SpringBoot整合shiro的基本使用

原创

已于 2024-06-30 11:20:12 修改 · 208 阅读

5 ·

CC 4.0 BY-SA版权

文章标签：

#spring boot #后端 #java

于 2024-06-21 11:39:48 首次发布

1、编写一个新的认证对象继承自AuthenticationToken，当然也可以直接使用AuthenticationToken

package com.mochenli.eternalstar.shiro.token;
import com.mochenli.eternalstar.common.util.TokenUtil;
import org.apache.shiro.authc.AuthenticationToken;

/**
 * @author: MoChenLi
 * @description:
 * @createTime: 2024-06-08 12:04
 */
public class JwtToken implements AuthenticationToken {
   
   //实现shiro默认的token认证类

    private String username;
    private String token;

    public JwtToken(String token) {
   
   
        this.token = token;
        this.username = TokenUtil.analysisTokenByUserName(token);
    }
    public JwtToken(){
   
   

    }
    public String getToken() {
   
   
        return token;
    }

    public void setToken(String token) {
   
   
        this.token = token;
    }

    public String getUsername() {
   
   
        return username;
    }

    public void setUsername(String username) {
   
   
        this.username = username;
    }

    @Override
    public Object getPrincipal() {
   
   
        return username;
    }

    @Override
    public Object getCredentials() {
   
   
        return token;
    }
}

2、编写一个过滤器JwtFliter继承自AuthenticatingFilter

package com.mochenli.eternalstar.shiro.filter;

import cn.hutool.core.util.StrUtil;
import cn.hutool.json.JSONUtil;
import com.mochenli.eternalstar.common.enums.ExceptionCode;
import com.mochenli.eternalstar.common.exception.BaseException;
import com.mochenli.eternalstar.common.util.ApiResponse;
import com.mochenli.eternalstar.common.util.CookiesUtil;
import com.mochenli.eternalstar.common.util.TokenUtil;
import com.mochenli.eternalstar.shiro.token.JwtToken;
import lombok.AllArgsConstructor;
import lombok.Data;
import lombok.EqualsAndHashCode;
import lombok.NoArgsConstructor;
import lombok.extern.slf4j.Slf4j;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.web.filter.authc.AuthenticatingFilter;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

/**
 * @author: MoChenLi
 * @description
 * @createTime: 2024-06-08 13:11
 */
@EqualsAndHashCode(callSuper = true)
@Slf4j
@AllArgsConstructor
@NoArgsConstructor
@Data
public class JwtFilter extends AuthenticatingFilter {
   
   

    private String token;
    private boolean enabledTest;

    /**
     * order 1
     * 判断允许进行访问   如果为true就直接跳过其他方法 所以一般设置为false直接进入下一步验证onAccessDenied
     *
     * @param request
     * @param response
     * @param mappedValue
     * @return