shiro入门小案例
来源:互联网 发布:阿里大数据应用案例 编辑:程序博客网 时间:2024/05/21 17:10
shiro是一个Java权限框架,具体详情请查看Apache里面的官方文档。
这里写第一个shiro 的Java项目,首先是下载shiro 的jar包,还需要下载org.slf4j的jar包。
在项目下面新建一个ini文件,用于存放用户和规则。
src/shiro.ini
# =============================================================================# Tutorial INI configuration## Usernames/passwords are based on the classic Mel Brooks' film "Spaceballs" :)# =============================================================================# -----------------------------------------------------------------------------# Users and their (optional) assigned roles# username = password, role1, role2, ..., roleN# -----------------------------------------------------------------------------[users]root = secret, adminguest = guest, guestpresidentskroob = 12345, presidentdarkhelmet = ludicrousspeed, darklord, schwartzlonestarr = vespa, goodguy, schwartz# -----------------------------------------------------------------------------# Roles with assigned permissions# roleName = perm1, perm2, ..., permN# -----------------------------------------------------------------------------[roles]admin = *schwartz = lightsaber:*goodguy = winnebago:drive:eagle5
src /com/demo/Tutorial.java
package com.demo;import org.apache.shiro.SecurityUtils;import org.apache.shiro.authc.*;import org.apache.shiro.config.IniSecurityManagerFactory;import org.apache.shiro.mgt.SecurityManager;import org.apache.shiro.session.Session;import org.apache.shiro.subject.Subject;import org.apache.shiro.util.Factory;import org.slf4j.Logger;import org.slf4j.LoggerFactory;public class Tutorial { private static final transient Logger log = LoggerFactory.getLogger(Tutorial.class); public static void main(String[] args) { log.info("My First Apache Shiro Application"); Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini"); SecurityManager securityManager = factory.getInstance(); SecurityUtils.setSecurityManager(securityManager); // get the currently executing user: Subject currentUser = SecurityUtils.getSubject(); // Do some stuff with a Session (no need for a web or EJB container!!!) Session session = currentUser.getSession(); session.setAttribute("someKey", "aValue"); String value = (String) session.getAttribute("someKey"); if (value.equals("aValue")) { log.info("Retrieved the correct value! [" + value + "]"); } // let's login the current user so we can check against roles and permissions: if (!currentUser.isAuthenticated()) { UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa"); token.setRememberMe(true); try { currentUser.login(token); } catch (UnknownAccountException uae) { log.info("There is no user with username of " + token.getPrincipal()); } catch (IncorrectCredentialsException ice) { log.info("Password for account " + token.getPrincipal() + " was incorrect!"); } catch (LockedAccountException lae) { log.info("The account for username " + token.getPrincipal() + " is locked. " + "Please contact your administrator to unlock it."); } // ... catch more exceptions here (maybe custom ones specific to your application? catch (AuthenticationException ae) { //unexpected condition? error? } } //say who they are: //print their identifying principal (in this case, a username): log.info("User [" + currentUser.getPrincipal() + "] logged in successfully."); //test a role: if (currentUser.hasRole("schwartz")) { log.info("May the Schwartz be with you!"); } else { log.info("Hello, mere mortal."); } //test a typed permission (not instance-level) if (currentUser.isPermitted("lightsaber:weild")) { log.info("You may use a lightsaber ring. Use it wisely."); } else { log.info("Sorry, lightsaber rings are for schwartz masters only."); } //a (very powerful) Instance Level permission: if (currentUser.isPermitted("winnebago:drive:eagle5")) { log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'. " + "Here are the keys - have fun!"); } else { log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!"); } //all done - log out! currentUser.logout(); System.exit(0); }}
阅读全文
0 0
- shiro入门小案例
- Shiro入门案例
- java安全框架-Shiro学习笔记(一)-入门小案例
- shiro入门级小程序
- J2SE shiro的基础入门案例
- CXF入门小案例
- JS入门小案例
- echarts入门小案例
- Python入门小案例
- 【FontAwesome】入门小案例
- dubbo入门小案例
- Shiro学习总结(二)--Shiro的入门小例子
- apache shiro学习笔记--02(入门案例)
- springcloud入门之综合入门小案例
- Java RMI学习入门小案例
- hadoop入门之wordcount小案例
- shiro入门
- shiro入门
- 计算机系统的一些重要概念
- linux日志分割方法
- My first blog
- 去除火狐浏览器点击连接时出现虚线边框
- 输出指定年月的月历,年月从键盘输入。每星期一行,从星期日开始,到星期六结束。
- shiro入门小案例
- HDU 1671 Phone List(Trie树)
- js常用正则表达式(一)
- 开源实时日志分析 ELK 平台
- 字符编码和Java中的乱码问题
- α_β_γ_δ_ε_ζ_η_θ_ι_κ_λ_μ_ν怎么读
- Spring实现读写分离MySQL实现主从复制
- restriction on required library 'E: \Java\jdk\jdk_1.7\jre\lib\rt.jar'
- 只搞游戏,走适合自己的路