项目中关于权限的设置方案以及案例(springboot-shiro案例)

逃离我推掉我的手 2024-04-18 23:14 101阅读 0赞

### 首先是表的设计，五张表：用户，角色，菜单，用户角色，菜单角色 ###

![2019091318171315.png][]

### 菜单表的设计 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxNTk0MTQ2_size_16_color_FFFFFF_t_70][]

** 其余的表就没什么太多好说的了，都差不多，一个用户可以对应多个角色，角色对应多个菜单**

![20190913181942731.png][]

![20190913181952672.png][]

![20190913182008921.png][]

![20190913182033477.png][]

**关于用户登录后  获取对应的权限菜单树  这类代码就不贴出来了比较简单  就一个查询，查出对应的数据 完事丢给前端，前端再渲染成对应的样式即可**

### 重点贴上shiro整合springboot达到一个权限控制的代码： ###

### maven ###

<dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-web</artifactId>
            </dependency>
            <dependency>
                <groupId>org.mybatis.spring.boot</groupId>
                <artifactId>mybatis-spring-boot-starter</artifactId>
                <version>2.1.0</version>
            </dependency>
    
            <dependency>
                <groupId>mysql</groupId>
                <artifactId>mysql-connector-java</artifactId>
                <scope>runtime</scope>
            </dependency>
            <dependency>
                <groupId>org.projectlombok</groupId>
                <artifactId>lombok</artifactId>
                <optional>true</optional>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-test</artifactId>
                <scope>test</scope>
            </dependency>
    
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>druid</artifactId>
                <version>1.0.28</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-configuration-processor</artifactId>
                <optional>true</optional>
            </dependency>
    
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-aop</artifactId>
            </dependency>
    
            <dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-core</artifactId>
                <version>1.3.2</version>
            </dependency>
            <dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-spring</artifactId>
                <version>1.3.2</version>
            </dependency>
    
            <dependency>
                <groupId>org.mybatis</groupId>
                <artifactId>mybatis</artifactId>
                <version>3.4.4</version>
            </dependency>
    
            <dependency>
                <groupId>org.mybatis.spring.boot</groupId>
                <artifactId>mybatis-spring-boot-starter</artifactId>
                <version>1.1.1</version>
            </dependency>
    
            <dependency>
                <groupId>org.apache.shiro</groupId>
                <artifactId>shiro-ehcache</artifactId>
                <exclusions>
                    <exclusion>
                        <groupId>net.sf.ehcache</groupId>
                        <artifactId>ehcache-core</artifactId>
                    </exclusion>
                </exclusions>
                <version>1.4.0</version>
            </dependency>
            <dependency>
                <groupId>com.github.theborakompanioni</groupId>
                <artifactId>thymeleaf-extras-shiro</artifactId>
                <version>2.0.0</version>
            </dependency>
    
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-cache</artifactId>
            </dependency>
            <dependency>
                <groupId>net.sf.ehcache</groupId>
                <artifactId>ehcache</artifactId>
            </dependency>
    
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>druid</artifactId>
                <version>1.0.28</version>
            </dependency>
    
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>fastjson</artifactId>
                <version>1.2.31</version>
            </dependency>
    
            <dependency>
                <groupId>org.apache.commons</groupId>
                <artifactId>commons-lang3</artifactId>
                <version>3.6</version>
            </dependency>
            <dependency>
                <groupId>commons-configuration</groupId>
                <artifactId>commons-configuration</artifactId>
                <version>1.10</version>
            </dependency>
            <dependency>
                <groupId>commons-io</groupId>
                <artifactId>commons-io</artifactId>
                <version>2.5</version>
            </dependency>

**spring的帮助类**

package com.hw.config;
    
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    import org.springframework.beans.BeansException;
    import org.springframework.context.ApplicationContext;
    import org.springframework.context.ApplicationContextAware;
    import org.springframework.stereotype.Component;
    
