一、Springboot2.3加Mybatis-plus集成Apache Shiro实现权限管理（原生集成）

雨点打透心脏的1/2处 2023-02-14 10:48 59阅读 0赞

# 0、项目结构图 #

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70]

## 1、pom.xml ##

<?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    	<modelVersion>4.0.0</modelVersion>
    	<parent>
    		<groupId>org.springframework.boot</groupId>
    		<artifactId>spring-boot-starter-parent</artifactId>
    		<version>2.3.0.RELEASE</version>
    		<relativePath/> 
    	</parent>
    	<groupId>com.jack</groupId>
    	<artifactId>demo</artifactId>
    	<version>0.0.1-SNAPSHOT</version>
    	<packaging>war</packaging>
    	<name>shiro</name>
    	<description>Demo project for Spring shiro</description>
    
    	<properties>
    		<java.version>1.8</java.version>
    	</properties>
    
    	<dependencies>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-web</artifactId>
    		</dependency>
    
    		
    		
    
    		
    		<dependency>
    			<groupId>com.baomidou</groupId>
    			<artifactId>mybatis-plus-boot-starter</artifactId>
    			<version>3.1.0</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>com.baomidou</groupId>
    			<artifactId>mybatis-plus-generator</artifactId>
    			<version>3.1.0</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.freemarker</groupId>
    			<artifactId>freemarker</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>org.projectlombok</groupId>
    			<artifactId>lombok</artifactId>
    			<optional>true</optional>
    		</dependency>
    
    		<dependency>
    			<groupId>mysql</groupId>
    			<artifactId>mysql-connector-java</artifactId>
    			<scope>runtime</scope>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-tomcat</artifactId>
    			<scope>provided</scope>
    		</dependency>
    
    		<dependency>
    			<groupId>org.apache.shiro</groupId>
    			<artifactId>shiro-core</artifactId>
    			<version>1.5.3</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.apache.shiro</groupId>
    			<artifactId>shiro-spring</artifactId>
    			<version>1.5.3</version>
    		</dependency>
    
    		<dependency>
    			<groupId>com.alibaba</groupId>
    			<artifactId>druid</artifactId>
    			<version>1.1.22</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.apache.commons</groupId>
    			<artifactId>commons-lang3</artifactId>
    			<version>3.10</version>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework</groupId>
    			<artifactId>spring-context-support</artifactId>
    			<version>5.2.6.RELEASE</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.apache.tomcat.embed</groupId>
    			<artifactId>tomcat-embed-jasper</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>javax.servlet</groupId>
    			<artifactId>javax.servlet-api</artifactId>
    		</dependency>
    		<dependency>
    			<groupId>javax.servlet</groupId>
    			<artifactId>jstl</artifactId>
    		</dependency>
    
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-test</artifactId>
    			<scope>test</scope>
    			<exclusions>
    				<exclusion>
    					<groupId>org.junit.vintage</groupId>
    					<artifactId>junit-vintage-engine</artifactId>
    				</exclusion>
    			</exclusions>
    		</dependency>
    	</dependencies>
    
    	<build>
    		<plugins>
    			<plugin>
    				<groupId>org.springframework.boot</groupId>
    				<artifactId>spring-boot-maven-plugin</artifactId>
    			</plugin>
    		</plugins>
    	</build>
    
    </project>

## 2、application.properties ##

## database ##
    spring.datasource.type=com.alibaba.druid.pool.DruidDataSource
    spring.datasource.driver-class-name=com.mysql.jdbc.Driver
    spring.datasource.url=jdbc:mysql://localhost:3306/db_shiro?useUnicode=true&useSSL=false&characterEncoding=utf8&serverTimezone=Asia/Shanghai
    spring.datasource.username=root
    spring.datasource.password=123456
    
    ## mybatis plus ##
    mybatis-plus.mapper-locations=mapper/*.xml
    mybatis-plus.typeAliasesPackage=com.jack.demo.entity
    mybatis-plus.global-config.db-config.logic-delete-value=9
    mybatis-plus.global-config.db-config.logic-not-delete-value=1
    
    ## jsp ##
    spring.mvc.view.prefix=/WEB-INF/jsp/
    spring.mvc.view.suffix=.jsp
    spring.mvc.throw-exception-if-no-handler-found=true
    spring.mvc.static-path-pattern=/**

