diff --git a/len-blog/pom.xml b/len-blog/pom.xml index 9dcdbc6..6ab784d 100644 --- a/len-blog/pom.xml +++ b/len-blog/pom.xml @@ -28,33 +28,4 @@ 4.12 - \ No newline at end of file diff --git a/len-blog/src/main/java/com/len/controller/LabelController.java b/len-blog/src/main/java/com/len/controller/LabelController.java index 818f0bb..e81732f 100644 --- a/len-blog/src/main/java/com/len/controller/LabelController.java +++ b/len-blog/src/main/java/com/len/controller/LabelController.java @@ -6,6 +6,8 @@ import com.alibaba.fastjson.JSONObject; import com.len.base.BaseController; import com.len.entity.BlogLabel; import com.len.service.BlogLabelService; +import org.apache.shiro.authz.annotation.RequiresPermissions; +import org.apache.shiro.authz.annotation.RequiresRoles; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.RequestMapping; @@ -35,6 +37,7 @@ public class LabelController extends BaseController { * @return */ @GetMapping("/getLabel") + @RequiresRoles("admin") public JSONArray label() { List blogLabels = blogLabelService.selectAll(); JSONArray array = JSONArray.parseArray(JSON.toJSONString(blogLabels)); diff --git a/len-blog/src/main/java/com/len/controller/SignController.java b/len-blog/src/main/java/com/len/controller/SignController.java index a287406..72d4d50 100644 --- a/len-blog/src/main/java/com/len/controller/SignController.java +++ b/len-blog/src/main/java/com/len/controller/SignController.java @@ -1,15 +1,24 @@ package com.len.controller; +import com.len.entity.SysRole; +import com.len.entity.SysRoleUser; import com.len.entity.SysUser; +import com.len.service.RoleService; +import com.len.service.RoleUserService; import com.len.service.SysUserService; import com.len.util.JWTUtil; +import com.len.util.JsonUtil; import com.len.util.Md5Util; -import org.apache.shiro.authz.UnauthorizedException; +import io.swagger.annotations.ApiOperation; +import org.apache.shiro.authc.UnknownAccountException; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.PostMapping; import org.springframework.web.bind.annotation.RequestMapping; -import org.springframework.web.bind.annotation.RequestParam; import org.springframework.web.bind.annotation.RestController; +import tk.mybatis.mapper.entity.Condition; + +import java.util.List; +import java.util.stream.Collectors; /** * @author zhuxiaomeng @@ -17,23 +26,48 @@ import org.springframework.web.bind.annotation.RestController; * @email 154040976@qq.com */ @RestController -@RequestMapping("/blog") +@RequestMapping("/") public class SignController { @Autowired private SysUserService sysUserService; - @PostMapping("/login") - public String login(@RequestParam("username") String username, - @RequestParam("password") String password) { - SysUser user=new SysUser(); - user.setUsername(username); - SysUser sysUser=sysUserService.selectOne(user); - String pass = Md5Util.getMD5(password, username); - if (sysUser.getPassword().equals(pass)) { - return JWTUtil.sign(username, password); - } else { - throw new UnauthorizedException(); + @Autowired + private RoleService roleService; + + @Autowired + private RoleUserService roleUserService; + + @ApiOperation(value = "/blogLogin", httpMethod = "POST", notes = "登录method") + @PostMapping(value = "/blogLogin") + public JsonUtil blogLogin(SysUser user) { + String pass = user.getPassword(); + user.setPassword(null); + SysUser sysUser = sysUserService.selectOne(user); + if (sysUser == null) { + throw new UnknownAccountException("用户名或密码错误"); } + String md5 = Md5Util.getMD5(pass, sysUser.getUsername()); + if (!md5.equals(sysUser.getPassword())) { + throw new UnknownAccountException("用户名或密码错误"); + } + + Condition condition = new Condition(SysRoleUser.class); + condition.createCriteria().andEqualTo("userId", user.getId()); + List sysRoleUsers = roleUserService.selectByExample(condition); + List roleList = sysRoleUsers + .stream() + .map(SysRoleUser::getRoleId) + .collect(Collectors.toList()); + + condition = new Condition(SysRole.class); + condition.createCriteria().andIn("id", roleList); + List sysRoles = roleService.selectByExample(condition); + List roleNames = sysRoles + .stream() + .map(SysRole::getRoleName) + .collect(Collectors.toList()); + + return new JsonUtil(true, JWTUtil.sign(sysUser.getUsername(), roleNames, sysUser.getPassword()), 200); } } diff --git a/len-blog/src/main/java/com/len/core/BlogRealm.java b/len-blog/src/main/java/com/len/core/BlogRealm.java new file mode 100644 index 0000000..1739e90 --- /dev/null +++ b/len-blog/src/main/java/com/len/core/BlogRealm.java @@ -0,0 +1,98 @@ +package com.len.core; + +import com.len.base.CurrentMenu; +import com.len.base.CurrentRole; +import com.len.base.CurrentUser; +import com.len.core.shiro.ShiroUtil; +import com.len.entity.SysUser; +import com.len.service.MenuService; +import com.len.service.RoleMenuService; +import com.len.service.RoleUserService; +import com.len.service.SysUserService; +import com.len.util.JWTUtil; +import com.len.util.JwtToken; +import org.apache.commons.lang3.StringUtils; +import org.apache.shiro.authc.