shiro权限框架例子

package com.shiro.controller; import java.io.IOException; import java.io.PrintWriter; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.subject.Subject; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.servlet.ModelAndView; import com.shiro.Utils.EncryptUtils; import com.shiro.model.User; import com.shiro.service.ShiroServer; @Controller @RequestMapping(value = "login") public class LoginController{ ShiroServer shiroServer=new ShiroServer(); /* * @Autowired User user; */ /** * 用户登录 * * @param user * 　登录用户 * @return */ @RequestMapping(params = "main") public ModelAndView login(User user,HttpSession session, HttpServletRequest request) { ModelAndView modelView = new ModelAndView(); Subject currentUser = SecurityUtils.getSubject(); UsernamePasswordToken token = new UsernamePasswordToken( user.getUsercode(), EncryptUtils.encryptMD5(user.getPassword())); token.setRememberMe(true); try { currentUser.login(token); modelView.setViewName("/main"); } catch (AuthenticationException e) { modelView.addObject("message", "login errors"); modelView.setViewName("/login"); e.printStackTrace(); } return modelView; } /** * 退出登录 * * @return */ @RequestMapping(params = "logout") public String logout() { Subject currentUser = SecurityUtils.getSubject(); try { currentUser.logout(); } catch (AuthenticationException e) { e.printStackTrace(); } return "/login"; } @RequestMapping(params = "myjsp") public ModelAndView login2() { System.out.println("sss"); ModelAndView modelView = new ModelAndView(); modelView.addObject("message", "登录成功!"); modelView.setViewName("/my"); return modelView; } /** * 自动登录失败 * 如何获取RememberMe的用户信息 * @return */ @RequestMapping(params = "test") public ModelAndView login3() { ModelAndView modelView = new ModelAndView(); Subject currentUser = SecurityUtils.getSubject(); if(!currentUser.isAuthenticated() && currentUser.isRemembered()){ Object principal = currentUser.getPrincipal(); if (null != principal) { User user = shiroServer.findUserByName(String.valueOf(principal)); String password = user.getPassword(); UsernamePasswordToken token = new UsernamePasswordToken(user.getUserName(), EncryptUtils.encryptMD5(password)); token.setRememberMe(true); currentUser.login(token);//登录 modelView.setViewName("/main"); } }else{ modelView.setViewName("/login"); } return modelView; } @RequestMapping(params = "save") public void save(String role,String user,String resources,HttpServletResponse response) throws IOException{ try { shiroServer.saveUser(role, user, resources); } catch (Exception e) { e.printStackTrace(); } response.setContentType("text/html;charset=utf-8"); PrintWriter out = response.getWriter(); out.print("<script>alert('保存成功');window.location.href='common.jsp';</script>"); out.flush(); out.close(); } }