    @Component
    public class ApplicationContextRegister implements ApplicationContextAware {
        private static Logger logger = LoggerFactory.getLogger(ApplicationContextRegister.class);
        private static ApplicationContext APPLICATION_CONTEXT;
        /**
         * 设置spring上下文
         * @param applicationContext spring上下文
         * @throws BeansException
         * */
        @Override  public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
            logger.debug("ApplicationContext registed-->{}", applicationContext);
            APPLICATION_CONTEXT = applicationContext;
        }
    
        /**
         * 获取容器
         * @return
         */
        public static ApplicationContext getApplicationContext() {
            return APPLICATION_CONTEXT;
        }
    
        /**
         * 获取容器对象
         * @param type
         * @param <T>
         * @return
         */
        public static <T> T getBean(Class<T> type) {
            return APPLICATION_CONTEXT.getBean(type);
        }
    }

**session监听**

package com.hw.config;
    
    import org.apache.shiro.session.Session;
    import org.apache.shiro.session.SessionListener;
    
    import java.util.concurrent.atomic.AtomicInteger;
    
    public class BDSessionListener implements SessionListener {
    
    	private final AtomicInteger sessionCount = new AtomicInteger(0);
    
    	@Override
    	public void onStart(Session session) {
    		sessionCount.incrementAndGet();
    	}
    
    	@Override
    	public void onStop(Session session) {
    		sessionCount.decrementAndGet();
    	}
    
    	@Override
    	public void onExpiration(Session session) {
    		sessionCount.decrementAndGet();
    
    	}
    
    	public int getSessionCount() {
    		return sessionCount.get();
    	}
    
    
    
    
    }

### **shiro的配置类** ###

package com.hw.shiro;
    import com.hw.config.ApplicationContextRegister;
    import com.hw.dao.UserDao;
    import com.hw.doman.UserDO;
    import com.hw.service.MenuService;
    import com.hw.util.MD5Utils;
    import com.hw.util.ShiroUtils;
    
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.AuthenticationInfo;
    import org.apache.shiro.authc.AuthenticationToken;
    import org.apache.shiro.authc.IncorrectCredentialsException;
    import org.apache.shiro.authc.LockedAccountException;
    import org.apache.shiro.authc.SimpleAuthenticationInfo;
    import org.apache.shiro.authc.UnknownAccountException;
    import org.apache.shiro.authz.AuthorizationInfo;
    import org.apache.shiro.authz.SimpleAuthorizationInfo;
    import org.apache.shiro.realm.AuthorizingRealm;
    import org.apache.shiro.subject.PrincipalCollection;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.jdbc.core.JdbcTemplate;
    
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.HashMap;
    import java.util.List;
    import java.util.Map;
    import java.util.Set;
    
    public class UserRealm extends AuthorizingRealm {
    /*	@Autowired
    	UserDao userMapper;
    	@Autowired
    	MenuService menuService;*/
    
        @Autowired
        JdbcTemplate jdbcTemplate;
    
        /**
         * 获取菜单表中的权限标识
         * @param arg0
         * @return
         */
        @Override
        protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection arg0) {
            Long userId = ShiroUtils.getUserId();
            MenuService menuService = ApplicationContextRegister.getBean(MenuService.class);
    
            Set<String> perms = menuService.listPerms(userId);
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
            info.setStringPermissions(perms);
            return info;
        }
    
        /**
         * 登录
         * @param token
         * @return
         * @throws AuthenticationException
         */
        @Override
        protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
            String username = (String) token.getPrincipal();
            Map<String, Object> map = new HashMap<>(16);
            map.put("username", username);
            String password = new String((char[]) token.getCredentials());
    
            UserDao userMapper = ApplicationContextRegister.getBean(UserDao.class);
            List<UserDO> list = userMapper.list(map);
            // 查询用户信息
            UserDO user = list.get(0);
    
            // 账号不存在
            if (user == null) {
                throw new UnknownAccountException("账号或密码不正确");
            }
    
            // 密码错误
            if (!password.equals(user.getPassword())) {
                throw new IncorrectCredentialsException("账号或密码不正确");
            }
    
