shiro学习

从Shiro官网的10分钟教程和Get started开始。

• 了解什么是Shiro？

　　英文不好，结合百度翻译，大概了解了一下，powerful，easy to use，java安全框架，提供认证、授权、加密和session管理解决方案。

• 下载使用

　　https://shiro.apache.org/download.html

　　使用maven，加载shiro的各个组件。也可以再github直接下载Shiro的全部源码学习。在源码中找到samples文件夹，查看官方提供的demo。

• quickstart

　　新建maven项目，引入shiro-core依赖

　　

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>com.sun</groupId>
  <artifactId>shiro-quickstart</artifactId>
  <version>0.0.1-SNAPSHOT</version>
  <packaging>jar</packaging>

  <name>shiro-quickstart</name>
  <url>http://maven.apache.org</url>

  <properties>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <shiro.version>1.4.0</shiro.version>
  </properties>

  <dependencies>
    <dependency>
      <groupId>junit</groupId>
      <artifactId>junit</artifactId>
      <version>4.12</version>
      <scope>test</scope>
    </dependency>
    
    <dependency>
    	<groupId>org.apache.shiro</groupId>
    	<artifactId>shiro-core</artifactId>
    	<version>${shiro.version}</version>
    </dependency>
    <!-- 日志依赖，和shiro本身无关 -->
    <dependency>
	    <groupId>commons-logging</groupId>
	    <artifactId>commons-logging</artifactId>
	    <version>1.2</version>
	</dependency>
	<dependency>  
	    <groupId>org.slf4j</groupId>  
	    <artifactId>slf4j-simple</artifactId>  
	    <version>1.7.25</version>  
	</dependency> 
  </dependencies>
  
  <build>
  	
  	<plugins>
  		<plugin>
  			<artifactId>maven-compiler-plugin</artifactId>
  			<configuration>
  				<source>1.8</source>
  				<target>1.8</target>
  			</configuration>
  		</plugin>
  	</plugins>
  </build>
</project>

　　

　　新建quickStart类，按照官网实例敲下去，运行：

SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
SLF4J: Defaulting to no-operation (NOP) logger implementation
SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details.
Exception in thread "main" org.apache.shiro.UnavailableSecurityManagerException: No SecurityManager accessible to the calling code, either bound to the org.apache.shiro.util.ThreadContext or as a vm static singleton.  This is an invalid application configuration.
    at org.apache.shiro.SecurityUtils.getSecurityManager(SecurityUtils.java:123)
    at org.apache.shiro.subject.Subject$Builder.<init>(Subject.java:626)
    at org.apache.shiro.SecurityUtils.getSubject(SecurityUtils.java:56)
    at com.sun.shiro_quickstart.QuickStart.main(QuickStart.java:18)

　　没有绑定securityManager，在官方文档的Get started:first shiro application中发现了这个名词。使用shiro，第一件事就是创建一个securityManager，根据教程，我们使用shiro.ini创建securityManager.

package com.sun.shiro_quickstart;

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.IncorrectCredentialsException;
import org.apache.shiro.authc.UnknownAccountException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.config.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.util.Factory;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

/**
 * 使用shiro.ini创建securityManager
 * @author quietly
 *
 */
public class StartWithSecurityManager {

	public static Logger log = LoggerFactory.getLogger(StartWithSecurityManager.class);
	public static void main(String[] args) {
		
		Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
		
		SecurityManager securityManager = factory.getInstance();
		
		SecurityUtils.setSecurityManager(securityManager);
		
		Subject currentUser = SecurityUtils.getSubject();
		
		if(!currentUser.isAuthenticated()){
			
				//尚未登录：
				UsernamePasswordToken token = new UsernamePasswordToken("root","root");
				token.setRememberMe(true);
				try{
					
					currentUser.login(token);
				}catch(UnknownAccountException e){
					
					//账号不存在
					log.error("用户名不存在：\n" + e.getMessage());
				}catch(IncorrectCredentialsException e){
					
					log.error("凭证（密码）错误：\n" + e.getMessage());
				}
		}else{
			
			log.info("用户已认证");
			log.info("root is Permited by user:select:" + currentUser.isPermitted("user:select"));
			currentUser.logout();
		}
		if(currentUser.isAuthenticated()){
			
			log.info("用户已认证");
			log.info("root is Permited by 'user:select':" + currentUser.isPermitted("user:select"));
			currentUser.logout();
		}
	}
}