共计 5422 个字符，预计需要花费 14 分钟才能阅读完成。
学习了一下 Shrio，简单的做一下笔记
推荐三篇文章，有需要可以看看：
30 分钟学会如何使用 Shiro
SpringBoot2.0 集成 Shiro
SpringBoot 整合 Shiro，通过用户、角色、权限三者关联实现权限管理
Shiro 关于
Apache Shiro 是一个强大易用的 Java 安全框架，提供了认证、授权、加密和会话管理等功能，对于任何一个应用程序，Shiro 都可以提供全面的安全管理服务。相比较 Spring Security，Shiro 要小巧、简单的多。
一、准备
本文使用的 SpringBoot + MyBatis + thymeleaf
先看看项目结构
1.pom.xml
<dependency>
<groupId>org.apache.shiro</groupId>
<artifactId>shiro-core</artifactId>
<version>1.4.1</version>
</dependency>
<dependency>
<groupId>org.apache.shiro</groupId>
<artifactId>shiro-spring</artifactId>
<version>1.4.1</version>
</dependency>
<dependency>
<groupId>com.alibaba</groupId>
<artifactId>druid</artifactId>
<version>1.1.16</version>
</dependency>值贴出来关键依赖，其他可自行 Maven
2. 数据库 sql
-- 权限表 --
CREATE TABLE permission(pid INT(11) NOT NULL AUTO_INCREMENT,
name VARCHAR(255) NOT NULL DEFAULT '',
url VARCHAR (255) DEFAULT '',
PRIMARY KEY (pid)
) ENGINE = InnoDB DEFAULT CHARSET = utf8;
INSERT INTO permission VALUES ('1','add','');
INSERT INTO permission VALUES ('2','delete','');
INSERT INTO permission VALUES ('3','edit','');
INSERT INTO permission VALUES ('4','query','');
-- 用户表 --
CREATE TABLE user(uid INT(11) NOT NULL AUTO_INCREMENT,
username VARCHAR(255) NOT NULL DEFAULT '',
password VARCHAR(255) NOT NULL DEFAULT '',
PRIMARY KEY (uid)
) ENGINE = InnoDB DEFAULT CHARSET = utf8;
INSERT INTO user VALUES ('1','admin','123');
INSERT INTO user VALUES ('2','demo','123');
-- 角色表 --
CREATE TABLE role(rid INT(11) NOT NULL AUTO_INCREMENT,
rname VARCHAR(255) NOT NULL DEFAULT '',
PRIMARY KEY (rid)
) ENGINE= InnoDB DEFAULT CHARSET = utf8;
INSERT INTO role VALUES ('1','admin');
INSERT INTO role VALUES ('2','customer');
-- 权限 角色 关系表 --
CREATE TABLE permission_role(rid INT(11) NOT NULL,
pid INT(11) NOT NULL,
KEY idx_rid (rid),
KEY idx_pid(pid)
) ENGINE = InnoDB DEFAULT CHARSET = utf8;
INSERT INTO permission_role VALUES ('1','1');
INSERT INTO permission_role VALUES ('1','2');
INSERT INTO permission_role VALUES ('1','3');
INSERT INTO permission_role VALUES ('1','4');
INSERT INTO permission_role VALUES ('2','1');
INSERT INTO permission_role VALUES ('2','4');
-- 用户 角色 关系表 --
CREATE TABLE user_role(uid INT(11) NOT NULL,
rid INT(11) NOT NULL,
KEY idx_uid (uid),
KEY idx_rid (rid)
) ENGINE = InnoDB DEFAULT CHARSET = utf8;
INSERT INTO user_role VALUES ('1','1');
INSERT INTO user_role VALUES ('2','2');
二、基础代码(Model，Dao 和 Service 层)
1.Model 实体
User.java
package com.scitc.shiro.model;
import java.util.HashSet;
import java.util.Set;
public class User {
private Integer uid;
private String username;
private String password;
private Set<Role> roles = new HashSet<>();
public Integer getUid() {return uid;}
public void setUid(Integer uid) {this.uid = uid;}
public String getUsername() {return username;}
public void setUsername(String username) {this.username = username;}
public String getPassword() {return password;}
public void setPassword(String password) {this.password = password;}
public Set<Role> getRoles() {return roles;}
public void setRoles(Set<Role> roles) {this.roles = roles;}
@Override
public String toString() {
return "User{" +
"uid=" + uid +
", username='" + username + '\'' +
", password='" + password + '\'' +
", roles=" + roles +
'}';
}
}
Role.java
package com.scitc.shiro.model;
import java.util.HashSet;
import java.util.Set;
public class Role {
private Integer rid;
private String rname;
private Set<Permission> permissions = new HashSet<>();
private Set<User> users = new HashSet<>();
public Integer getRid() {return rid;}
public void setRid(Integer rid) {this.rid = rid;}
public String getRname() {return rname;}
public void setRname(String rname) {this.rname = rname;}
public Set<Permission> getPermissions() {return permissions;}
public void setPermissions(Set<Permission> permissions) {this.permissions = permissions;}
public Set<User> getUsers() {return users;}
public void setUsers(Set<User> users) {this.users = users;}
@Override
public String toString() {
return "Role{" +
"rid=" + rid +
", rname='" + rname + '\'' +
", permissions=" + permissions +
", users=" + users +
'}';
}
}
Permission.java
package com.scitc.shiro.model;
public class Permission {
private Integer pid;
private String name;
private String url;
public Integer getPid() {return pid;}
public void setPid(Integer pid) {this.pid = pid;}
public String getName() {return name;}
public void setName(String name) {this.name = name;}
public String getUrl() {return url;}
public void setUrl(String url) {this.url = url;}
@Override
public String toString() {
return "Permission{" +
"pid=" + pid +
", name='" + name + '\'' +
", url='" + url + '\'' +
'}';
}
}
2.mapper
UserMapper.java
public interface UserMapper {User findByUsername(@Param("username") String username);
}
UserMapper.xml
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE mapper
PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
"http://mybatis.org/dtd/mybatis-3-mapper.dtd">
<mapper namespace="com.scitc.shiro.mapper.UserMapper">
<resultMap id="userMap" type="com.scitc.shiro.model.User">
<id column="uid" property="uid"/>
<result column="username" property="username"/>
<result column="password" property="password"/>
<collection property="roles" ofType="com.scitc.shiro.model.Role">
<id column="rid" property="rid"/>
<result column="rname" property="rname"/>
<collection property="permissions" ofType="com.scitc.shiro.model.Permission">
<id column="pid" property="pid"/>
<result column="name" property="name"/>
<result column="url" property="url"/>
</collection>
</collection>
</resultMap>
<select id="findByUsername" parameterType="String" resultMap="userMap">
SELECT u.*,r.*,p.*
FROM user u
INNER JOIN user_role ur ON ur.uid = u.uid
INNER JOIN role r ON r.rid= ur.rid
INNER JOIN permission_role pr ON pr.rid = r.rid
INNER JOIN permission p ON pr.pid = p.pid
WHERE u.username = #{username}
</select>
</mapper>
// 用户表 ---> 用户角色表 ---> 角色表 ---> 角色权限表 ---> 权限表UserService.java
public interface UserService {User findByUsername(String username);
}
UserServiceImpl.java
@Service
public class UserServiceImpl implements UserService {
@Autowired
private UserMapper userMapper;
@Override
public User findByUsername(String username) {return userMapper.findByUsername(username);
}
}
正文完
