ShiroRealm中配置散列And授权

[main]
# 定义凭证匹配器
credentialsMatcher=org.apache.shiro.authc.credential.HashedCredentialsMatcher
# 散列算法
credentialsMatcher.hashAlgorithmName=md5
# 散列次数
credentialsMatcher.hashIterations=3
# 指定realm
myRealm=com.yby6.realm.MyRealm
# 配置散列
myRealm.credentialsMatcher=$credentialsMatcher
# 配置自定义散列
securityManager.realms=$myRealm

@Test
public void encryption() {
    SimpleHash simpleHash = new SimpleHash("md5", "1234", "it6666", 3);
    System.out.println(simpleHash);
}

80abd6b3faad22acb16bc1a11da51b2e

public class MyRealm extends AuthorizingRealm {
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        return null;
    }

    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        // 获取用户名
        String username = (String) token.getPrincipal();

        // 假如以下定义的用户名和密码是从数据库中查询出来的，实际中需要注入Dao去数据库中进行查询然后进行验证查询出来的信息是否合法
        String myName = "yby6";
        String password = "80abd6b3faad22acb16bc1a11da51b2e";

        // 如果输入的名称不和数据库查询出来的一致
        if (!myName.equals(username)) {
            return null;
        }

        // 如果等于，交给认证器去认证即可我们就无须关心了
        return new SimpleAuthenticationInfo(username, password, ByteSource.Util.bytes("yby6"), this.getName());
    }
}

[users]
#用户yby6的密码是1234，此用户具有role1和role2两个角色
#用户yangbuyiya的密码是1234，此用户具有role2一个角色
yby6=1234,role1,role2
yangbuyiya=1234,role2
[roles]
#角色role1对资源user拥有create、update权限
role1=user:create,user:update
#角色role2对资源user拥有create、delete权限
role2=user:create,user:delete
#角色role3对资源user拥有create权限
role3=user:create

@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    // 获取身份信息
    Object principal = principals.getPrimaryPrincipal();

    // 根据用户名查询该用户的角色和权限
    List<String> roles = new ArrayList<>();
    roles.add("role1");
    roles.add("role2");

    List<String> permissions = new ArrayList<>();
    permissions.add("user:create");
    permissions.add("user:delete");

    // 把角色和权限与 subject 关联在一起，然后进行返回
    SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
    info.addRoles(roles);
    info.addStringPermissions(permissions);
    return info;
}

public class Demo {

    public static void main(String[] args) {
        IniSecurityManagerFactory factory = new IniSecurityManagerFactory("classpath:shiro.ini");

        SecurityManager securityManager = factory.getInstance();

        SecurityUtils.setSecurityManager(securityManager);

        Subject subject = SecurityUtils.getSubject();

        UsernamePasswordToken token = new UsernamePasswordToken("yby6", "12345");

        try {
            subject.login(token);
        } catch (UnknownAccountException e) {
            System.out.println("用户名不存在");
            e.printStackTrace();
        } catch (IncorrectCredentialsException e) {
            System.out.println("密码错误");
            e.printStackTrace();
        }

        System.out.println("是否认证" + subject.isAuthenticated());

        subject.logout();

        System.out.println("是否认证" + subject.isAuthenticated());

        // 判断当前用户有没有角色1
        System.out.println(subject.hasRole("role1"));

        // 判断当前用户是否同时具备多个角色
        System.out.println(subject.hasAllRoles(Arrays.asList("role1", "role3")));

        // 判断是否有某一个权限
        System.out.println(subject.isPermitted("user:create"));

        // 判断是否同时有多个权限
        System.out.println(subject.isPermittedAll("user:create", "user:update"));
    }
}