<!-- shiro与spring整合的依赖 --><dependency><groupId>org.apache.shiro</groupId><artifactId>shiro-spring</artifactId><version>${shiro.version}</version></dependency><!-- ali的数据库连接池 --><dependency><groupId>com.alibaba</groupId><artifactId>druid</artifactId><version>${druid.version}</version></dependency><!-- mysql驱动 --><dependency><groupId>mysql</groupId><artifactId>mysql-connector-java</artifactId></dependency><!-- springboot的mybatis启动器 --><dependency><groupId>org.mybatis.spring.boot</groupId><artifactId>mybatis-spring-boot-starter</artifactId><version>${mybatis.version}</version></dependency></dependencies>
<!-- fastjson --><dependency><groupId>com.alibaba</groupId><artifactId>fastjson</artifactId><version>${fastjson.version}</version></dependency><!-- springboot的web组件 --><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-web</artifactId></dependency>

相关依赖

package cn.zytao.taosir.user.config;import java.util.LinkedHashMap;
import java.util.Map;import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;/*** Shiro的配置类* @author taosir*/
@Configuration
public class ShiroConfig {/*** 创建Realm*/@Bean(name="userRealm")public UserRealm getRealm() {return new UserRealm();}/*** 创建DefaultWebSecurityManager* @param userRealm*/@Bean(name="securityManager")public DefaultWebSecurityManager getDefaultWebSecurityManager(@Qualifier("userRealm") UserRealm userRealm) {DefaultWebSecurityManager securityManager=new DefaultWebSecurityManager();//关联realm
        securityManager.setRealm(userRealm);return securityManager;}/*** 创建ShiroFilterFactoryBean*/@Beanpublic ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager) {ShiroFilterFactoryBean shiroFilterFactoryBean=new ShiroFilterFactoryBean();//设置安全管理器
        shiroFilterFactoryBean.setSecurityManager(securityManager);//添加Shiro内置过滤器/*** Shiro内置过滤器，可以实现权限相关的拦截器* 常用的过滤器：*     anon：无需认证（登录）可以访问*     authc：必须认证才可以访问*  user：如果使用rememberMe的功能可以直接访问*  perms：该资源必须得到资源权限才可以访问*  role：该资源必须得到角色权限才可以访问*/    Map<String, String> filterMap= new LinkedHashMap<String,String>();//修改拦截后跳转的请求路径shiroFilterFactoryBean.setLoginUrl("/user/badRequest");shiroFilterFactoryBean.setFilterChainDefinitionMap(filterMap);return shiroFilterFactoryBean;}}

package cn.zytao.taosir.user.config;import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.springframework.beans.factory.annotation.Autowired;import cn.zytao.taosir.common.model.user.User;
import cn.zytao.taosir.user.mapper.UserMapper;/*** 自定义的Realm程序* @author taosir*/
public class UserRealm extends AuthorizingRealm{@Autowiredprivate UserMapper userMapper;/*** 执行授权逻辑*/@Overrideprotected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection arg0) {System.out.println("开始执行Shiro的授权方法...");return null;}/*** 执行认证逻辑*/@Overrideprotected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken arg0) throws AuthenticationException {System.out.println("开始执行Shiro的认证方法...");        //编写Shiro判断逻辑，判断用户名和密码//判断用户名是否存在UsernamePasswordToken token=(UsernamePasswordToken)arg0;User user = userMapper.findByUsername(token.getUsername());if(user==null)return null;//判断密码是否正确return new SimpleAuthenticationInfo("",user.getPassword(),"");}}

spring:datasource:url: jdbc:mysql://localhost:3306/taosir-user?useUnicode=true&characterEncoding=utf8
    username: rootpassword: rootdriver-class-name: com.mysql.jdbc.Drivertype: com.alibaba.druid.pool.DruidDataSource
mybatis:type-aliases-package: cn.zytao.taosir.common.model.user

package cn.zytao.taosir.user.service.impl;import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.IncorrectCredentialsException;
import org.apache.shiro.authc.UnknownAccountException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.subject.Subject;
import org.springframework.stereotype.Service;import cn.zytao.taosir.common.exception.BadRequestException;
import cn.zytao.taosir.user.service.UserService;@Service
public class UserServiceImpl implements UserService{@Overridepublic void checkLogin(String username,String password) {/*** 使用Shiro编写认证操作*///获取SubjectSubject subject=SecurityUtils.getSubject();//封装用户数据UsernamePasswordToken token=new UsernamePasswordToken(username,password);//执行登录方法try {subject.login(token);} catch (UnknownAccountException e) {//用户名不存在throw new BadRequestException("该用户名不存在");} catch (IncorrectCredentialsException e) {//密码错误throw new BadRequestException("密码不正确");} catch (Exception e) {throw new BadRequestException("由于未知错误登录失败,请联系管理员或稍后重试");}}
}