Shiro与数据库交互的实例

/* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, * software distributed under the License is distributed on an * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY * KIND, either express or implied. See the License for the * specific language governing permissions and limitations * under the License. */ package com.wenc.core.service; import java.util.ArrayList; import java.util.List; import java.util.Set; import org.apache.log4j.Logger; import org.apache.shiro.authc.*; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; import org.apache.shiro.subject.PrincipalCollection; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Component; import com.wenc.core.po.Perms; import com.wenc.core.po.Role; import com.wenc.core.po.User; import com.wenc.test.dao.PersonDAO; @Component public class SampleRealmService extends AuthorizingRealm { private static Logger logger =Logger.getLogger(SampleRealmService.class); @Autowired private PersonDAO personDAO; public SampleRealmService() { logger.info("-------AAA1------------------"); setName("sampleRealmService"); // setCredentialsMatcher(new Sha256CredentialsMatcher()); } /** * 身份验证 * 创 建 人: 文超 * 创建时间: 2014-2-14 下午1:37:50 * @param authcToken 登陆Action封装的令牌 * @return * @throws AuthenticationException * @see [类、类#方法、类#成员] */ protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException { UsernamePasswordToken token = (UsernamePasswordToken) authcToken; /**查询对应的用户是否存在*/ User user =personDAO.getUser(token.getUsername(), token.getPassword().toString()); logger.info(user); if( user != null ) { return new SimpleAuthenticationInfo(user.getId(), user.getPassword(), getName()); } else { return null; } } /** * 授权 * 注意:统一在struts的拦截器中处理,见UserPermissionInterceptor.java * 创 建 人: 文超 * 创建时间: 2014-2-14 下午1:38:42 * @param principals * @return * @see [类、类#方法、类#成员] */ protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) { Integer userId = (Integer) principals.fromRealm(getName()).iterator().next(); logger.info("用户ID："+userId); User user = personDAO.getUser(userId); if( user != null ) { SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); for( Role role : user.getRoles() ) { info.addRole(role.getName()); Set<Perms> set= role.getPermissions(); logger.info(set); List<String> temp=new ArrayList<String>(); for(Perms perm:set){ temp.add(perm.getActionName()); } info.addStringPermissions( temp ); } return info; } else { return null; } } }