Spring Boot中的Shiro相关内容

try{
           SimpleAuthenticationInfo authenticationInfo = new SimpleAuthenticationInfo(
                   userInfo.getUsername(), //用户名
                   userInfo.getPassword().toCharArray() , //数据库中的明文密码
                   getName()  //realm name
           );
           return authenticationInfo;
       }catch (Exception e){
           System.out.println("授权失败");
           logger.error("doGetAuthenticationInfo",userInfo);
           return null;
       }

public class FormLoginFilter extends PathMatchingFilter {
    @Override
    protected boolean onPreHandle(ServletRequest request,ServletResponse response, Object mappedValue) throws Exception {
        Subject subject = SecurityUtils.getSubject();
        boolean isAuthenticated = subject.isAuthenticated();
        HttpServletResponse resp = (HttpServletResponse) response;
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        if (httpRequest.getMethod().equals(RequestMethod.OPTIONS.name())) {
            return true;
        }

        // 未授权请求
        if (!isAuthenticated) {
                // 返回状态码
                resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                // 中文乱码
                resp.setContentType("text/html;charset=UTF-8");
                resp.getWriter().print("{\"state\":\"403\",\"msg\":\"未授权\"}");
                return false;
        }
        return true;
    }
}

@Configuration
public class BaseSecurityConfig {
    @Bean
    public FormLoginFilter formLoginFilter(){
        return new FormLoginFilter();
    }

    //配置shrio拦截器
    @Bean
    public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager) {
        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();

        // 必须设置SecuritManager
        shiroFilterFactoryBean.setSecurityManager(securityManager);

        Map<String, Filter> filters = shiroFilterFactoryBean.getFilters();
        //配置拦截器,实现无权限返回401,而不是跳转到登录页
        filters.put("authc", formLoginFilter());
        // 如果不设置默认会自动寻找Web工程根目录下的"/login.jsp"页面
        shiroFilterFactoryBean.setLoginUrl("/");
        // 登录成功后要跳转的链接
        shiroFilterFactoryBean.setSuccessUrl("/");
        // 未授权界面;
        shiroFilterFactoryBean.setUnauthorizedUrl("/403");

        // 拦截器
        Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>();
        // 过滤链定义，从上向下顺序执行，一般将 /**放在最为下边
        // authc:所有url都必须认证通过才可以访问; anon:所有url都都可以匿名访问
        filterChainDefinitionMap.put("/static/**","anon");
        filterChainDefinitionMap.put("/user/register", "authc");
        filterChainDefinitionMap.put("/user/checkloginByCode", "anon");
        filterChainDefinitionMap.put("/user/**", "anon");
        filterChainDefinitionMap.put("/", "anon");
        filterChainDefinitionMap.put("/loginWX", "anon");
        filterChainDefinitionMap.put("/get_auth_access_token", "anon");
        filterChainDefinitionMap.put("/scan", "anon");
        filterChainDefinitionMap.put("/**", "authc");
        shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);

        return shiroFilterFactoryBean;
    }
}

@Bean
public FilterRegistrationBean registration(FormLoginFilter filter) {
    FilterRegistrationBean registration = new FilterRegistrationBean(filter);
    registration.setEnabled(false);
    return registration;
}

@Component
public class SpringContextUtil implements ApplicationContextAware {
    private static ApplicationContext applicationContext;

    @Override
    public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
        SpringContextUtil.applicationContext = applicationContext;
    }

    /**
     * 获取上下文
     */
    public static ApplicationContext getApplicationContext() {
        return applicationContext;
    }

    /**
     * 通过 bena 名称获取上下文中的 bean
     */
    public static Object getBean(String name) {
        return applicationContext.getBean(name);
    }

    /**
     * 通过类型获取上下文中的bean
     */
    public static Object getBean(Class<?> requiredType) {
        return applicationContext.getBean(requiredType);
    }
    /**
    * 获取application.yml中的属性
    */
    public static String getValue(String name){
        return applicationContext.getEnvironment().getProperty(name); // 方法2
    }

}