*; +import org.apache.shiro.authz.AuthorizationInfo; +import org.apache.shiro.authz.SimpleAuthorizationInfo; +import org.apache.shiro.realm.AuthorizingRealm; +import org.apache.shiro.subject.PrincipalCollection; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.stereotype.Service; + +/** + * @author zhuxiaomeng + * @date 2017/12/4. + * @email 154040976@qq.com + */ +@Service +public class BlogRealm extends AuthorizingRealm { + + @Autowired + private SysUserService userService; + + @Autowired + private MenuService menuService; + + @Autowired + private RoleUserService roleUserService; + + @Autowired + private RoleMenuService roleMenuService; + + + @Override + public boolean supports(AuthenticationToken token) { + return token instanceof JwtToken; + } + + /** + * 获取认证 + * + * @param principalCollection + * @return + */ + @Override + protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { + SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); + String name = (String) principalCollection.getPrimaryPrincipal(); + JWTUtil.getUsername(name); + //根据用户获取角色 根据角色获取所有按钮权限 + CurrentUser cUser = (CurrentUser) ShiroUtil.getSession().getAttribute("curentUser"); + for (CurrentRole cRole : cUser.getCurrentRoleList()) { + info.addRole(cRole.getId()); + } + for (CurrentMenu cMenu : cUser.getCurrentMenuList()) { + if (!StringUtils.isEmpty(cMenu.getPermission())) { + info.addStringPermission(cMenu.getPermission()); + } + } + return info; + } + + /** + * 获取授权 + * + * @param authenticationToken + * @return + * @throws AuthenticationException + */ + @Override + protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) + throws AuthenticationException { + JwtToken token = (JwtToken) authenticationToken; + String username = JWTUtil.getUsername(token.getToken()); + if (StringUtils.isEmpty(username)) { + throw new UnknownAccountException("令牌无效"); + } + SysUser s = userService.login(username); + if (s == null) { + throw new UnknownAccountException("用户名或密码错误"); + } + if (!JWTUtil.verify(token.getToken(), username, s.getPassword())) { + throw new UnknownAccountException("用户名或密码错误"); + } + + return new SimpleAuthenticationInfo(token.getToken(), token.getToken(), getName()); + } +} diff --git a/len-blog/src/main/java/com/len/core/BlogRetryLimitCredentialsMatcher.java b/len-blog/src/main/java/com/len/core/BlogRetryLimitCredentialsMatcher.java new file mode 100644 index 0000000..98aa5e6 --- /dev/null +++ b/len-blog/src/main/java/com/len/core/BlogRetryLimitCredentialsMatcher.java @@ -0,0 +1,72 @@ +package com.len.core; + +import cn.hutool.core.util.StrUtil; +import com.len.util.CustomUsernamePasswordToken; +import com.len.util.JWTUtil; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.apache.shiro.authc.AuthenticationInfo; +import org.apache.shiro.authc.AuthenticationToken; +import org.apache.shiro.authc.ExcessiveAttemptsException; +import org.apache.shiro.authc.credential.HashedCredentialsMatcher; +import org.apache.shiro.cache.Cache; +import org.apache.shiro.cache.CacheManager; + +import java.util.concurrent.atomic.AtomicInteger; + +/** + * 验证器，增加了登录次数校验功能 + * 限制尝试登陆次数,防止暴力破解 + */ +@Slf4j +public class BlogRetryLimitCredentialsMatcher extends HashedCredentialsMatcher { + + /* private Cache loginRetryCache; + + private int maxRetryCount = 5; + + *//*public void setMaxRetryCount(int maxRetryCount) { + this.maxRetryCount = maxRetryCount; + } + public BlogRetryLimitCredentialsMatcher(){ + }*//* + + *//** + * @param cacheManager + * @param maxRetryCount 最大尝试次数 + *//* + public BlogRetryLimitCredentialsMatcher(CacheManager cacheManager, int maxRetryCount) { + this.maxRetryCount = maxRetryCount; + this.loginRetryCache = cacheManager.getCache("loginRetryCache"); + } + + public BlogRetryLimitCredentialsMatcher(CacheManager cacheManager) { + this(cacheManager, 5); + } + + @Override + public boolean doCredentialsMatch(AuthenticationToken token, AuthenticationInfo info) { + CustomUsernamePasswordToken token1 = (CustomUsernamePasswordToken) token; + String username = token1.getUsername(); + if (StringUtils.isEmpty(username) && !StringUtils.isEmpty(token1.getToken())) { + username = JWTUtil.getUsername(token1.getToken()); + } + //retry count + 1 + AtomicInteger retryCount = loginRetryCache.get(username) == null + ? new AtomicInteger(0) : loginRetryCache.get(username); + log.info("retryCount:{}, username:{}", retryCount, username); + if (retryCount.incrementAndGet() > this.maxRetryCount) { + log.warn("username: {} tried to login more than {} times in perid", username, this.maxRetryCount); + throw new