springboot 整合shiro安全框架

springboot整合shiro做安全认证的简单配置，方便以后的项目使用。

springboot整合shiro

pom.xml添加依赖

		<dependency>
			<groupId>org.apache.shiro</groupId>
			<artifactId>shiro-spring-boot-web-starter</artifactId>
			<version>1.4.0</version>
		</dependency>

配置shiro 配置文件

package top.xgsmile.configuration;

import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.spring.web.config.DefaultShiroFilterChainDefinition;
import org.apache.shiro.spring.web.config.ShiroFilterChainDefinition;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import top.xgsmile.Utils.FilterChainDefinitionMapBuilder;
import top.xgsmile.web.shiro.UserRealm;

@Configuration
public class ShiroConfig {
	/**
	 * 配置加密算法
	 * @return
	 */
	@Bean
	public HashedCredentialsMatcher credentialsMatcher() {
		HashedCredentialsMatcher credentialsMatcher=new HashedCredentialsMatcher();
		credentialsMatcher.setHashAlgorithmName("MD5");
		credentialsMatcher.setHashIterations(100);
		return credentialsMatcher;
	}
	/**
	 * 自定义realm
	 * @return
	 */
	@Bean
	public UserRealm userRealm() {
		UserRealm userRealm = new UserRealm();
		userRealm.setCredentialsMatcher(credentialsMatcher());
		return userRealm;
	}
	/**
	 * 配置SecurityManager
	 * @return
	 */
	@Bean
	public DefaultWebSecurityManager defaultWebSecurityManager() {
		DefaultWebSecurityManager def = new DefaultWebSecurityManager();
		def.setRealm(userRealm());
		return def;
	}
	
	/**
	 * 加载数据库里面的map 对应filter
	 */
	@Autowired
	FilterChainDefinitionMapBuilder build;
	@Bean
	public ShiroFilterChainDefinition filterChainDefinition() {
		DefaultShiroFilterChainDefinition filterChainDefinition = new DefaultShiroFilterChainDefinition();
		filterChainDefinition.addPathDefinitions(build.builder());
		return filterChainDefinition;
	}
}

自动登录

@Bean
public SimpleCookie rememberMeCookie(){
      //System.out.println("ShiroConfiguration.rememberMeCookie()");
      //这个参数是cookie的名称，对应前端的checkbox的name = rememberMe
      SimpleCookie simpleCookie = new SimpleCookie("rememberMe");
      //<!-- 记住我cookie生效时间30天 ,单位秒;-->
      simpleCookie.setMaxAge(259200);
      return simpleCookie;
}
/**
  * cookie管理对象;
  * rememberMeManager()方法是生成rememberMe管理器，而且要将这个rememberMe管理器设置到securityManager中
  * @return
 */
@Bean
public CookieRememberMeManager rememberMeManager(){
      //System.out.println("ShiroConfiguration.rememberMeManager()");
      CookieRememberMeManager cookieRememberMeManager = new CookieRememberMeManager();
      cookieRememberMeManager.setCookie(rememberMeCookie());
      //rememberMe cookie加密的密钥 建议每个项目都不一样 默认AES算法 密钥长度(128 256 512 位)
      cookieRememberMeManager.setCipherKey(Base64.decode("2AvVhdsgUs0FSA3SDFAdag=="));
      return cookieRememberMeManager;
}
/**
 * 配置SecurityManager
 * @return
 */
@Bean
public DefaultWebSecurityManager defaultWebSecurityManager() {
	DefaultWebSecurityManager def = new DefaultWebSecurityManager();
	def.setRealm(userRealm());
	return def;
}

controller

@PostMapping("/login")
    public String login(String username, String password, boolean rememberMe, Model model){

        UsernamePasswordToken token = new UsernamePasswordToken(username,password);
        Subject currentUser = SecurityUtils.getSubject();

        try {
            //主体提交登录请求到SecurityManager
            token.setRememberMe(rememberMe);
            currentUser.login(token);
        }catch (IncorrectCredentialsException ice){
            model.addAttribute("msg","密码不正确");
        }catch(UnknownAccountException uae){
            model.addAttribute("msg","账号不存在");
        }catch(AuthenticationException ae){
            model.addAttribute("msg","状态不正常");
        }
        if(currentUser.isAuthenticated()){
            System.out.println("认证成功");
            model.addAttribute("currentUser",currentUser());
            return "/success";
        }else{
            token.clear();
            return "login";
        }
    }