Shiro框架01之什么是shiro+shiro的架构+权限认证

Subject subject = SecurityUtils.getSubject();
      if(subject.hasRole("admin")) {
        //有权限
      } else {
        //无权限
      }

@RequiresRoles("admin")
      public void hello() {
        //有权限
      }

<shiro:hasRole name="admin">
      <!— 有权限 —>
      </shiro:hasRole>

[users]
lhm=416,role1
ltg=121,role2
zxx=1223,role4
dj=913,role1,role2

package com.zking.shiro01.util;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.config.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.subject.Subject;
public class Demo {
    public static <IniSecurityManagerFactory> void main(String[] args) {
        //1.加载读取自定义Realm数据源
        IniSecurityManagerFactory factory=new IniSecurityManagerFactory("classpath:shiro-permission.ini");
        //2.获取安全管理器SecurityManger
        SecurityManager securityManager = factory.getInstance();
        //3.将SecurityManager交由SecurityUtils工具类来管理
        SecurityUtils.setSecurityManager(securityManager);
        //4.获取Subject
        Subject subject=SecurityUtils.getSubject();
        //5.创建用户账号和密码的登陆令牌token
        UsernamePasswordToken token=new UsernamePasswordToken(
                "lhm",
                "416"
        );
        try {
            //异常
            //1)org.apache.shiro.authc.IncorrectCredentialsException:密码错误
            //2)org.apache.shiro.authc.UnknownAccountException:用户名不存在
            //3)org.apache.shiro.authz.UnauthorizedException:无权限
            //6.用户认证
            subject.login(token);
            System.out.println("用户认证成功！");
        } catch (AuthenticationException e) {
            System.out.println("认证失败！");
            e.printStackTrace();
        }
        //8.角色验证
        try {
             subject.checkRole("role2");
                System.out.println("角色验证成功！");
        } catch (Exception e) {
            System.out.println("角色验证失败！");
            e.printStackTrace();
        }
        try {
            //9.权限验证
           /* if (subject.isPermitted("system:user:add")) {
                System.out.println("权限验证成功！");
            } else {
                System.out.println("权限验证失败！");
            }*/
           subject.checkPermission("system:user:edit");
            System.out.println("权限验证成功!");
        } catch (Exception e) {
            System.out.println("权限验证失败!");
            e.printStackTrace();
        }
        //7.安全退出
        subject.logout();
    }
}

[users]
lhm=416,role1
ltg=121,role2
zxx=1223,role4
dj=913,role1,role2
[roles]
role1=system:*:*
role2=system:user:add,system:user:edit

[users]
lhm=416,role1
ltg=121,role2
zxx=1223,role4
dj=913,role1,role2

[main]
#定义身份认证失败后的请求url映射，loginUrl是身份认证过滤器中的一个属性
authc.loginUrl=/login.do
#定义角色认证失败后的请求url映射，unauthorizedUrl是角色认证过滤器中的一个属性
roles.unauthorizedUrl=/unauthorized.jsp
#定义权限认证失败后请求url映射，unauthorizedUrl是角色认证过滤器中的一个属性
perms.unauthorizedUrl=/unauthorized.jsp
[users]
lhm=416,role1
ltg=121,role2
zxx=1223,role3
dj=913,admin
[roles]
role1=user:create
role2=user:create,user:update
role3=user:create,user:update,user:delete,user:view,user:load
admin=user:*
#定义请求的地址需要做什么验证
[urls]
#请求login的时候不需要权限，游客身份即可(anon)
/login.do=anon
#请求/user/updatePwd.jsp的时候，需要身份认证(authc)
/user/updatePwd.jsp=authc
#请求/student的时候，需要角色认证，必须是拥有admin角色的用户才行
/admin/*.jsp=roles[admin]
#请求/teacher的时候，需要权限认证，必须是拥有user:create权限的角色的用户才行
/teacher=perms["user:create"]

<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xmlns="http://java.sun.com/xml/ns/javaee"
         xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
         id="WebApp_ID" version="3.0">
  <display-name>Archetype Created Web Application</display-name>
  <context-param>
    <param-name>shiroConfigLocations</param-name>
    <param-value>classpath:shiro-web.ini</param-value>
  </context-param>
  <listener>
    <listener-class>org.apache.shiro.web.env.EnvironmentLoaderListener</listener-class>
  </listener>
  <filter>
    <filter-name>ShiroFilter</filter-name>
    <filter-class>org.apache.shiro.web.servlet.ShiroFilter</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>ShiroFilter</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>
  <servlet>
    <servlet-name>loginServlet</servlet-name>
    <servlet-class>com.zking.shiro01.service.LoginServlet</servlet-class>
  </servlet>
  <servlet-mapping>
    <servlet-name>loginServlet</servlet-name>
    <url-pattern>login.do</url-pattern>
  </servlet-mapping>
  <servlet>
    <servlet-name>logoutServlet</servlet-name>
    <servlet-class>com.zking.shiro01.service.LogoutServlet</servlet-class>
  </servlet>
  <servlet-mapping>
    <servlet-name>logoutServlet</servlet-name>
    <url-pattern>logout.do</url-pattern>
  </servlet-mapping>
</web-app>