<!--整合Shiro安全框架-->
    <dependency>
      <groupId>org.apache.shiro</groupId>
      <artifactId>shiro-spring</artifactId>
      <version>1.4.0</version>
    </dependency>
    <!--集成jwt實現(xiàn)token認(rèn)證-->
    <dependency>
      <groupId>com.auth0</groupId>
      <artifactId>java-jwt</artifactId>
      <version>3.2.0</version>
    </dependency>

@Configuration
public class ShiroConfig {

  /**
   * ShiroFilterFactoryBean
   */
  @Bean
  public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager defaultWebSecurityManager) {
    ShiroFilterFactoryBean factoryBean = new ShiroFilterFactoryBean();
    //設(shè)置安全管理器
    factoryBean.setSecurityManager(defaultWebSecurityManager);
    // 添加shiro的內(nèi)置過濾器
    /*
     * anon：無需認(rèn)證就可以訪問
     * authc：必須認(rèn)證才能訪問
     * user：必須擁有 記住我 功能才能用
     * perms：擁有對某個資源的權(quán)限能訪問
     * role：擁有某個角色權(quán)限能訪問
     */
    Map<String, String> filterMap = new LinkedHashMap<>();
    // 放行不需要權(quán)限認(rèn)證的接口
    //放行登錄接口
    filterMap.put("/login/**", "anon");
    //放行用戶接口
    filterMap.put("/", "anon");       // 網(wǎng)站首頁
 
    //認(rèn)證管理員接口
    filterMap.put("/administrators/**", "authc");
    factoryBean.setFilterChainDefinitionMap(filterMap);
    // 設(shè)置無權(quán)限時跳轉(zhuǎn)的 url
    // 設(shè)置登錄的請求
    factoryBean.setLoginUrl("/login/toLogin");

    return factoryBean;
  }

  /**
   * 注入 DefaultWebSecurityManager
   */
  @Bean(name = "securityManager")
  public DefaultWebSecurityManager getDefaultWebSecurityManager(@Qualifier("customRealm") CustomRealm customRealm) {
    DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
    //關(guān)聯(lián)CustomRealm
    securityManager.setRealm(customRealm);
    return securityManager;
  }

  /**
   * 注入 securityManager
   */
  @Bean
  public CustomRealm customRealm() {
    return new CustomRealm();
  }

}

@Component
public class CustomRealm extends AuthorizingRealm {

  @Autowired
  AdministratorsService administratorsService;

  /*
   * 設(shè)置加密方式
   */
  {
    HashedCredentialsMatcher mather = new HashedCredentialsMatcher();
    // 加密方式
    mather.setHashAlgorithmName("md5");
    // 密碼進(jìn)行一次運(yùn)算
    mather.setHashIterations(512);
    this.setCredentialsMatcher(mather);
  }

  /**
   * 授權(quán)
   */
  @Override
  protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
    System.out.println("————授權(quán)————doGetAuthorizationInfo————");

    return null;
  }

  /**
   * 認(rèn)證
   */
  @Override
  protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
    System.out.println("————認(rèn)證————doGetAuthenticationInfo————");

    UsernamePasswordToken userToken = (UsernamePasswordToken) token;
    // 連接數(shù)據(jù)庫 查詢用戶數(shù)據(jù)
    QueryWrapper<Administrators> wrapper = new QueryWrapper<>();
    wrapper.eq("username", userToken.getUsername());
    Administrators administrators = administratorsService.getOne(wrapper);

    if (administrators == null) {
      return null; // 拋出異常 UnknownAccountException
    }
    // 密碼認(rèn)證，shiro做
    return new SimpleAuthenticationInfo("", administrators.getPassword(), "");
  }

}

//用戶名登錄
  @ApiOperation(value = "管理員登錄", notes = "用戶名登錄--不進(jìn)行攔截")
  @PostMapping("/doLogin")
  public String doLogin(@RequestParam("username") String username,
             @RequestParam("password") String password,
             HttpSession session,Model model) {
    // 獲取當(dāng)前的用戶
    Subject subject = SecurityUtils.getSubject();
    // 封裝用戶的登錄數(shù)據(jù)
    UsernamePasswordToken token = new UsernamePasswordToken(username, password);
    try {
      subject.login(token);
      //保存session會話 管理員名字
      session.setAttribute("adname", username);
      return "admin";
    } catch (UnknownAccountException e) {
      model.addAttribute("usererror", "用戶名錯誤！請重新輸入。");
      return "login";
    } catch (IncorrectCredentialsException ice) {
      model.addAttribute("pwerror", "密碼錯誤！請重新輸入。");
      return "login";
    }
  }