Shiro笔记---身份验证

提示：扫一扫查出行
【扫一扫了解最新限行尾号】
复制提示

1.shiro有哪些主要功能

2.搭建shiro环境(*)

idea2018.2、maven3.5.4、jdk1.8

项目结构：

pom.xml:

<dependencies>

<dependency>
<groupId>org.apache.shiro</groupId>
<artifactId>shiro-core</artifactId>
<version>1.2.4</version>
</dependency> 
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-log4j12</artifactId>
<version>1.7.12</version>
</dependency> 
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>5.1.46</version>
</dependency> 

<dependency>
<groupId>com.alibaba</groupId>
<artifactId>druid</artifactId>
<version>1.1.10</version>
</dependency> 
<dependency>
<groupId>commons-logging</groupId>
<artifactId>commons-logging</artifactId>
<version>1.2</version>
</dependency> </dependencies>

创建一个shiro.ini文件在resources目录下
[users]
admin=123456
lisi=123
wangwu=1234
创建ShiroDemo.java
package cn.java.shiro;import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.config.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.util.Factory;import java.net.SocketOptions;public class ShiroDemo {
public static void main(String[] args) {
//SecurityManager--->Factory
// Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini"); 调用数据库
// Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:jdbc_realm.ini");
//1、获取SecurityManager工厂，此处使用Ini配置文件初始化SecurityManager
Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini"); //ctrl+alt+v 快速生成变量及对应的数据类型
//2、得到SecurityManager实例并绑定给SecurityUtils
SecurityManager instance = factory.getInstance();
SecurityUtils.setSecurityManager(instance); //当前用户
/*3、得到Subject及创建用户名/密码身份验证Token（即用户身份/凭证）*/
Subject user = SecurityUtils.getSubject();
//通过UsernamePasswordToken来模拟html/jsp传递过来的用户名与密码
UsernamePasswordToken token = new UsernamePasswordToken("admin","123]");
//通过shiro来判断用户是否登录成功 ctrl+alt+t捕获异常 try {
//4、登录，即身份验证
user.login(token);
System.out.println("登录成功");
} catch (AuthenticationException e) {
//5、身份验证失败
System.out.println("登录失败");
} }
}
连接数据库把配置文件改成 jdbc_realm.ini：
jdbcRealm=org.apache.shiro.realm.jdbc.JdbcRealmdataSource=com.alibaba.druid.pool.DruidDataSource
dataSource.driverClassName=com.mysql.jdbc.Driver
dataSource.url=jdbc:mysql:///shiro
dataSource.username=root
dataSource.password=rootjdbcRealm.dataSource=$dataSource
securityManager.realms=$jdbcRealm