apache shrio 入门示例

本示例为官网上提供的示例

maven依赖

<dependencies>        <dependency>            <groupId>org.apache.shiro</groupId>            <artifactId>shiro-core</artifactId>            <version>1.1.0</version>        </dependency>        <!-- Shiro uses SLF4J for logging.  We'll use the 'simple' binding             in this example app.  See http://www.slf4j.org for more info. -->        <dependency>            <groupId>org.slf4j</groupId>            <artifactId>slf4j-simple</artifactId>            <version>1.6.1</version>            <scope>test</scope>        </dependency>    </dependencies>

shrio.ini权限配置文件

# =============================================================================# Tutorial INI configuration## Usernames/passwords are based on the classic Mel Brooks' film "Spaceballs" :)# =============================================================================# -----------------------------------------------------------------------------# Users and their (optional) assigned roles# username = password, role1, role2, ..., roleN# -----------------------------------------------------------------------------[users]root = secret, adminguest = guest, guestpresidentskroob = 12345, presidentdarkhelmet = ludicrousspeed, darklord, schwartzlonestarr = vespa, goodguy, schwartz# -----------------------------------------------------------------------------# Roles with assigned permissions# roleName = perm1, perm2, ..., permN# -----------------------------------------------------------------------------[roles]admin = *schwartz = lightsaber:*goodguy = winnebago:drive:eagle5

示例代码：

import org.apache.shiro.SecurityUtils;import org.apache.shiro.authc.*;import org.apache.shiro.config.IniSecurityManagerFactory;import org.apache.shiro.mgt.SecurityManager;import org.apache.shiro.session.Session;import org.apache.shiro.subject.Subject;import org.apache.shiro.util.Factory;import org.slf4j.Logger;import org.slf4j.LoggerFactory;public class Tutorial {private static final transient Logger log = LoggerFactory.getLogger(Tutorial.class);    public static void main(String[] args) {      log.info("My First Apache Shiro Application");          Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");          SecurityManager securityManager = factory.getInstance();          SecurityUtils.setSecurityManager(securityManager);          // get the currently executing user:          Subject currentUser = SecurityUtils.getSubject();          // Do some stuff with a Session (no need for a web or EJB container!!!)          Session session = currentUser.getSession();          session.setAttribute("someKey", "aValue");          String value = (String) session.getAttribute("someKey");          if (value.equals("aValue")) {              log.info("Retrieved the correct value! [" + value + "]");          }          // let's login the current user so we can check against roles and permissions:          if (!currentUser.isAuthenticated()) {              UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");              token.setRememberMe(true);              try {                  currentUser.login(token);              } catch (UnknownAccountException uae) {                  log.info("There is no user with username of " + token.getPrincipal());              } catch (IncorrectCredentialsException ice) {                  log.info("Password for account " + token.getPrincipal() + " was incorrect!");              } catch (LockedAccountException lae) {                  log.info("The account for username " + token.getPrincipal() + " is locked.  " +                          "Please contact your administrator to unlock it.");              }              // ... catch more exceptions here (maybe custom ones specific to your application?              catch (AuthenticationException ae) {                  //unexpected condition?  error?              }          }          //say who they are:          //print their identifying principal (in this case, a username):          log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");          //test a role:          if (currentUser.hasRole("schwartz")) {              log.info("May the Schwartz be with you!");          } else {              log.info("Hello, mere mortal.");          }          //test a typed permission (not instance-level)          if (currentUser.isPermitted("lightsaber:weild")) {              log.info("You may use a lightsaber ring.  Use it wisely.");          } else {              log.info("Sorry, lightsaber rings are for schwartz masters only.");          }          //a (very powerful) Instance Level permission:          if (currentUser.isPermitted("winnebago:drive:eagle5")) {              log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  " +                      "Here are the keys - have fun!");          } else {              log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");          }          //all done - log out!          currentUser.logout();          System.exit(0);    }    }

输出结果：

0 [main] INFO Tutorial - My First Apache Shiro Application246 [main] INFO org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Enabling session validation scheduler...352 [main] INFO Tutorial - Retrieved the correct value! [aValue]355 [main] INFO Tutorial - User [lonestarr] logged in successfully.355 [main] INFO Tutorial - May the Schwartz be with you!356 [main] INFO Tutorial - You may use a lightsaber ring.  Use it wisely.357 [main] INFO Tutorial - You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  Here are the keys - have fun!

推荐文章