springboot+shiro+redis整合

package com.siyue.shiro.config; import java.util.LinkedHashMap; import java.util.Map; import org.apache.shiro.authc.credential.HashedCredentialsMatcher; import org.apache.shiro.cache.CacheManager; import org.apache.shiro.cache.ehcache.EhCacheManager; import org.apache.shiro.mgt.SecurityManager; import org.apache.shiro.session.mgt.SessionManager; import org.apache.shiro.session.mgt.eis.SessionDAO; import org.apache.shiro.spring.LifecycleBeanPostProcessor; import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor; import org.apache.shiro.spring.web.ShiroFilterFactoryBean; import org.apache.shiro.web.mgt.DefaultWebSecurityManager; import org.apache.shiro.web.servlet.SimpleCookie; import org.apache.shiro.web.session.mgt.DefaultWebSessionManager; import org.apache.shiro.web.session.mgt.ServletContainerSessionManager; import org.springframework.beans.factory.config.MethodInvokingFactoryBean; import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean; import org.springframework.boot.web.servlet.FilterRegistrationBean; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.web.filter.DelegatingFilterProxy; import com.siyue.shiro.common.ShrioUrl; import com.siyue.shiro.realm.ShiroRealm; import com.siyue.shiro.redis.RedisCacheManager; import com.siyue.shiro.redis.RedisSessionDAO; /** * *Title:ShiroConfiguration *描述:shiro配置 *@author qiaopeng *@date 2017年12月27日 */ @Configuration public class ShiroConfiguration { /** * 描述:自己现实的sessionDAO * @return */ @Bean @ConditionalOnMissingBean public SessionDAO redisSessionDAO() { return new RedisSessionDAO(); } /** * * 描述:cacheManager对象 * @return */ // @Bean(destroyMethod = "destroy") // @ConditionalOnMissingBean // public CacheManager cacheManager(){ // EhCacheManager cacheManager = new EhCacheManager(); // cacheManager.setCacheManagerConfigFile("classpath:ehcache.xml"); // return cacheManager; // } @Bean @ConditionalOnMissingBean public CacheManager cacheManager() { return new RedisCacheManager(); } /** * simpleCookie,不定义在集群环境下会出现There is no session with id .... * @return */ @Bean @ConditionalOnMissingBean public SimpleCookie simpleCookie() { SimpleCookie cookie = new SimpleCookie("redis.session"); cookie.setPath("/"); return cookie; } /** * * 描述:sessionManager对象 * @return */ @Bean @ConditionalOnMissingBean public SessionManager sessionManager() { DefaultWebSessionManager sessionManager = new DefaultWebSessionManager(); sessionManager.setSessionDAO(redisSessionDAO()); //sessionManager.setGlobalSessionTimeout(1800000);//默认值30分钟 : 1000 * 60 * 30 = 1800000 sessionManager.setCacheManager(cacheManager()); sessionManager.setSessionIdCookie(simpleCookie()); return sessionManager; } /** * * 描述:凭证匹配器 * @return */ @Bean @ConditionalOnMissingBean public HashedCredentialsMatcher hashedCredentialsMatcher(){ HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(); matcher.setHashAlgorithmName("MD5");//可以MD5、SHA-1，如果对密码安全有更高要求可以用SHA-256或者更高 matcher.setHashIterations(1);//加密迭代次数 matcher.setStoredCredentialsHexEncoded(true);//storedCredentialsHexEncoded 默认是true，此时用的是密码加密用的是Hex编码；false时用Base64编码 return matcher; } /** * * 描述:自定义的realm * @param cacheManager * @return */ @Bean @ConditionalOnMissingBean public ShiroRealm shiroRealm(CacheManager cacheManager, HashedCredentialsMatcher matcher){ ShiroRealm realm = new ShiroRealm(); realm.setAuthorizationCachingEnabled(true); realm.setCacheManager(cacheManager); realm.setName("authRealm"); realm.setCredentialsMatcher(matcher); return realm; } /** * * 描述:securityManager对象 * @param shiroRealm * @param cacheManager * @param sessionManager * @return */ @Bean @ConditionalOnMissingBean public SecurityManager securityManager(ShiroRealm shiroRealm, CacheManager cacheManager, SessionManager sessionManager){ DefaultWebSecurityManager manager = new DefaultWebSecurityManager(); manager.setRealm(shiroRealm); manager.setCacheManager(cacheManager); manager.setSessionManager(sessionManager); return manager; } /** * * 描述:生命周期控制器 * @return */ @Bean @ConditionalOnMissingBean public LifecycleBeanPostProcessor lifecycleBeanPostProcessor() { return new LifecycleBeanPostProcessor(); } /** * * 描述:开启注解模式 * @param securityManager * @return */ @Bean @ConditionalOnMissingBean public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor (SecurityManager securityManager) { AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor(); advisor.setSecurityManager(securityManager); return advisor; } /** * * 描述:过滤器链 * @param securityManager * @return */ @Bean(name = "shiroFilter") @ConditionalOnMissingBean public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager){ ShiroFilterFactoryBean factory = new ShiroFilterFactoryBean(); factory.setSecurityManager(securityManager); factory.setLoginUrl(ShrioUrl.LoginURL.getUrl()); factory.setSuccessUrl(ShrioUrl.SuccessURL.getUrl()); factory.setUnauthorizedUrl(ShrioUrl.UnauthorizedURL.getUrl()); Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>(); //过滤链定义，从上向下顺序执行，一般将/**放在最为下边 filterChainDefinitionMap.put("/user/login", "anon"); filterChainDefinitionMap.put("/user/tologin", "anon"); filterChainDefinitionMap.put("/api/**", "anon"); filterChainDefinitionMap.put("/assets/**", "anon"); filterChainDefinitionMap.put("/logout", "logout"); filterChainDefinitionMap.put("/**", "authc"); factory.setFilterChainDefinitionMap(filterChainDefinitionMap); return factory; } /** * * 描述:相当于调用SecurityUtils.setSecurityManager(securityManager) * @param securityManager * @return */ @Bean @ConditionalOnMissingBean public MethodInvokingFactoryBean methodInvokingFactoryBean(SecurityManager securityManager){ MethodInvokingFactoryBean factoryBean = new MethodInvokingFactoryBean(); factoryBean.setArguments(securityManager); factoryBean.setStaticMethod("org.apache.shiro.SecurityUtils.setSecurityManager"); return factoryBean; } /** * * 描述:注册shiro过滤器，相当于在web.xml中配置shiroFilter * @return */ @Bean @ConditionalOnMissingBean public FilterRegistrationBean delegatingFilterProxy(){ FilterRegistrationBean filterRegistrationBean = new FilterRegistrationBean(); DelegatingFilterProxy proxy = new DelegatingFilterProxy(); proxy.setTargetFilterLifecycle(true); proxy.setTargetBeanName("shiroFilter"); filterRegistrationBean.setFilter(proxy); return filterRegistrationBean; } }