            // 账号锁定
            if (user.getStatus() == 0) {
                throw new LockedAccountException("账号已被锁定,请联系管理员");
            }
            //将用户的角色加入到用户属性中
            Map<String, Object> map1 = jdbcTemplate.queryForMap("SELECT GROUP_CONCAT(role_id SEPARATOR ',') as roleid FROM `sys_user_role` where user_id=" + user.getUserId());
            String[] roleids = map1.get("roleid").toString().split(",");
            List<String> strings = Arrays.asList(roleids);
    
            user.setRoleIds(new ArrayList(strings));
            SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(user, password, getName());
            return info;
        }
    
    }

### **测试用的controller** ###

package com.hw.controller;
    import com.hw.util.MD5Utils;
    import com.hw.util.R;
    import com.hw.util.ShiroUtils;
    
    import org.apache.shiro.SecurityUtils;
    import org.apache.shiro.authc.AuthenticationException;
    import org.apache.shiro.authc.UsernamePasswordToken;
    import org.apache.shiro.authz.annotation.RequiresPermissions;
    import org.apache.shiro.subject.Subject;
    import org.springframework.web.bind.annotation.GetMapping;
    import org.springframework.web.bind.annotation.PostMapping;
    import org.springframework.web.bind.annotation.ResponseBody;
    import org.springframework.web.bind.annotation.RestController;
    
    
    import javax.servlet.http.HttpServletRequest;
    
    
    @RestController
    public class TestController {
    
        @GetMapping("/find")
        @ResponseBody
        public String find(){
          return  ShiroUtils.getUser().toString();
        }
    
        @GetMapping("/anniversary")
        @RequiresPermissions("system:anniversary:anniversary")
        String Birthday(){
            return "成功";
        }
        @GetMapping("/anniversary2")
        @RequiresPermissions("system:anniversary:anniversary2")
        String Birthday2(){
            return "成功";
        }
    
    
    
    
        @PostMapping("/login")
        R ajaxLogin(String username, String password, HttpServletRequest request) {
            password = MD5Utils.encrypt(username, password);
            UsernamePasswordToken token = new UsernamePasswordToken(username, password);
            Subject subject = SecurityUtils.getSubject();
            try {
                subject.login(token);
                System.err.println(ShiroUtils.getUser().toString());
                return R.ok();
            } catch (AuthenticationException e) {
                return R.error("用户或密码错误");
            }
        }
    
        @GetMapping("/test")
        public String test() {
            return "test";
        }
    
    }

### 示例： ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxNTk0MTQ2_size_16_color_FFFFFF_t_70 1][]

**登录成功后  请求自己有权限的接口**

![2019091318325533.png][]

**请求自己没有权限的接口   报错   （当然，这只是这只是用于测试案例，所以对错误不做处理，正式项目需要对这类异常进行配置处理）**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxNTk0MTQ2_size_16_color_FFFFFF_t_70 2][]

### bootdo  官网：[http://bootdo.com/][http_bootdo.com]   案例中的源码以及帮助类等等可以直接在官网下载  或者联系博主 ###

[2019091318171315.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/586585e80a2c454ab32d87920d7f3bea.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxNTk0MTQ2_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/77cf31248bbf4847893b4abe0db700a4.png
[20190913181942731.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/eb6017955741413091f956dce086fae1.png
[20190913181952672.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/3311fc03f00c4746adbf5c91b8c97d82.png
[20190913182008921.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/2f5977f3711c432291d0fb240fbf924e.png
[20190913182033477.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/6ac4a745f4274d5e83977bffcaeae39c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxNTk0MTQ2_size_16_color_FFFFFF_t_70 1]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/43c8585a72954f10970e53db067fb5b5.png
[2019091318325533.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/3136b577b0eb4c2089444c2fc2163f2d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxNTk0MTQ2_size_16_color_FFFFFF_t_70 2]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/f34e939e78c04f03b233e1ee04012272.png
[http_bootdo.com]: http://bootdo.com/