## 3、AuthRealm（授权、认证登录） ##

package com.jack.demo;
    
    import com.jack.demo.entity.Permission;
    import com.jack.demo.entity.Role;
    import com.jack.demo.entity.User;
    import com.jack.demo.service.UserService;
    import org.apache.commons.collections.CollectionUtils;
    import org.apache.shiro.authc.*;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.authz.SimpleAuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import org.springframework.beans.factory.annotation.Autowired;
    
    import java.util.ArrayList;
    import java.util.List;
    import java.util.Set;
    
    /** * @program: demo * @description: 认证登录 * @author: Jack.Fang * @date:2020-06-02 1432 **/
    public class AuthRealm extends AuthorizingRealm { 
    
        @Autowired
        private UserService userService;
    
        //授权
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { 
            User user = (User)principalCollection.fromRealm(this.getClass().getName()).iterator().next();
            List<String> permissionList = new ArrayList<>();
            List<String> roleNameList = new ArrayList<>();
            Set<Role> roleSet = user.getRoles();
            if(CollectionUtils.isNotEmpty(roleSet)){ 
                for(Role role:roleSet){ 
                    roleNameList.add(role.getRname());
                    Set<Permission> permissionSet = role.getPermissions();
                    if(CollectionUtils.isNotEmpty(permissionSet)){ 
                        for(Permission permission:permissionSet){ 
                            permissionList.add(permission.getName());
                        }
                    }
                }
            }
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
            info.addStringPermissions(permissionList);
            info.addRoles(roleNameList);
            return info;
        }
    
        //认证登录
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException { 
            UsernamePasswordToken usernamePasswordToken = (UsernamePasswordToken) authenticationToken;
            String username = usernamePasswordToken.getUsername();
            User user = userService.findByUserName(username);
            return new SimpleAuthenticationInfo(user==null?new User():user,user==null?null:user.getPassword(),this.getClass().getName());
        }
    }

## 4、CredentialMatcher（重写密码校验） ##

package com.jack.demo;
    
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.authc.credential.SimpleCredentialsMatcher;
    
    /** * @program: demo * @description: 密码校验规则重写（自定义MD5验证等） * @author: Jack.Fang * @date:2020-06-02 1445 **/
    public class CredentialMatcher extends SimpleCredentialsMatcher { 
    
        // 密码校验规则重写
        @Override
        public boolean doCredentialsMatch(AuthenticationToken token, AuthenticationInfo info) { 
            UsernamePasswordToken usernamePasswordToken = (UsernamePasswordToken) token;
            String password = new String(usernamePasswordToken.getPassword());
            String dbPassword = (String)info.getCredentials();
            return this.equals(password,dbPassword);
        }
    }

## 4、ShiroConfiguration（shiro配置） ##

package com.jack.demo;
    
    import org.apache.shiro.mgt.SecurityManager;
    import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
    import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
    import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
    import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    import java.util.LinkedHashMap;
    
    /** * @program: demo * @description: Shiro 配置 * @author: Jack.Fang * @date:2020-06-02 1451 **/
    
    @Configuration
    public class ShiroConfiguration { 
    
        @Bean("shiroFilter")
        public ShiroFilterFactoryBean shiroFilter(@Qualifier("securityManager") SecurityManager manager){ 
            ShiroFilterFactoryBean bean = new ShiroFilterFactoryBean();
            bean.setSecurityManager(manager);
    
            bean.setLoginUrl("/login");
            bean.setSuccessUrl("/index");
            bean.setUnauthorizedUrl("/unauthorized");
    