ExcessiveAttemptsException(StrUtil.format("username: {} tried to login more than {} times in perid", username, this.maxRetryCount)); + } + boolean matches = super.doCredentialsMatch(token1, info); + + if (matches) { + loginRetryCache.remove(username); + } else { + loginRetryCache.put(username, retryCount); + log.info(String.valueOf(retryCount.get())); + } + return matches; + }*/ +} \ No newline at end of file diff --git a/len-blog/src/main/java/com/len/core/MyBasicHttpAuthenticationFilter.java b/len-blog/src/main/java/com/len/core/MyBasicHttpAuthenticationFilter.java new file mode 100644 index 0000000..4e0fd91 --- /dev/null +++ b/len-blog/src/main/java/com/len/core/MyBasicHttpAuthenticationFilter.java @@ -0,0 +1,47 @@ +package com.len.core; + +import com.len.core.exception.UnauthorizedException; +import com.len.util.JwtToken; +import org.apache.shiro.web.filter.authc.BasicHttpAuthenticationFilter; + +import javax.servlet.ServletRequest; +import javax.servlet.ServletResponse; +import javax.servlet.http.HttpServletRequest; + +/** + * @author zhuxiaomeng + * @date 2018/8/19. + * @email 154040976@qq.com + */ +public class MyBasicHttpAuthenticationFilter extends BasicHttpAuthenticationFilter { + + @Override + protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) { + if (isLoginAttempt(request, response)) { + try { + executeLogin(request, response); + return true; + } catch (Exception e) { + throw new UnauthorizedException(e.getMessage()); + } + } else { + throw new UnauthorizedException("禁止访问"); + } + } + + @Override + protected boolean executeLogin(ServletRequest request, ServletResponse response) throws Exception { + HttpServletRequest httpServletRequest = (HttpServletRequest) request; + String token = httpServletRequest.getHeader("Authorization"); + JwtToken jwtToken = new JwtToken(token, "BlogLogin"); + getSubject(request, response).login(jwtToken); + return true; + } + + @Override + protected boolean isLoginAttempt(ServletRequest request, ServletResponse response) { + HttpServletRequest req = (HttpServletRequest) request; + String authorization = req.getHeader("Authorization"); + return authorization != null; + } +} diff --git a/len-blog/src/main/java/com/len/core/exception/UnauthorizedException.java b/len-blog/src/main/java/com/len/core/exception/UnauthorizedException.java new file mode 100644 index 0000000..930b9aa --- /dev/null +++ b/len-blog/src/main/java/com/len/core/exception/UnauthorizedException.java @@ -0,0 +1,13 @@ +package com.len.core.exception; + +/** + * @author zhuxiaomeng + * @date 2018/8/19. + * @email 154040976@qq.com + * 未授权异常 + */ +public class UnauthorizedException extends RuntimeException { + public UnauthorizedException(String msg) { + super(msg); + } +} diff --git a/len-core/src/main/java/com/len/base/BaseMapper.java b/len-core/src/main/java/com/len/base/BaseMapper.java index 4fc311c..0b58d18 100644 --- a/len-core/src/main/java/com/len/base/BaseMapper.java +++ b/len-core/src/main/java/com/len/base/BaseMapper.java @@ -12,7 +12,7 @@ import java.util.List; * @email 154040976@qq.com * mapper封装 crud */ -public interface BaseMapper extends tk.mybatis.mapper.common.BaseMapper, MySqlMapper, IdsMapper { +public interface BaseMapper extends tk.mybatis.mapper.common.Mapper, MySqlMapper, IdsMapper { /* *//** * 根据id删除 diff --git a/len-core/src/main/java/com/len/base/BaseService.java b/len-core/src/main/java/com/len/base/BaseService.java index 508e8a2..d649f89 100644 --- a/len-core/src/main/java/com/len/base/BaseService.java +++ b/len-core/src/main/java/com/len/base/BaseService.java @@ -1,8 +1,10 @@ package com.len.base; import com.len.util.ReType; +import org.apache.ibatis.session.RowBounds; import java.io.Serializable; +import java.util.List; /** * @author zhuxiaomeng @@ -10,54 +12,60 @@ import java.io.Serializable; * @email 154040976@qq.com * 通用service层 */ -public interface BaseService extends BaseMapper { - /** - * 根据id删除 - * @param id - * @return - *//* - int deleteByPrimaryKey(E id); +public interface BaseService { - *//** - * 插入 - * @param record - * @return - *//* - int insert(T record); + public List select(T t); - *//** - *插入非空字段 - * @param record - * @return - *//* - int insertSelective(T record); + public List selectAll(); - *//** - * 根据id查询 - * @param id - * @return - *//* - T selectByPrimaryKey(E id); + public List selectByIds(String ids); - *//** - * 更新非空数据 - * @param record - * @return - *//* - int updateByPrimaryKeySelective(T record); + public int selectCount(T t); - */ + public int deleteByPrimaryKey(E id); - /** - * 更新 - * - * @param record - * @return - *//* - int updateByPrimaryKey(T record); + public int insert(T record); + public int insertSelective(T record); + + public int updateByPrimaryKeySelective(T record); + + public int updateByPrimaryKey(T record); + + public List selectListByPage(T