SSM+Shiro安全框架代码

package com.aaa.realm; import com.aaa.entity.User; import com.aaa.service.UserService; import org.apache.shiro.authc.*; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; import org.apache.shiro.subject.PrincipalCollection; import org.apache.shiro.util.ByteSource; import org.springframework.beans.factory.annotation.Autowired; import java.util.List; /** * @program: qy165-shiro-framework * @description: * @author: 万文卿 * @create: 2023-07-06 16:44 **/ public class MyRealm extends AuthorizingRealm { @Autowired private UserService userService; @Override //授权 protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) { //获取当前登录者的账号 User user = (User) principals.getPrimaryPrincipal(); //调用userSerice中的方法--根据id List<String> permissions= userService.selectPermissionByUserid(user.getUserid()); if(permissions.size()!=0){ SimpleAuthorizationInfo info=new SimpleAuthorizationInfo(); info.addStringPermissions(permissions); return info; } return null; } @Override protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException { //1.获取登录账号 String username = token.getPrincipal().toString(); //2.根据账号获取用户信息 User user =userService.selectByUsername(username); if (user != null) { ByteSource salt = ByteSource.Util.bytes(user.getSalt()); SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(user, user.getUserpwd(), salt, this.getName()); return info; } return null; } }