            //取决于DefaultFilter枚举中的值(满足条件后所调用的拦截器)
            LinkedHashMap<String,String> filterChainDefinitionMap = new LinkedHashMap<>();
            filterChainDefinitionMap.put("/index","authc");//需要验证
            filterChainDefinitionMap.put("/login","anon");//无需验证
            filterChainDefinitionMap.put("/loginUser", "anon");//无需验证
            filterChainDefinitionMap.put("/admin", "roles[admin]");//需要管理员登录
            filterChainDefinitionMap.put("/edit", "perms[edit]");//需要编辑权限
            filterChainDefinitionMap.put("/druid/**", "anon");//无需验证
            filterChainDefinitionMap.put("/**", "user");//用户级别（只验证是否登录）
            bean.setFilterChainDefinitionMap(filterChainDefinitionMap);
    
            return bean;
        }
    
        @Bean("securityManager")
        public SecurityManager securityManager(@Qualifier("authRealm") AuthRealm authRealm){ 
            DefaultWebSecurityManager manager = new DefaultWebSecurityManager();
            manager.setRealm(authRealm);
            return manager;
        }
    
        @Bean("authRealm")
        public AuthRealm authRealm(@Qualifier("credentialMatcher") CredentialMatcher credentialMatcher){ 
            AuthRealm authRealm = new AuthRealm();
            authRealm.setCredentialsMatcher(credentialMatcher);
            return authRealm;
        }
    
        @Bean("credentialMatcher")
        public CredentialMatcher credentialMatcher(){ 
            return new CredentialMatcher();
        }
    
        @Bean
        public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(@Qualifier("securityManager") SecurityManager manager){ 
            AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
            advisor.setSecurityManager(manager);
            return advisor;
        }
    
        @Bean
        public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator(){ 
            DefaultAdvisorAutoProxyCreator creator = new DefaultAdvisorAutoProxyCreator();
            creator.setProxyTargetClass(true);
            return creator;
        }
    }

## 5、表设计 ##

### 5.1 图：数据库表 ###

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 1]

### 5.2 建表语句 ###

/* Navicat MySQL Data Transfer Source Server : localhost Source Server Version : 80019 Source Host : localhost:3306 Source Database : db_shiro Target Server Type : MYSQL Target Server Version : 80019 File Encoding : 65001 Date: 2020-06-01 17:30:22 */
    
    SET FOREIGN_KEY_CHECKS=0;
    
    -- ----------------------------
    -- Table structure for permission
    -- ----------------------------
    DROP TABLE IF EXISTS `permission`;
    CREATE TABLE `permission` (
      `pid` int NOT NULL AUTO_INCREMENT,
      `name` varchar(255) NOT NULL DEFAULT '',
      `url` varchar(255) DEFAULT '',
      PRIMARY KEY (`pid`)
    ) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Records of permission
    -- ----------------------------
    INSERT INTO `permission` VALUES ('1', 'add', '');
    INSERT INTO `permission` VALUES ('2', 'delete', '');
    INSERT INTO `permission` VALUES ('3', 'edit', '');
    INSERT INTO `permission` VALUES ('4', 'query', '');
    
    -- ----------------------------
    -- Table structure for permission_role
    -- ----------------------------
    DROP TABLE IF EXISTS `permission_role`;
    CREATE TABLE `permission_role` (
      `rid` int NOT NULL,
      `pid` int NOT NULL,
      KEY `idx_rid` (`rid`),
      KEY `idx_pid` (`pid`)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Records of permission_role
    -- ----------------------------
    INSERT INTO `permission_role` VALUES ('1', '1');
    INSERT INTO `permission_role` VALUES ('1', '2');
    INSERT INTO `permission_role` VALUES ('1', '3');
    INSERT INTO `permission_role` VALUES ('1', '4');
    INSERT INTO `permission_role` VALUES ('2', '1');
    INSERT INTO `permission_role` VALUES ('2', '4');
    
    -- ----------------------------
    -- Table structure for role
    -- ----------------------------
    DROP TABLE IF EXISTS `role`;
    CREATE TABLE `role` (
      `rid` int NOT NULL AUTO_INCREMENT,
      `rname` varchar(255) NOT NULL DEFAULT '',
      PRIMARY KEY (`rid`)
    ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Records of role
    -- ----------------------------
    INSERT INTO `role` VALUES ('1', 'admin');
    INSERT INTO `role` VALUES ('2', 'customer');
    
    -- ----------------------------
    -- Table structure for user
    -- ----------------------------
    DROP TABLE IF EXISTS `user`;
    CREATE TABLE `user` (
      `uid` int NOT NULL AUTO_INCREMENT,
      `username` varchar(255) NOT NULL DEFAULT '',
      `password` varchar(255) NOT NULL DEFAULT '',
      PRIMARY KEY (`uid`)
    ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Records of user
    -- ----------------------------
    INSERT INTO `user` VALUES ('1', 'admin', '123');
    INSERT INTO `user` VALUES ('2', 'demo', '123');
    