record); + + public int deleteByPrimaryKey(Object o); + + public int delete(T t); + + public boolean existsWithPrimaryKey(Object o); + + public T selectByPrimaryKey(Object o); + + public T selectOne(T t); + + public int deleteByIds(String s); + + public int insertList(List list); + + public int insertUseGeneratedKeys(T t); + + public int deleteByExample(Object o); + + public List selectByExample(Object o); + + public int selectCountByExample(Object o); + + public T selectOneByExample(Object o); + + public int updateByExample(T t, Object o); + + public int updateByExampleSelective(T t, Object o); + + public List selectByExampleAndRowBounds(Object o, RowBounds rowBounds); + + public List selectByRowBounds(T t, RowBounds rowBounds); - List selectListByPage(T record);*/ public ReType show(T t, int page, int limit); diff --git a/len-core/src/main/java/com/len/util/CustomUsernamePasswordToken.java b/len-core/src/main/java/com/len/util/CustomUsernamePasswordToken.java index 904c486..db6728b 100644 --- a/len-core/src/main/java/com/len/util/CustomUsernamePasswordToken.java +++ b/len-core/src/main/java/com/len/util/CustomUsernamePasswordToken.java @@ -11,11 +11,14 @@ public class CustomUsernamePasswordToken extends UsernamePasswordToken { private String type; + + public CustomUsernamePasswordToken(final String username, final String password, String loginType) { super(username,password); this.type = loginType; } + public String getType() { return type; } diff --git a/len-core/src/main/java/com/len/util/JWTUtil.java b/len-core/src/main/java/com/len/util/JWTUtil.java index 1263604..621a4c7 100644 --- a/len-core/src/main/java/com/len/util/JWTUtil.java +++ b/len-core/src/main/java/com/len/util/JWTUtil.java @@ -7,6 +7,7 @@ import com.auth0.jwt.exceptions.JWTDecodeException; import com.auth0.jwt.interfaces.DecodedJWT; import java.util.Date; +import java.util.List; public class JWTUtil { @@ -34,8 +35,6 @@ public class JWTUtil { } /** - * 获得token中的信息无需secret解密也能获得 - * * @return token中包含的用户名 */ public static String getUsername(String token) { @@ -47,6 +46,21 @@ public class JWTUtil { } } + /** + * 获取角色组 + * + * @param token + * @return + */ + public static String[] getRoles(String token) { + try { + DecodedJWT jwt = JWT.decode(token); + return jwt.getClaim("roles").asArray(String.class); + } catch (JWTDecodeException e) { + return null; + } + } + /** * 生成签名,5min后过期 * @@ -54,12 +68,16 @@ public class JWTUtil { * @param secret 用户的密码 * @return 加密的token */ - public static String sign(String username, String secret) { + public static String sign(String username, List roles, String secret) { Date date = new Date(System.currentTimeMillis() + EXPIRE_TIME); Algorithm algorithm = Algorithm.HMAC256(secret); + String[] roleArr = new String[roles.size()]; + roleArr = roles.toArray(roleArr); // 附带username信息 return JWT.create() .withClaim("username", username) +// .withClaim("roles", role) + .withArrayClaim("roles", roleArr) .withExpiresAt(date) .sign(algorithm); } diff --git a/len-core/src/main/java/com/len/util/JsonUtil.java b/len-core/src/main/java/com/len/util/JsonUtil.java index 2365499..427c8bf 100644 --- a/len-core/src/main/java/com/len/util/JsonUtil.java +++ b/len-core/src/main/java/com/len/util/JsonUtil.java @@ -2,6 +2,7 @@ package com.len.util; import com.alibaba.fastjson.JSONObject; +import lombok.Data; /** * @author zhuxiaomeng @@ -9,51 +10,45 @@ import com.alibaba.fastjson.JSONObject; * @email 154040976@qq.com * ajax 回执 */ +@Data public class JsonUtil { - //默认成功 - private boolean flag=true; - private String msg; - private JSONObject josnObj; + //默认成功 + private boolean flag = true; + private String msg; + private JSONObject josnObj; + private Integer status; - public boolean isFlag() { - return flag; - } + public boolean isFlag() { + return flag; + } - public void setFlag(boolean flag) { - this.flag = flag; - } + public void setFlag(boolean flag) { + this.flag = flag; + } - public String getMsg() { - return msg; - } + public JsonUtil() { + } - public void setMsg(String msg) { - this.msg = msg; - } + public JsonUtil(boolean flag, String msg) { + this.flag = flag; + this.msg = msg; + } - public JSONObject getJosnObj() { - return josnObj; - } + public JsonUtil(boolean flag, String msg, Integer status) { + this.flag = flag; + this.msg = msg; + this.status = status; + } - public void setJosnObj(JSONObject josnObj) { - this.josnObj = josnObj; - } + /** + * restful 返回 + */ + public static JsonUtil error(String msg) { + return new JsonUtil(false, msg); + } - - public JsonUtil() { - } - - public JsonUtil(boolean flag, String msg) { - this.flag = flag; - this.msg = msg; - } - - /**restful 返回*/ - public static JsonUtil error(String msg){ - return new JsonUtil(false,msg); - } - public static JsonUtil sucess(String msg){ - return new