<!--使用shiro需要先導(dǎo)包-->
<dependencies>
  <!--shiro的核心包-->
  <dependency>
    <groupId>org.apache.shiro</groupId>
    <artifactId>shiro-core</artifactId>
    <version>1.4.0</version>
  </dependency>
  <!--日志包-->
  <dependency>
    <groupId>commons-logging</groupId>
    <artifactId>commons-logging</artifactId>
    <version>1.2</version>
  </dependency>
  <!--測(cè)試包-->
  <dependency>
    <groupId>junit</groupId>
    <artifactId>junit</artifactId>
    <version>4.9</version>
  </dependency>
</dependencies>

# ini文件里面放的就是咱們的用戶(hù)，角色，權(quán)限，資源

# -----------------------------------------------------------------------------
# users:用戶(hù)
#  root:用戶(hù)名 123456:密碼 admin:角色
# -----------------------------------------------------------------------------
[users]
root = 123456, admin
guest = guest, it

# -----------------------------------------------------------------------------
# roles:角色
#  admin = * :admin這個(gè)用戶(hù)擁有所有權(quán)限
#  it = employee:* :it這個(gè)角色擁有員工的所有權(quán)限
#  hr = employee:save :hr這個(gè)角色擁有員工添加權(quán)限
# -----------------------------------------------------------------------------
[roles]
admin = *
it = employee:*
hr = employee:save

@Test
public void testHello() throws Exception{
  //①.拿到權(quán)限管理對(duì)象
  /**
   * 讀取了shiro.ini的文件(隱藏了realm) -> 隱藏了iniRealm
   * SecurityManager:權(quán)限管理器，shiro的所有功能都放在里面
   */
  Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
  SecurityManager securityManager = factory.getInstance();
  //②.相當(dāng)于把SecurityManager放到了當(dāng)前上下文
  /**
   * 可以讓我們?cè)诋?dāng)前系統(tǒng)的任何位置都可以拿到SecurityManager對(duì)象
   */
  SecurityUtils.setSecurityManager(securityManager);
  //③.拿到當(dāng)前用戶(hù)(沒(méi)有登錄就是游客)
  Subject currentUser = SecurityUtils.getSubject();
  System.out.println("用戶(hù)是否登錄："+currentUser.isAuthenticated());

  //④.如果沒(méi)有登錄，讓他進(jìn)行登錄
  if(!currentUser.isAuthenticated()){
    //ctrl+alt+t :包含代碼
    try {
      //4.1 準(zhǔn)備令牌(對(duì)象) 用戶(hù)名密碼令牌
      UsernamePasswordToken token = new UsernamePasswordToken("guest","guest");
      //4.2 進(jìn)行登錄功能
      currentUser.login(token);
    } catch (UnknownAccountException e) {
      //Unknown(未知)Account(賬號(hào))Exception:用戶(hù)名不存在
      e.printStackTrace();
      System.out.println("哥，你是傻子嘛？");
    }catch (IncorrectCredentialsException e){
      //Incorrect(不正確)Credentials(憑證)Exception:密碼錯(cuò)誤
      e.printStackTrace();
      System.out.println("哥，密碼錯(cuò)誤了？");
    }catch (AuthenticationException e){
      //AuthenticationException:登錄中最大的那個(gè)異常
      e.printStackTrace();
      System.out.println("發(fā)生了一個(gè)神秘的錯(cuò)誤?。?！");
    }
  }
  System.out.println("用戶(hù)是否登錄："+currentUser.isAuthenticated());

  System.out.println("是否是管理員角色："+currentUser.hasRole("admin"));
  System.out.println("是否是IT角色："+currentUser.hasRole("it"));

  System.out.println("是否可以操作employee:save權(quán)限:"+currentUser.isPermitted("employee:save"));
  System.out.println("是否可以操作employee:index權(quán)限:"+currentUser.isPermitted("employee:index"));
  System.out.println("是否可以操作department:index權(quán)限:"+currentUser.isPermitted("department:index"));

  //⑤.還可以登出(注銷(xiāo))
  currentUser.logout();
  System.out.println("用戶(hù)是否登錄："+currentUser.isAuthenticated());
}