或密码错误");
return "redirect:/admin";
}
}

2.springcloud eureka
在pom.xml文件中添加以下依赖

tk.mybatis
mapper-spring-boot-starter
2.0.4

5.po包中建立user实体类

@Table(name = “tb_user”)
public class User implements Serializable {
private static final long serialVersionUID = 532052702063464346L;
@Id
@GeneratedValue(strategy = GenerationType.IDENTITY)
private Long id;
private String username;
private String password;
private String name;
private Integer age;
private Integer sex;
private Date birthday;
private Date created;
private Date updated;
}

7.mapper包中UserMapper类

@org.apache.ibatis.annotations.Mapper
public interface UserMappper extends Mapper {

}
8.Service包下建立UserService类

@Service
public class UserService {

@Autowired(required = false)
private UserMappper userMappper;

public User queryById(Long id){
return this.userMappper.selectByPrimaryKey(id);
}
}

9在Controller包中新建UserController.类

@RestController
@RequestMapping("user")
public class UserController {

@Autowired
private UserService userService;

@GetMapping("{id}")
public User queryById(@PathVariable("id") Long id){
return this.userService.queryById(id);
}
}

10.对application.yml文件进行数据库连接配置：

server:
port: 8081
spring:
datasource:
url: jdbc:mysql://localhost:3306/db3?useSSL=true&characterEncoding=utf-8
username: root
password: 999
driver-class-name: com.mysql.jdbc.Driver
application:
name: service-provider   #应用名称，注册到eureka后的服务名称
mybatis:
type-aliases-package: com.lc.service.provider.po
eureka:
client:
service-url:  #EurekaServer地址
defaultZone: http://localhost:10086/eureka