02-自定义realm

1 自定义realm

首先定义 user.ini 文件

[users]

uname=123456,admin

[roles]

admin=user:create,user:delete

其次，创建自定义realm类

package simplecount01;

import org.apache.shiro.SecurityUtils;

import org.apache.shiro.authc.UsernamePasswordToken;

import org.apache.shiro.authz.AuthorizationException;

import org.apache.shiro.mgt.DefaultSecurityManager;

import org.apache.shiro.realm.text.IniRealm;

import org.apache.shiro.subject.Subject;

public class ThirdRealm {

public boolean customRealm(){

//        设置自定义realm

        IniRealm realm=new IniRealm("classpath:user.ini");

//        创建管理器

        DefaultSecurityManager manager=new DefaultSecurityManager();

//        设置realm

        manager.setRealm(realm);

//        通过工具类设置manager

        SecurityUtils.setSecurityManager(manager);

//        通过工具类获取subject

        Subject subject = SecurityUtils.getSubject();

//        创建本地用户账号信息

        UsernamePasswordToken token=new UsernamePasswordToken("uname","123456");

//        通过subject验证

        subject.login(token);

//        通过subject检查权限信息

        subject.checkRole("admin");

        try {

subject.checkPermissions("user:create","user:delete");

return true;

        }catch (AuthorizationException e) {

e.printStackTrace();

        }

return false;

    }

}

2 自定义jdbcRealm

2.1 在test库中创建用户表信息如下

DROP TABLE IF EXISTS `users`;

CREATE TABLE `users` (

  `username` varchar(20) NOT NULL,

  `password` varchar(50) DEFAULT NULL,

  PRIMARY KEY (`username`)

) ENGINE=InnoDB DEFAULT CHARSET=utf8;

-- ----------------------------

-- Records of users

-- ----------------------------

INSERT INTO `users` VALUES ('abc', '123');

DROP TABLE IF EXISTS `user_roles`;

CREATE TABLE `user_roles` (

  `userid` int(11) NOT NULL AUTO_INCREMENT,

  `username` varchar(20) NOT NULL,

  `role_name` varchar(50) DEFAULT NULL,

  PRIMARY KEY (`userid`)

) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;

-- ----------------------------

-- Records of user_roles

-- ----------------------------

INSERT INTO `user_roles` VALUES ('1', 'abc', 'admin');

INSERT INTO `user_roles` VALUES ('2', 'abc', 'user');

DROP TABLE IF EXISTS `roles_permissions`;

CREATE TABLE `roles_permissions` (

  `uid` int(11) NOT NULL AUTO_INCREMENT,

  `role_name` varchar(50) DEFAULT NULL,

  `permission` varchar(50) DEFAULT NULL,

  PRIMARY KEY (`uid`)

) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;

-- ----------------------------

-- Records of roles_permissions

-- ----------------------------

INSERT INTO `roles_permissions` VALUES ('1', 'admin', 'create');

INSERT INTO `roles_permissions` VALUES ('2', 'admin', 'delete');

2.2 导入依赖包

<properties>

        <slf4j.version>1.7.2</slf4j.version>

        <mysql.version>5.1.40</mysql.version>

        <druid.version>1.1.10</druid.version>

    </properties>

<dependencies>

<dependency>

              <groupId>mysql</groupId>

              <artifactId>mysql-connector-java</artifactId>

              <version>${mysql.version}</version>

          </dependency>

          <dependency>

              <groupId>com.alibaba</groupId>

              <artifactId>druid</artifactId>

              <version>${druid.version}</version>

          </dependency>

</dependencies>

2.3 创建自定义类

package simplecount01;

import com.alibaba.druid.pool.DruidDataSource;

import org.apache.shiro.SecurityUtils;

import org.apache.shiro.authc.UsernamePasswordToken;

import org.apache.shiro.mgt.DefaultSecurityManager;

import org.apache.shiro.realm.jdbc.JdbcRealm;

import org.apache.shiro.subject.Subject;

public class FourRealm {

public boolean isJdbcRealm(){

//        1 设置数据源

        DruidDataSource dataSource=new DruidDataSource();

        dataSource.setDriverClassName("com.mysql.jdbc.Driver");

        dataSource.setUrl("jdbc:mysql://localhost:3306/test?useUnicode=true");

        dataSource.setUsername("root");

        dataSource.setPassword("root");

//        2 创建jdbcRealm

        JdbcRealm realm=new JdbcRealm();

//        *** 验证权限必须设置该项为true

        realm.setPermissionsLookupEnabled(true);

        realm.setDataSource(dataSource);

//        3 创建manager对象

        DefaultSecurityManager manager=new DefaultSecurityManager();

        manager.setRealm(realm);

//        4 通过工具类设置manager

        SecurityUtils.setSecurityManager(manager);

//        5 通过工具类获取subject

        Subject subject=SecurityUtils.getSubject();

//        6 创建测试账号信息

        UsernamePasswordToken token=new UsernamePasswordToken("abc","123");

//        7 进行验证

        subject.login(token);

        System.out.println("authenticated:"+subject.isAuthenticated());

//        8 验证角色

        subject.checkRoles("admin");

//        9 验证权限

        subject.checkPermissions("create","delete");

return true;

    }

}