JsonUtil(true,msg); - } + public static JsonUtil sucess(String msg) { + return new JsonUtil(true, msg); + } } diff --git a/len-core/src/main/java/com/len/util/JwtToken.java b/len-core/src/main/java/com/len/util/JwtToken.java new file mode 100644 index 0000000..21bda22 --- /dev/null +++ b/len-core/src/main/java/com/len/util/JwtToken.java @@ -0,0 +1,45 @@ +package com.len.util; + +import org.apache.shiro.authc.AuthenticationToken; + +/** + * @author zhuxiaomeng + * @date 2018/8/19. + * @email 154040976@qq.com + */ +public class JwtToken implements AuthenticationToken { + + private String token; + private String type; + + public JwtToken(String token,String type) { + this.token = token; + this.type=type; + } + + @Override + public Object getPrincipal() { + return token; + } + + @Override + public Object getCredentials() { + return token; + } + + public String getToken() { + return token; + } + + public void setToken(String token) { + this.token = token; + } + + public String getType() { + return type; + } + + public void setType(String type) { + this.type = type; + } +} diff --git a/len-sys/src/main/java/com/len/controller/LoginController.java b/len-sys/src/main/java/com/len/controller/LoginController.java index 30a2d41..817e94f 100644 --- a/len-sys/src/main/java/com/len/controller/LoginController.java +++ b/len-sys/src/main/java/com/len/controller/LoginController.java @@ -109,34 +109,6 @@ public class LoginController { return "/login"; } - @ApiOperation(value = "/blogLogin", httpMethod = "POST", notes = "登录method") - @PostMapping(value = "/blogLogin") - public String blogLogin(SysUser user, Model model, String rememberMe, HttpServletRequest request) { - /*String codeMsg = (String) request.getAttribute("shiroLoginFailure"); - if ("code.error".equals(codeMsg)) { - model.addAttribute("message", "验证码错误"); - return "/login"; - }*/ - CustomUsernamePasswordToken token = new CustomUsernamePasswordToken(user.getUsername().trim(), - user.getPassword(), "BlogLogin"); - Subject subject = ShiroUtil.getSubject(); - String msg = null; - try { - subject.login(token); - if (subject.isAuthenticated()) { - return "redirect:/main"; - } - } catch (UnknownAccountException | IncorrectCredentialsException e) { - msg = "用户名/密码错误"; - } catch (ExcessiveAttemptsException e) { - msg = "登录失败多次，账户锁定10分钟"; - } - if (msg != null) { - model.addAttribute("message", msg); - } - return "/login"; - } - @GetMapping("/main") public String main() { return "main/main"; diff --git a/len-sys/src/main/java/com/len/core/shiro/BlogRealm.java b/len-sys/src/main/java/com/len/core/shiro/BlogRealm.java deleted file mode 100644 index dee3caa..0000000 --- a/len-sys/src/main/java/com/len/core/shiro/BlogRealm.java +++ /dev/null @@ -1,128 +0,0 @@ -package com.len.core.shiro; - -import com.alibaba.fastjson.JSONArray; -import com.len.base.CurrentMenu; -import com.len.base.CurrentRole; -import com.len.base.CurrentUser; -import com.len.entity.SysMenu; -import com.len.entity.SysRole; -import com.len.entity.SysUser; -import com.len.service.MenuService; -import com.len.service.RoleMenuService; -import com.len.service.RoleUserService; -import com.len.service.SysUserService; -import org.apache.commons.lang3.StringUtils; -import org.apache.shiro.authc.*; -import org.apache.shiro.authz.AuthorizationInfo; -import org.apache.shiro.authz.SimpleAuthorizationInfo; -import org.apache.shiro.realm.AuthorizingRealm; -import org.apache.shiro.realm.Realm; -import org.apache.shiro.session.Session; -import org.apache.shiro.subject.PrincipalCollection; -import org.apache.shiro.subject.Subject; -import org.apache.shiro.util.ByteSource; -import org.springframework.beans.factory.annotation.Autowired; -import org.springframework.stereotype.Service; - -import java.util.ArrayList; -import java.util.HashSet; -import java.util.List; - -/** - * @author zhuxiaomeng - * @date 2017/12/4. - * @email 154040976@qq.com - */ -@Service -public class BlogRealm extends AuthorizingRealm { - - @Autowired - private SysUserService userService; - - @Autowired - private MenuService menuService; - - @Autowired - private RoleUserService roleUserService; - - @Autowired - private RoleMenuService roleMenuService; - - /* @Override - public boolean supports(AuthenticationToken token) { - return super.supports(token); - }*/ - - /** - * 获取认证 - * @param principalCollection - * @return - */ - @Override - protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { - SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); - String name= (String) principalCollection.getPrimaryPrincipal(); - //根据用户获取角色 根据角色获取所有按钮权限 - CurrentUser cUser= (CurrentUser) ShiroUtil.getSession().getAttribute("curentUser"); - for(CurrentRole cRole:cUser.getCurrentRoleList()){ - info.addRole(cRole.getId()); - } - for(CurrentMenu cMenu:cUser.getCurrentMenuList()){ - if(!StringUtils.isEmpty(cMenu.getPermission())) - info.addStringPermission(cMenu.getPermission()); - } - return info; - } - - /** - * 获取授权 - * @param authenticationToken - * @return - * @throws AuthenticationException - */ - @Override - protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) - throws AuthenticationException { - UsernamePasswordToken upToken = (UsernamePasswordToken) authenticationToken; - String name=upToken.getUsername(); - String username=(String)authenticationToken.getPrincipal(); - SysUser s=null; - try { - s = userService.login(username); - }catch (Exception e){ - e.printStackTrace(); - } - if(s==null){ - throw new UnknownAccountException("账户密码不正确"); - }else{ - CurrentUser currentUser=new CurrentUser(s.getId(),s.getUsername(),s.getAge(),s.getEmail(),s.getPhoto(),s.getRealName()); - Subject subject = ShiroUtil.getSubject(); - /**角色权限封装进去*/ - //根据用户获取菜单 - List menuList=new ArrayList<>(new HashSet<>(menuService.getUserMenu(s.getId()))); - JSONArray json=menuService.getMenuJsonByUser(menuList); - Session session= subject.getSession(); - session.setAttribute("menu",json); - CurrentMenu currentMenu=null; - List currentMenuList=new ArrayList<>(); - List roleList=new ArrayList<>(); - for(SysMenu m:menuList){ - currentMenu=new CurrentMenu(m.getId(),m.getName(),m.getPId(),m.getUrl(),m.getOrderNum(),m.getIcon(),m.getPermission(),m.getMenuType(),m.getNum()); - currentMenuList.add(currentMenu); - roleList.addAll(m.getRoleList()); - } - roleList= new ArrayList<>(new HashSet<>(roleList)); - List currentRoleList=new ArrayList<>(); - CurrentRole role=null; - for(SysRole r:roleList){ - role=new CurrentRole(r.getId(),r.getRoleName(),r.getRemark()); - currentRoleList.add(role); - } - currentUser.setCurrentRoleList(currentRoleList); - currentUser.setCurrentMenuList(currentMenuList); - session.setAttribute("curentUser",currentUser); - } - ByteSource byteSource=ByteSource.Util.bytes(username); - return new SimpleAuthenticationInfo(username,s.getPassword(), byteSource, getName()); - } -} diff --git a/len-sys/src/main/java/com/len/core/shiro/LoginRealm.java b/len-sys/src/main/java/com/len/core/shiro/LoginRealm.java index 4cf758d..8605299 100644 --- a/len-sys/src/main/java/com/len/core/shiro/LoginRealm.java +++ b/len-sys/src/main/java/com/len/core/shiro/LoginRealm.java @@ -11,21 +11,12 @@ import com.len.service.MenuService; import com.len.service.RoleMenuService; import com.len.service.RoleUserService; import com.len.service.SysUserService; -import java.util.ArrayList; -import java.util.HashSet; -import java.util.List; +import com.len.util.JWTUtil; import org.apache.commons.lang3.StringUtils; -import org.apache.shiro.SecurityUtils; -import org.apache.shiro.authc.AuthenticationException; -import org.apache.shiro.authc.AuthenticationInfo; -import org.apache.shiro.authc.AuthenticationToken; -import org.apache.shiro.authc.SimpleAuthenticationInfo; -import org.apache.shiro.authc.UnknownAccountException; -import org.apache.shiro.authc.UsernamePasswordToken; +import org.apache.shiro.authc.*; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; -import org.apache.shiro.realm.Realm; import org.apache.shiro.session.Session; import org.apache.shiro.subject.PrincipalCollection; import org.apache.shiro.subject.Subject; @@ -33,101 +24,115 @@ import org.apache.shiro.util.ByteSource; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Service; +import java.util.ArrayList; +import java.util.HashSet; +import java.util.List; +import java.util.Set; + /** * @author zhuxiaomeng * @date 2017/12/4. * @email 154040976@qq.com */ @Service -public class LoginRealm extends AuthorizingRealm { +public class LoginRealm extends AuthorizingRealm { - @Autowired - private SysUserService userService; + @Autowired + private SysUserService userService; - @Autowired - private MenuService menuService; + @Autowired + private MenuService menuService; - @Autowired - private RoleUserService roleUserService; + @Autowired + private RoleUserService roleUserService; - @Autowired - private RoleMenuService roleMenuService; + @Autowired + private RoleMenuService roleMenuService; - /* @Override - public boolean supports(AuthenticationToken token) { - return super.supports(token); - }*/ - /** - * 获取认证 - * @param principalCollection - * @return - */ - @Override - protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { - SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); - String name= (String) principalCollection.getPrimaryPrincipal(); - //根据用户获取角色 根据角色获取所有按钮权限 - CurrentUser cUser= (CurrentUser) ShiroUtil.getSession().getAttribute("curentUser"); - for(CurrentRole cRole:cUser.getCurrentRoleList()){ - info.addRole(cRole.getId()); - } - for(CurrentMenu cMenu:cUser.getCurrentMenuList()){ - if(!StringUtils.isEmpty(cMenu.getPermission())) - info.addStringPermission(cMenu.getPermission()); - } - return