EasyShiro例子

package com.freestyle.easyshiro; import com.fasterxml.jackson.core.JsonProcessingException; import com.freestyle.common.ResponseEntity; import com.freestyle.easyshiro.realms.UserDtoWithPermission; import com.freestyle.easyshiro.web.WebSessionAbleEasyShiroConfig; import com.freestyle.easyshiro.web.WebSessionEasyShiroProperties; import com.freestyle.jwt.JwtUtils; import org.apache.commons.lang3.StringUtils; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.IncorrectCredentialsException; import org.apache.shiro.authc.UnknownAccountException; import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.authz.annotation.Logical; import org.apache.shiro.authz.annotation.RequiresPermissions; import org.apache.shiro.subject.Subject; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestParam; import org.springframework.web.bind.annotation.RestController; import javax.annotation.Resource; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.util.HashMap; import java.util.Map; import java.util.concurrent.TimeUnit; /** * Created by rocklee on 2022/3/10 15:39 */ @RestController @RequestMapping("/user") public class LoginController { @Resource private WebSessionEasyShiroProperties properties; @Resource private WebSessionAbleEasyShiroConfig shiroConfig; @GetMapping("login") public Object login(@RequestParam(value = "user",required = false)String user, @RequestParam(value = "password",required = false) String password, HttpServletResponse response){ if (user==null){ return "显示登录界面"; } Subject subject = SecurityUtils.getSubject(); // 获取当前主体 UsernamePasswordToken token = new UsernamePasswordToken(user, password); try { subject.login(token); // 登录 if (!StringUtils.isBlank(properties.getSessionTokenName())){ response.setHeader(properties.getSessionTokenName(), subject.getSession().getId().toString()); } if (!StringUtils.isBlank(properties.getJwtTokenName())){ String jwtToken= JwtUtils.getToken(subject.getSession().getId(),properties.getSessionTimeOut(), TimeUnit.SECONDS); //返回两组token，之后的访问随便用哪个 response.setHeader(properties.getJwtTokenName(), jwtToken); } return ResponseEntity.fromResult(0,"OK"); } catch (UnknownAccountException |IncorrectCredentialsException e){ return ResponseEntity.fromErr(0,-1,"用户或密码无效"); } } @GetMapping("subject") @RequiresPermissions(logical = Logical.AND, value = {"p1"}) public Object getSubject(HttpServletRequest request) throws JsonProcessingException { Subject subject=shiroConfig.getSessionUtils().createSubject(request.getHeader("token")); UserDtoWithPermission userDtoWithPermission=(UserDtoWithPermission)subject.getPrincipal(); Map<String,Object> values=new HashMap<>(); values.put("account",userDtoWithPermission.getAccount() ); values.put("roles",userDtoWithPermission.getRoles()); values.put("permissions",userDtoWithPermission.getPermissions()); return ResponseEntity.fromResult(0,values); } @GetMapping("p1") @RequiresPermissions(logical = Logical.AND, value = {"p1"}) public Object p1(){ return ResponseEntity.fromResult(0,"权限通过，返回P1"); } @GetMapping("p2") @RequiresPermissions(logical = Logical.AND, value = {"p2"}) public Object p2(){ return ResponseEntity.fromResult(0,"权限通过，返回P2"); } }