    -- ----------------------------
    -- Table structure for user_role
    -- ----------------------------
    DROP TABLE IF EXISTS `user_role`;
    CREATE TABLE `user_role` (
      `uid` int NOT NULL,
      `rid` int NOT NULL,
      KEY `idx_uid` (`uid`),
      KEY `idx_rid` (`rid`)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
    
    -- ----------------------------
    -- Records of user_role
    -- ----------------------------
    INSERT INTO `user_role` VALUES ('1', '1');
    INSERT INTO `user_role` VALUES ('2', '2');

## 6、登录业务 ##

### 6.1 实体类 ###

#### **Permission.java** ####

package com.jack.demo.entity;
    
    import com.baomidou.mybatisplus.annotation.IdType;
    import com.baomidou.mybatisplus.extension.activerecord.Model;
    import com.baomidou.mybatisplus.annotation.TableId;
    import java.io.Serializable;
    import lombok.Data;
    import lombok.EqualsAndHashCode;
    import lombok.experimental.Accessors;
    
    /** * <p> * * </p> * * @author jack * @since 2020-06-01 */
    @Data
    @EqualsAndHashCode(callSuper = false)
    @Accessors(chain = true)
    public class Permission extends Model<Permission> { 
    
        private static final long serialVersionUID = 1L;
    
        @TableId(value = "pid", type = IdType.AUTO)
        private Integer pid;
    
        private String name;
    
        private String url;
    
    
        @Override
        protected Serializable pkVal() { 
            return this.pid;
        }
    
    }

#### **PermissionRole.java** ####

package com.jack.demo.entity;
    
    import com.baomidou.mybatisplus.extension.activerecord.Model;
    import java.io.Serializable;
    import lombok.Data;
    import lombok.EqualsAndHashCode;
    import lombok.experimental.Accessors;
    
    /** * <p> * * </p> * * @author jack * @since 2020-06-01 */
    @Data
    @EqualsAndHashCode(callSuper = false)
    @Accessors(chain = true)
    public class PermissionRole extends Model<PermissionRole> { 
    
        private static final long serialVersionUID = 1L;
    
        private Integer rid;
    
        private Integer pid;
    
    
        @Override
        protected Serializable pkVal() { 
            return null;
        }
    
    }

#### **Role.java** ####

package com.jack.demo.entity;
    
    import com.baomidou.mybatisplus.annotation.IdType;
    import com.baomidou.mybatisplus.extension.activerecord.Model;
    import com.baomidou.mybatisplus.annotation.TableId;
    import java.io.Serializable;
    import java.util.HashSet;
    import java.util.Set;
    
    import lombok.Data;
    import lombok.EqualsAndHashCode;
    import lombok.experimental.Accessors;
    
    /** * <p> * * </p> * * @author jack * @since 2020-06-01 */
    @Data
    @EqualsAndHashCode(callSuper = false)
    @Accessors(chain = true)
    public class Role extends Model<Role> { 
    
        private static final long serialVersionUID = 1L;
    
        @TableId(value = "rid", type = IdType.AUTO)
        private Integer rid;
    
        private String rname;
    
        private Set<Permission> permissions = new HashSet<>();
    
        private Set<User> users = new HashSet<>();
    
    
        @Override
        protected Serializable pkVal() { 
            return this.rid;
        }
    
    }

#### **User .java** ####

package com.jack.demo.entity;
    
    import com.baomidou.mybatisplus.annotation.IdType;
    import com.baomidou.mybatisplus.extension.activerecord.Model;
    import com.baomidou.mybatisplus.annotation.TableId;
    import java.io.Serializable;
    import java.util.HashSet;
    import java.util.Set;
    
    import lombok.Data;
    import lombok.EqualsAndHashCode;
    import lombok.experimental.Accessors;
    
    /** * <p> * * </p> * * @author jack * @since 2020-06-01 */
    @Data
    @EqualsAndHashCode(callSuper = false)
    @Accessors(chain = true)
    public class User extends Model<User> { 
    
        private static final long serialVersionUID = 1L;
    
