242 lines
8.9 KiB
Java
242 lines
8.9 KiB
Java
package com.xwbing.shiro;
|
|
|
|
import org.apache.shiro.mgt.SecurityManager;
|
|
import org.apache.shiro.spring.LifecycleBeanPostProcessor;
|
|
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
|
|
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
|
|
import org.apache.shiro.web.filter.authc.AnonymousFilter;
|
|
import org.apache.shiro.web.mgt.CookieRememberMeManager;
|
|
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
|
|
import org.apache.shiro.web.servlet.SimpleCookie;
|
|
import org.apache.shiro.web.session.mgt.DefaultWebSessionManager;
|
|
import org.crazycake.shiro.RedisCacheManager;
|
|
import org.crazycake.shiro.RedisManager;
|
|
import org.crazycake.shiro.RedisSessionDAO;
|
|
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
|
|
import org.springframework.beans.factory.annotation.Value;
|
|
import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
|
|
import org.springframework.boot.web.servlet.FilterRegistrationBean;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Configuration;
|
|
import org.springframework.context.annotation.DependsOn;
|
|
import org.springframework.context.annotation.PropertySource;
|
|
import org.springframework.web.filter.DelegatingFilterProxy;
|
|
|
|
import javax.servlet.DispatcherType;
|
|
import javax.servlet.Filter;
|
|
import java.util.Base64;
|
|
import java.util.HashMap;
|
|
import java.util.LinkedHashMap;
|
|
import java.util.Map;
|
|
|
|
/**
|
|
* 项目名称: boot-module-demo
|
|
* 创建时间: 2018/3/28 14:06
|
|
* 作者: xiangwb
|
|
* 说明: anon,authc
|
|
*/
|
|
@Configuration
|
|
@PropertySource("classpath:redis.properties")
|
|
public class ShiroConfig {
|
|
@Value("${host}")
|
|
private String host;
|
|
@Value("${port}")
|
|
private Integer port;
|
|
@Value("${timeout}")
|
|
private Integer timeOut;
|
|
|
|
/**
|
|
* 此处核心,对多个filter进行管理，其它filer设置不自动加载，作为过滤链条使用
|
|
*
|
|
* @return
|
|
*/
|
|
@Bean
|
|
public FilterRegistrationBean filterRegistrationBean() {
|
|
FilterRegistrationBean filterRegistration = new FilterRegistrationBean();
|
|
filterRegistration.setFilter(new DelegatingFilterProxy("shiroFilter"));
|
|
filterRegistration.setEnabled(true);
|
|
filterRegistration.addUrlPatterns("/*");
|
|
filterRegistration.setDispatcherTypes(DispatcherType.REQUEST);
|
|
filterRegistration.setOrder(1);
|
|
return filterRegistration;
|
|
}
|
|
|
|
@Bean(name = "shiroFilter")
|
|
public ShiroFilterFactoryBean shiroFilter() {
|
|
ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
|
|
shiroFilterFactoryBean.setSecurityManager(securityManager());
|
|
//如果不设置默认会自动寻找Web工程根目录下的"/login.jsp"页面
|
|
shiroFilterFactoryBean.setLoginUrl("/login.html");
|
|
shiroFilterFactoryBean.setUnauthorizedUrl("/login.html");
|
|
|
|
Map<String, Filter> filters = new HashMap<>();
|
|
filters.put("sessionFilter", sessionFilter());
|
|
filters.put("authc", urlPermissionsFilter());
|
|
filters.put("anon", new AnonymousFilter());
|
|
shiroFilterFactoryBean.setFilters(filters);
|
|
|
|
Map<String, String> chains = new LinkedHashMap<>();
|
|
//静态资源
|
|
chains.put("/META-INF/resources/**", "anon");
|
|
chains.put("/resources/**", "anon");
|
|
chains.put("/static/**", "anon");
|
|
chains.put("/public/**", "anon");
|
|
chains.put("/*.*", "anon");
|
|
//验证码
|
|
chains.put("/captcha", "anon");
|
|
//swagger
|
|
chains.put("/webjars/**", "anon");
|
|
chains.put("/v2/api-docs", "anon");
|
|
chains.put("/swagger-resources", "anon");
|
|
chains.put("/configuration/ui", "anon");
|
|
chains.put("/configuration/security", "anon");
|
|
chains.put("/doc", "anon");
|
|
//德鲁伊数据源
|
|
chains.put("/druid/**", "anon");
|
|
chains.put("/druid", "anon");
|
|
//登录校验
|
|
chains.put("/user/login", "anon");
|
|
chains.put("/login", "anon");
|
|
//登出
|
|
chains.put("/user/logout", "anon");
|
|
//必须通过验证或者rememberMe
|
|
chains.put("/**", "user,authc,sessionFilter");
|
|
shiroFilterFactoryBean.setFilterChainDefinitionMap(chains);
|
|
return shiroFilterFactoryBean;
|
|
}
|
|
|
|
///////////////////////securityManager///////////////////
|
|
@Bean
|
|
public SecurityManager securityManager() {
|
|
DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
|
|
securityManager.setRealm(shiroRealm());
|
|
securityManager.setCacheManager(cacheManager());
|
|
securityManager.setSessionManager(sessionManager());
|
|
securityManager.setRememberMeManager(rememberMeManager());
|
|
return securityManager;
|
|
}
|
|
|
|
///////////////////////shiroRealm///////////////////
|
|
@Bean
|
|
@DependsOn("lifecycleBeanPostProcessor")
|
|
public MyShiroRealm shiroRealm() {
|
|
MyShiroRealm myShiroRealm = new MyShiroRealm();
|
|
myShiroRealm.setCacheManager(cacheManager());
|
|
myShiroRealm.setAuthorizationCachingEnabled(false);
|
|
return myShiroRealm;
|
|
}
|
|
|
|
///////////////////////redisManager///////////////////
|
|
@Bean
|
|
public RedisManager redisManager() {
|
|
RedisManager redisManager = new RedisManager();
|
|
redisManager.setHost("192.168.11.202");
|
|
redisManager.setPort(6379);
|
|
redisManager.setExpire(1800);//配置缓存过期时间
|
|
redisManager.setTimeout(10000);
|
|
return redisManager;
|
|
}
|
|
|
|
///////////////////////cacheManager///////////////////
|
|
@Bean
|
|
@DependsOn("lifecycleBeanPostProcessor")
|
|
public RedisCacheManager cacheManager() {
|
|
RedisCacheManager redisCacheManager = new RedisCacheManager();
|
|
redisCacheManager.setRedisManager(redisManager());
|
|
return redisCacheManager;
|
|
}
|
|
|
|
///////////////////////sessionManager///////////////////
|
|
@Bean
|
|
public DefaultWebSessionManager sessionManager() {
|
|
DefaultWebSessionManager sessionManager = new DefaultWebSessionManager();
|
|
sessionManager.setSessionDAO(redisSessionDAO());
|
|
return sessionManager;
|
|
}
|
|
|
|
@Bean
|
|
public RedisSessionDAO redisSessionDAO() {
|
|
RedisSessionDAO redisSessionDAO = new RedisSessionDAO();
|
|
redisSessionDAO.setRedisManager(redisManager());
|
|
return redisSessionDAO;
|
|
}
|
|
|
|
///////////////////////rememberMeManager///////////////////
|
|
@Bean
|
|
public CookieRememberMeManager rememberMeManager() {
|
|
CookieRememberMeManager cookieRememberMeManager = new CookieRememberMeManager();
|
|
cookieRememberMeManager.setCookie(rememberMeCookie());
|
|
//rememberMe cookie加密的密钥 建议每个项目都不一样 默认AES算法 密钥长度(128 256 512 位)
|
|
cookieRememberMeManager.setCipherKey(Base64.getDecoder().decode("3AvVhmFLUs0KTA3Kprsdag=="));
|
|
return cookieRememberMeManager;
|
|
}
|
|
|
|
@Bean
|
|
public SimpleCookie rememberMeCookie() {
|
|
//这个参数是cookie的名称,对应前端的checkbox的name = rememberMe
|
|
SimpleCookie simpleCookie = new SimpleCookie("rememberMe");
|
|
//记住我cookie生效时间30天 ,单位秒
|
|
simpleCookie.setMaxAge(2592000);
|
|
return simpleCookie;
|
|
}
|
|
|
|
///////////////////////urlPermissionsFilter///////////////////
|
|
@Bean
|
|
public FilterRegistrationBean urlPermissionsFilterRegistrationBean(UrlPermissionsFilter urlPermissionsFilter) {
|
|
FilterRegistrationBean registration = new FilterRegistrationBean(urlPermissionsFilter);
|
|
//设置不自动在在配置时执行,默认是true
|
|
registration.setEnabled(false);
|
|
return registration;
|
|
}
|
|
|
|
@Bean
|
|
public UrlPermissionsFilter urlPermissionsFilter() {
|
|
return new UrlPermissionsFilter();
|
|
}
|
|
|
|
/**
|
|
* session超时过滤
|
|
*
|
|
* @return
|
|
*/
|
|
@Bean(name = "sessionFilter")
|
|
public SessionFilter sessionFilter() {
|
|
return new SessionFilter();
|
|
}
|
|
|
|
/**
|
|
* Shiro生命周期处理器
|
|
*
|
|
* @return
|
|
*/
|
|
@Bean
|
|
public LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
|
|
return new LifecycleBeanPostProcessor();
|
|
}
|
|
|
|
|
|
/**
|
|
* AOP式方法级权限检查
|
|
*
|
|
* @param securityManager
|
|
* @return
|
|
*/
|
|
@Bean
|
|
public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
|
|
AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
|
|
authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
|
|
return authorizationAttributeSourceAdvisor;
|
|
}
|
|
|
|
/**
|
|
* Spring的一个bean，由Advisor决定对哪些类的方法进行AOP代理。
|
|
*/
|
|
@Bean
|
|
@ConditionalOnMissingBean
|
|
public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
|
|
DefaultAdvisorAutoProxyCreator defaultAAP = new DefaultAdvisorAutoProxyCreator();
|
|
defaultAAP.setProxyTargetClass(true);
|
|
return defaultAAP;
|
|
}
|
|
}
|