shiro-realm案例

package com.shiro.realm; import java.sql.Connection; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.AuthenticationInfo; import org.apache.shiro.authc.AuthenticationToken; import org.apache.shiro.authc.SimpleAuthenticationInfo; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; import org.apache.shiro.subject.PrincipalCollection; import com.shiro.dao.UserDao; import com.shiro.entity.User; import com.shiro.utils.ConnectionUtil; /** * 自定义realm * 步骤： * s1:继承 AuthorizingRealm 并实现其方法 * s2:验证当前用户 * s3:给当前登录成功的用户授予角色和权限 * s4: * s5: * @author ITDragon * */ public class MyRealm extends AuthorizingRealm{ private UserDao userDao = new UserDao(); // 给当前登录成功的用户授予角色和权限 @Override protected AuthorizationInfo doGetAuthorizationInfo( PrincipalCollection principals) { // 获取用户名 String userName = (String) principals.getPrimaryPrincipal(); // 认证信息 SimpleAuthorizationInfo simpleAuthorizationInfo = new SimpleAuthorizationInfo(); Connection connection = null; try{ connection = ConnectionUtil.getConnection(); // 设置角色 simpleAuthorizationInfo.setRoles(userDao.getUserRoles(connection , userName)); // 设置权限 simpleAuthorizationInfo.setStringPermissions(userDao.getUserPermissions(connection , userName)); }catch(Exception e){ e.printStackTrace(); }finally{ try { ConnectionUtil.closeConnection(connection); } catch (Exception e) { e.printStackTrace(); } } return null; } // 验证当前用户 @Override protected AuthenticationInfo doGetAuthenticationInfo( AuthenticationToken token) throws AuthenticationException { // 获取用户信息 String userName = (String) token.getPrincipal(); Connection connection = null; try{ connection = ConnectionUtil.getConnection(); // 通过用户名找到用户 User user = userDao.getByUserName(connection, userName); if(null != user){ // 三个参数分别是: 用户名 , 密码 , rememberMe AuthenticationInfo authcInfo = new SimpleAuthenticationInfo(user.getUserName(),user.getPassword(),"false"); return authcInfo; }else{ return null; } }catch(Exception e){ e.printStackTrace(); }finally{ try { ConnectionUtil.closeConnection(connection); } catch (Exception e) { e.printStackTrace(); } } return null; } }