        @TableId(value = "uid", type = IdType.AUTO)
        private Integer uid;
    
        private String username;
    
        private String password;
    
        private Set<Role> roles = new HashSet<>();
    
    
        @Override
        protected Serializable pkVal() { 
            return this.uid;
        }
    
    }

#### **UserRole.java** ####

package com.jack.demo.entity;
    
    import com.baomidou.mybatisplus.extension.activerecord.Model;
    import java.io.Serializable;
    import lombok.Data;
    import lombok.EqualsAndHashCode;
    import lombok.experimental.Accessors;
    
    /** * <p> * * </p> * * @author jack * @since 2020-06-01 */
    @Data
    @EqualsAndHashCode(callSuper = false)
    @Accessors(chain = true)
    public class UserRole extends Model<UserRole> { 
    
        private static final long serialVersionUID = 1L;
    
        private Integer uid;
    
        private Integer rid;
    
    
        @Override
        protected Serializable pkVal() { 
            return null;
        }
    
    }

### 6.2 接口 与实现 ###

#### **UserService.java** ####

package com.jack.demo.service;
    
    import com.jack.demo.entity.User;
    import com.baomidou.mybatisplus.extension.service.IService;
    
    /** * <p> * 服务类 * </p> * * @author jack * @since 2020-06-01 */
    public interface UserService extends IService<User> { 
    
        User findByUserName(String username);
    }

#### **UserServiceImpl.java** ####

package com.jack.demo.service.impl;
    
    import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
    import com.jack.demo.entity.User;
    import com.jack.demo.mapper.UserMapper;
    import com.jack.demo.service.UserService;
    import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl;
    import org.springframework.stereotype.Service;
    
    /** * <p> * 服务实现类 * </p> * * @author jack * @since 2020-06-01 */
    @Service
    public class UserServiceImpl extends ServiceImpl<UserMapper, User> implements UserService { 
    
        @Override
        public User findByUserName(String username) { 
            /*QueryWrapper<User> queryWrapper = new QueryWrapper(); queryWrapper.eq("username",username); return baseMapper.selectOne(queryWrapper);*/
    
            return baseMapper.findByUserName(username);
        }
    }

#### **UserMapper.java** ####

package com.jack.demo.mapper;
    
    import com.jack.demo.entity.User;
    import com.baomidou.mybatisplus.core.mapper.BaseMapper;
    
    /** * <p> * Mapper 接口 * </p> * * @author jack * @since 2020-06-01 */
    public interface UserMapper extends BaseMapper<User> { 
    
        User findByUserName(String username);
    }

#### **UserMapper.xml** ####

<?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
    <mapper namespace="com.jack.demo.mapper.UserMapper">
    
        
        <resultMap id="BaseResultMap" type="com.jack.demo.entity.User">
            <id column="uid" property="uid" />
            <result column="username" property="username" />
            <result column="password" property="password" />
        </resultMap>
    
        <resultMap id="userMap" type="com.jack.demo.entity.User">
            <id property="uid" column="uid" />
            <result property="username" column="username" />
            <result property="password" column="password" />
            <collection property="roles" ofType="com.jack.demo.entity.Role">
                <id property="rid" column="rid" />
                <result property="rname" column="rname" />
                <collection property="permissions" ofType="com.jack.demo.entity.Permission">
                    <id property="pid" column="pid" />
                    <result property="name" column="name"/>
                    <result property="url" column="url" />
                </collection>
            </collection>
        </resultMap>
    
        <select id="findByUserName" parameterType="string" resultMap="userMap">
            select u.*,r.*,p.*
            from `user` u
            inner join user_role ur on u.uid=ur.uid
            inner join role r on ur.rid=r.rid
            inner join permission_role pr on r.rid=pr.rid
            inner join permission p on pr.pid=p.pid
            where u.username=#{username}
        </select>
    
    </mapper>

## 7、测试 ##

### 7.1 测试页面 ###

![在这里插入图片描述][20200602170901866.png]

#### index.jsp ####

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
    <html>
    <head>
        <title>Home</title>
    </head>
    <body>
    
