shiro+spring+mybatis整合

package nufront.shiro.realm; import java.sql.Connection; import javax.annotation.Resource; import nufront.shiro.entity.User; import nufront.shiro.service.UserService; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.AuthenticationInfo; import org.apache.shiro.authc.AuthenticationToken; import org.apache.shiro.authc.SimpleAuthenticationInfo; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; import org.apache.shiro.subject.PrincipalCollection; import org.springframework.stereotype.Component; public class MyRealm extends AuthorizingRealm{ private UserService userService; /** * 为当前用户授权 * */ @Override protected AuthorizationInfo doGetAuthorizationInfo( PrincipalCollection principals) { //取得用户名 String userName = (String)principals.getPrimaryPrincipal(); //为当前用户授予角色和权限 SimpleAuthorizationInfo simpleAuthorizationInfo=new SimpleAuthorizationInfo(); try { simpleAuthorizationInfo.setRoles(this.userService.getUserRolesByUserName(userName)); simpleAuthorizationInfo.setStringPermissions(this.userService.getUserPermissionsByUserName(userName)); } catch (Exception e) { e.printStackTrace(); } return simpleAuthorizationInfo; } /** * 验证当前用户 * */ @Override protected AuthenticationInfo doGetAuthenticationInfo( AuthenticationToken token) throws AuthenticationException { //取得当前用户 String userName = (String) token.getPrincipal(); User user = null; try { user = this.userService.getUserByUserName(userName); if(user!=null){ //将数据库用户信息保存在AuthenticationInfo以便和用户提交过来的信息做对比 AuthenticationInfo authenticationInfo = new SimpleAuthenticationInfo(user.getUsername(),user.getPassword(),""); return authenticationInfo; }else{ return null; } } catch (Exception e) { // TODO Auto-generated catch block e.printStackTrace(); } //验证用户 return null; } @Resource(name="userService") public void setUserService(UserService userService) { this.userService = userService; } }