shiro 实现免密登录(多验证登录)

雨点打透心脏的1/2处 2023-02-10 01:21 111阅读 0赞

**注：在此不介绍 shiro 如何使用**

首先建立一个免密登录实体类 继承 UsernamePasswordToken(为什么继承这个类在此不做说明，使用shiro的人都知道)  
这里采用 小程序登录为例

public class WxOpenIdToken extends UsernamePasswordToken {
    
        private String openId;
    
        @Override
        public Object getPrincipal() {
            return openId;
        }
    
        @Override
        public Object getCredentials() {
            return openId;
        }
    
        public WxOpenIdToken(String openId){
            this.openId = openId;
        }
    }

然后创建一个微信免密登录的shiro认证方式：

public class WxOpenIdRealm extends AuthorizingRealm {
    
        protected Logger logger = LoggerFactory.getLogger(getClass());
    
        @Autowired
        private AuthService authService;
    
        /**
         * 授权
         * @param principals
         * @return
         */
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
            //shiro注解授权判断(根据业务自定义)
            return info;
        }
    
        /**
         * 认证
         * @param token
         * @return
         * @throws AuthenticationException
         */
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
            String openid = (String) token.getCredentials();
            User user = getUserInfoByOpenId(openid);//根据传入的openId等查询数据库
            if (user == null) {
                logger.error(user.getUserName() + "-此openId未绑定");
                return null;
            }
            return new SimpleAuthenticationInfo(user, null, null, getName());
        }
    
    }

**免密登录与密码登录不同的是 需要配置类 进行判断(关键)**

@Configuration
    public class WxHashedCredentialsMatcher extends HashedCredentialsMatcher {
    
        @Override
        public boolean doCredentialsMatch(AuthenticationToken authenticationToken, AuthenticationInfo info) {
            WxOpenIdToken wxToken = (WxOpenIdToken) authenticationToken;
            if(null != wxToken.getPrincipal()){//这里返回true跳过密码验证
                return true;
            }
            return super.doCredentialsMatch(wxToken, info);
        }
    
    }

加好配置之后需要在shiroConfig文件中 添加此认证方式：在此只贴部分代码

@Bean
        public WxOpenIdRealm wxCodeRealm(){
            WxOpenIdRealm wxOpenIdRealm = new WxOpenIdRealm();
            wxOpenIdRealm.setCredentialsMatcher(new WxHashedCredentialsMatcher());
            return wxOpenIdRealm;
        }
        @Bean
        public DefaultWebSecurityManager securityManager() {
            DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
            Collection<Realm> realms = new ArrayList<>(2);
            realms.add(wxCodeRealm());//小程序登录
            realms.add(userRealmMd5());//密码MD5登录
            securityManager.setRealms(realms);
            ThreadContext.bind(securityManager);
            return securityManager;
        }

配置好多认证方式之后，登录时 只需要满足一个条件即可完成登录。  
有问题可以找我，或者私聊源码，本人可能在线的不是很活跃