shiro权限认证和授权

package com.zking; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.IncorrectCredentialsException; import org.apache.shiro.authc.UnknownAccountException; import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.config.IniSecurityManagerFactory; import org.apache.shiro.mgt.SecurityManager; import org.apache.shiro.subject.Subject; public class Demo { //权限 public static void main(String[] args) { //1.读取加载shiro.ini配置文件 IniSecurityManagerFactory is=new IniSecurityManagerFactory("classpath:shiro-permission.ini"); //2.创建SecurityManager安全管理器 SecurityManager instance = is.createInstance(); //3.将SecurityManager委托给SecurityUtils管理 SecurityUtils.setSecurityManager(instance); //4.获取主体 Subject subject=SecurityUtils.getSubject(); //创建登录令牌 UsernamePasswordToken token=new UsernamePasswordToken("zs","123"); try { subject.login(token); //权限验证 是否又修改的权限 if(subject.isPermitted("user:update")){ System.out.println("具有修改的权限"); } } catch (UnknownAccountException e) { System.out.println("名字不存在"); }catch (IncorrectCredentialsException e){ System.out.println("密码错误"); } } //角色登录 shiro-role.ini public static void main2(String[] args) { //1.读取加载shiro.ini配置文件 IniSecurityManagerFactory is=new IniSecurityManagerFactory("classpath:shiro-role.ini"); //2.创建SecurityManager安全管理器 SecurityManager instance = is.createInstance(); //3.将SecurityManager委托给SecurityUtils管理 SecurityUtils.setSecurityManager(instance); //4.获取主体 Subject subject=SecurityUtils.getSubject(); //创建登录令牌 UsernamePasswordToken token=new UsernamePasswordToken("ls","123"); try { subject.login(token); //角色验证 if(subject.hasRole("role1")){ System.out.println("角色1，管理员"); } if(subject.hasRole("role2")){ System.out.println("角色2,普通用户"); } if(subject.hasRole("role3")){ System.out.println("角色3,普通用户"); } } catch (UnknownAccountException e) { System.out.println("名字不存在"); }catch (IncorrectCredentialsException e){ System.out.println("密码错误"); } } //登录密码验证 shiro.ini public static void main1(String[] args) { //1.读取加载shiro.ini配置文件 IniSecurityManagerFactory is=new IniSecurityManagerFactory("classpath:shiro.ini"); //2.创建SecurityManager安全管理器 SecurityManager securityManager = is.createInstance(); //3.将SecurityManager委托给SecurityUtils管理 SecurityUtils.setSecurityManager(securityManager); //4.获取主体 Subject subject = SecurityUtils.getSubject(); //创建令牌登录 UsernamePasswordToken token=new UsernamePasswordToken("zs","123"); //拿着令牌找体登录 try { subject.login(token); System.out.println("登录成功"); } catch (UnknownAccountException e) { System.out.println("名字不存在"); }catch (IncorrectCredentialsException e){ System.out.println("密码错误"); } } }