spring boot 1.5.4 集成shiro+cas,实现单点登录和权限控制

spring boot 1.5.4 集成集成shiro+cas,实现单点登录和权限控制实现单点登录和权限控制

主要介绍了spring boot 1.5.4 集成shiro+cas，实现单点登录和权限控制,需要的朋友可以参考下

1.添加添加maven依赖依赖(先安装好先安装好cas-server-3.5.2，安装步骤请查看本文参考文章，安装步骤请查看本文参考文章)

<dependency>

<groupId>org.apache.shiro</groupId>

<artifactId>shiro-spring</artifactId>

<version>1.2.4</version>

</dependency>

<groupId>org.apache.shiro</groupId>

<artifactId>shiro-cas</artifactId>

<version>1.2.4</version>

</dependency>

2.启动累添加启动累添加@ServletComponentScan注解注解

@SpringBootApplication

public class Application {

/**

* main function

* @param args params

}

}

3.配置配置shiro+cas

package com.hdwang.config.shiroCas;

import com.hdwang.dao.UserDao;

import org.apache.shiro.cache.ehcache.EhCacheManager;

import org.apache.shiro.cas.CasFilter;

import org.apache.shiro.cas.CasSubjectFactory;

import org.apache.shiro.spring.LifecycleBeanPostProcessor;

import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;

import org.slf4j.LoggerFactory;

import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;

import org.springframework.beans.factory.annotation.Qualifier;

import org.springframework.boot.web.servlet.FilterRegistrationBean;

import org.springframework.boot.web.servlet.ServletListenerRegistrationBean;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

import org.springframework.core.Ordered;

import org.springframework.web.filter.DelegatingFilterProxy;

import javax.servlet.Filter;

* shiro+cas 配置

*/

@Configuration

public class ShiroCasConfiguration {

private static final Logger logger = LoggerFactory.getLogger(ShiroCasConfiguration.class);

// cas server地址

public static final String casServerUrlPrefix = "https://localhost:8443/cas";

// Cas登录页面地址

public static final String casLoginUrl = casServerUrlPrefix + "/login";

// Cas登出页面地址

public static final String loginUrl = casLoginUrl + "?service=" + shiroServerUrlPrefix + casFilterUrlPattern;

// 登出地址

public static final String logoutUrl = casLogoutUrl+"?service="+shiroServerUrlPrefix;

// 登录成功地址

public static final String loginSuccessUrl = "/home";

// 权限认证失败跳转地址

public static final String unauthorizedUrl = "/error/403.html";

@Bean

public EhCacheManager getEhCacheManager() {

EhCacheManager em = new EhCacheManager();

realm.setCacheManager(cacheManager);

//realm.setCasServerUrlPrefix(ShiroCasConfiguration.casServerUrlPrefix);

// 客户端回调地址

//realm.setCasService(ShiroCasConfiguration.shiroServerUrlPrefix + ShiroCasConfiguration.casFilterUrlPattern);

return realm;