    <h1> 欢迎登录, ${user.username} </h1>
    </body>
    </html>

#### login.jsp ####

#### unauthorized.jsp （无权限） ####

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
    <html>
    <head>
        <title>Unauthorized</title>
    </head>
    <body>
    Unauthorized!
    </body>
    </html>

### 7.2 测试接口 ###

#### UserController.java ####

package com.jack.demo.controller;
    
    
    import com.jack.demo.entity.User;
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.subject.Subject;
    import org.springframework.web.bind.annotation.RequestMapping;
    
    import org.springframework.stereotype.Controller;
    import org.springframework.web.bind.annotation.RequestParam;
    import org.springframework.web.bind.annotation.ResponseBody;
    
    import javax.servlet.http.HttpSession;
    
    /** * <p> * 前端控制器 * </p> * * @author jack * @since 2020-06-01 */
    @Controller
    public class UserController { 
    
        /** * 跳转登录页 * @return */
        @RequestMapping("/login")
        public String login(){ 
            return "login";
        }
    
        /** * 跳转首页（需要登录验证，未登录跳转登录页） * @return */
        @RequestMapping("/index")
        public String index(){ 
            return "index";
        }
    
        /** * 登出接口（成功后跳转登录页面） * @return */
        @RequestMapping("/logout")
        public String logout() { 
            Subject subject = SecurityUtils.getSubject();
            if (subject != null) { 
                subject.logout();
            }
            return "login";
        }
    
        /** * 定义未授权页面 * @return */
        @RequestMapping("unauthorized")
        public String unauthorized() { 
            return "unauthorized";
        }
    
        /** * 只允许admin访问的接口（非admin跳转未授权接口） * @return */
        @RequestMapping("/admin")
        @ResponseBody
        public String admin() { 
            return "admin success";
        }
    
        /** * 拥有edit权限的用户才能访问 * @return */
        @RequestMapping("/edit")
        @ResponseBody
        public String edit() { 
            return "edit success";
        }
    
        @RequestMapping("/loginUser")
        public String loginUser(@RequestParam("username")String username,
                                @RequestParam("password")String password,
                                                        HttpSession session){ 
            UsernamePasswordToken token = new UsernamePasswordToken(username,password);
            Subject subject = SecurityUtils.getSubject();
            try { 
                subject.login(token);
                User user = (User)subject.getPrincipal();
                session.setAttribute("user",user);
                return "/index";
            } catch (AuthenticationException e) { 
                return "/login";
            }
        }
    
    }

### 7.3 测试效果图 ###

#### 首页 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 2]

#### 登录 (admin 123) ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 3]

#### 登出 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 4]

#### 无权限 （登录demo 123 ,访问admin接口） ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 5]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 6]

#### admin权限（登录admin 123,访问admin接口） ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 7]

#### edit权限（登录admin 123成功访问，登录demo 123 提示无权限） ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 8]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 9]

#### druid 监控数据库 ####

输入 http://localhost:8080/druid/index.html 跳转登录页 http://localhost:8080/druid/login.html  
登录DruidConfiguration中配置的账号密码：druid 123456  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 10]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 11]

# 总结 #

以上是springboot2.3 版本加mybatis-plus 实现与apache shiro 集成的项目，  
完成了基本的权限登录与管理功能。

### shiro优点： ###

易用、灵活、Web能力强，容易集成其他框架spring。

### shiro缺点： ###

学习资料少、除了自己实现RBAC外，操作界面也需要自己实现。

### 结论： ###

总体来说shiro是一款值得使用的框架，相比spring security更好用一点！

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/2020060217095812.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200602165542583.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[20200602170901866.png]: https://img-blog.csdnimg.cn/20200602170901866.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200602171529155.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200602171551772.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200602171607885.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200602171656872.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/2020060217170983.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20200602171752807.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 8]: https://img-blog.csdnimg.cn/20200602171807910.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 9]: https://img-blog.csdnimg.cn/20200602171906861.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 10]: https://img-blog.csdnimg.cn/20200602172052750.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ_size_16_color_FFFFFF_t_70 11]: https://img-blog.csdnimg.cn/20200602172105108.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZhbmdjaGFvMjAxMQ==,size_16,color_FFFFFF,t_70