info; - } + /** + * 获取授权 + * + * @param principalCollection + * @return + */ + @Override + protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) { + SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); + String name = (String) principalCollection.getPrimaryPrincipal(); + Set realmNames = principalCollection.getRealmNames(); + List realmNameList = new ArrayList<>(realmNames); + if ("BlogLogin".equals(realmNameList.get(0))) { + String[] roles = JWTUtil.getRoles(name); + assert roles != null; + for (String role : roles) { + info.addRole(role); + } + } else { + //根据用户获取角色 根据角色获取所有按钮权限 + CurrentUser cUser = (CurrentUser) ShiroUtil.getSession().getAttribute("curentUser"); + for (CurrentRole cRole : cUser.getCurrentRoleList()) { + info.addRole(cRole.getId()); + } + for (CurrentMenu cMenu : cUser.getCurrentMenuList()) { + if (!StringUtils.isEmpty(cMenu.getPermission())){ + info.addStringPermission(cMenu.getPermission()); + } + } + } - /** - * 获取授权 - * @param authenticationToken - * @return - * @throws AuthenticationException - */ - @Override - protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) - throws AuthenticationException { - UsernamePasswordToken upToken = (UsernamePasswordToken) authenticationToken; - String name=upToken.getUsername(); - String username=(String)authenticationToken.getPrincipal(); - SysUser s=null; - try { - s = userService.login(username); - }catch (Exception e){ - e.printStackTrace(); + return info; } - if(s==null){ - throw new UnknownAccountException("账户密码不正确"); - }else{ - CurrentUser currentUser=new CurrentUser(s.getId(),s.getUsername(),s.getAge(),s.getEmail(),s.getPhoto(),s.getRealName()); - Subject subject = ShiroUtil.getSubject(); - /**角色权限封装进去*/ - //根据用户获取菜单 - List menuList=new ArrayList<>(new HashSet<>(menuService.getUserMenu(s.getId()))); - JSONArray json=menuService.getMenuJsonByUser(menuList); - Session session= subject.getSession(); - session.setAttribute("menu",json); - CurrentMenu currentMenu=null; - List currentMenuList=new ArrayList<>(); - List roleList=new ArrayList<>(); - for(SysMenu m:menuList){ - currentMenu=new CurrentMenu(m.getId(),m.getName(),m.getPId(),m.getUrl(),m.getOrderNum(),m.getIcon(),m.getPermission(),m.getMenuType(),m.getNum()); - currentMenuList.add(currentMenu); - roleList.addAll(m.getRoleList()); - } - roleList= new ArrayList<>(new HashSet<>(roleList)); - List currentRoleList=new ArrayList<>(); - CurrentRole role=null; - for(SysRole r:roleList){ - role=new CurrentRole(r.getId(),r.getRoleName(),r.getRemark()); - currentRoleList.add(role); - } - currentUser.setCurrentRoleList(currentRoleList); - currentUser.setCurrentMenuList(currentMenuList); - session.setAttribute("curentUser",currentUser); + + /** + * 获取认证 + * + * @param authenticationToken + * @return + * @throws AuthenticationException + */ + @Override + protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) + throws AuthenticationException { + UsernamePasswordToken upToken = (UsernamePasswordToken) authenticationToken; + String username = (String) authenticationToken.getPrincipal(); + SysUser s = null; + try { + s = userService.login(username); + } catch (Exception e) { + e.printStackTrace(); + } + if (s == null) { + throw new UnknownAccountException("账户密码不正确"); + } else { + CurrentUser currentUser = new CurrentUser(s.getId(), s.getUsername(), s.getAge(), s.getEmail(), s.getPhoto(), s.getRealName()); + Subject subject = ShiroUtil.getSubject(); + /**角色权限封装进去*/ + //根据用户获取菜单 + List menuList = new ArrayList<>(new HashSet<>(menuService.getUserMenu(s.getId()))); + JSONArray json = menuService.getMenuJsonByUser(menuList); + Session session = subject.getSession(); + session.setAttribute("menu", json); + CurrentMenu currentMenu = null; + List currentMenuList = new ArrayList<>(); + List roleList = new ArrayList<>(); + for (SysMenu m : menuList) { + currentMenu = new CurrentMenu(m.getId(), m.getName(), m.getPId(), m.getUrl(), m.getOrderNum(), m.getIcon(), m.getPermission(), m.getMenuType(), m.getNum()); + currentMenuList.add(currentMenu); + roleList.addAll(m.getRoleList()); + } + roleList = new ArrayList<>(new HashSet<>(roleList)); + List currentRoleList = new ArrayList<>(); + CurrentRole role = null; + for (SysRole r : roleList) { + role = new CurrentRole(r.getId(), r.getRoleName(), r.getRemark()); + currentRoleList.add(role); + } + currentUser.setCurrentRoleList(currentRoleList); + currentUser.setCurrentMenuList(currentMenuList); + session.setAttribute("curentUser", currentUser); + } + ByteSource byteSource = ByteSource.Util.bytes(username); + return new SimpleAuthenticationInfo(username, s.getPassword(), byteSource, getName()); } - ByteSource byteSource=ByteSource.Util.bytes(username); - return new SimpleAuthenticationInfo(username,s.getPassword(), byteSource, getName()); - } } diff --git a/len-sys/src/main/java/com/len/service/RoleService.java b/len-sys/src/main/java/com/len/service/RoleService.java index 18cc423..8597ddb 100644 --- a/len-sys/src/main/java/com/len/service/RoleService.java +++ b/len-sys/src/main/java/com/len/service/RoleService.java @@ -12,6 +12,7 @@ import java.util.List; public interface RoleService extends BaseService { + @Override int deleteByPrimaryKey(String id); @Override diff --git a/len-sys/src/main/java/com/len/service/RoleUserService.java b/len-sys/src/main/java/com/len/service/RoleUserService.java index c7bc0ef..1fd2cc8 100644 --- a/len-sys/src/main/java/com/len/service/RoleUserService.java +++ b/len-sys/src/main/java/com/len/service/RoleUserService.java @@ -13,6 +13,7 @@ public interface RoleUserService extends BaseService{ int deleteByPrimaryKey(SysRoleUser sysRoleUser); + @Override int insert(SysRoleUser sysRoleUser); int selectCountByCondition(SysRoleUser sysRoleUser); diff --git a/len-sys/src/main/java/com/len/service/SysUserService.java b/len-sys/src/main/java/com/len/service/SysUserService.java index 1cf3b85..c2b44be 100644 --- a/len-sys/src/main/java/com/len/service/SysUserService.java +++ b/len-sys/src/main/java/com/len/service/SysUserService.java @@ -47,6 +47,7 @@ public interface SysUserService extends BaseService { int checkUser(String username); + @Override int updateByPrimaryKey(SysUser sysUser); diff --git a/len-web/src/main/java/com/len/config/MyModularRealmAuthenticator.java b/len-web/src/main/java/com/len/config/MyModularRealmAuthenticator.java index 240e95b..3876aca 100644 --- a/len-web/src/main/java/com/len/config/MyModularRealmAuthenticator.java +++ b/len-web/src/main/java/com/len/config/MyModularRealmAuthenticator.java @@ -1,12 +1,13 @@ package com.len.config; import com.len.util.CustomUsernamePasswordToken; +import com.len.util.JwtToken; +import org.apache.commons.lang3.StringUtils; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.AuthenticationInfo; import org.apache.shiro.authc.AuthenticationToken; import org.apache.shiro.authc.pam.ModularRealmAuthenticator; import org.apache.shiro.realm.Realm; -import org.springframework.context.annotation.Configuration; import java.util.ArrayList; import java.util.Collection; @@ -19,11 +20,24 @@ import java.util.Collection; */ public class MyModularRealmAuthenticator extends ModularRealmAuthenticator { + @Override protected AuthenticationInfo doAuthenticate(AuthenticationToken authenticationToken) throws AuthenticationException { assertRealmsConfigured(); - CustomUsernamePasswordToken token = (CustomUsernamePasswordToken) authenticationToken; - String type = token.getType(); + String type; + AuthenticationToken token; + if (authenticationToken instanceof JwtToken) { + JwtToken token1 = (JwtToken) authenticationToken; + token = token1; + type = token1.getType(); + } else { + CustomUsernamePasswordToken token1 = (CustomUsernamePasswordToken) authenticationToken; + token = token1; + type = token1.getType(); + } + if (StringUtils.isEmpty(type)) { + throw new RuntimeException("登录认证授权类型不能为空"); + } Collection realms = getRealms(); Collection realmsList = new ArrayList<>(); for (Realm realm : realms) { @@ -34,4 +48,6 @@ public class MyModularRealmAuthenticator extends ModularRealmAuthenticator { return realmsList.size() == 1 ? doSingleRealmAuthentication(realmsList.iterator().next(), token) : doMultiRealmAuthentication(realmsList, token); } + + } diff --git a/len-web/src/main/java/com/len/config/ShiroConfig.java b/len-web/src/main/java/com/len/config/ShiroConfig.java index 5b212e8..5eb208a 100644 --- a/len-web/src/main/java/com/len/config/ShiroConfig.java +++ b/len-web/src/main/java/com/len/config/ShiroConfig.java @@ -1,8 +1,9 @@ package com.len.config; +import com.len.core.BlogRealm; +import com.len.core.MyBasicHttpAuthenticationFilter; import com.len.core.filter.PermissionFilter; import com.len.core.filter.VerfityCodeFilter; -import com.len.core.shiro.BlogRealm; import com.len.core.shiro.LoginRealm; import com.len.core.shiro.RetryLimitCredentialsMatcher; import org.apache.shiro.authc.pam.AtLeastOneSuccessfulStrategy; @@ -26,135 +27,152 @@ import java.util.*; * @author zhuxiaomeng * @date 2018/1/1. * @email 154040976@qq.com - *spring shiro + * spring shiro * 元旦快乐：code everybody */ @Configuration public class ShiroConfig { - @Bean - public RetryLimitCredentialsMatcher getRetryLimitCredentialsMatcher(){ + @Bean + public RetryLimitCredentialsMatcher getRetryLimitCredentialsMatcher() { // RetryLimitCredentialsMatcher rm = new RetryLimitCredentialsMatcher(getCacheManager(),2); - RetryLimitCredentialsMatcher rm = new RetryLimitCredentialsMatcher(getCacheManager()); - rm.setHashAlgorithmName("md5"); - rm.setHashIterations(4); - return rm; + RetryLimitCredentialsMatcher rm = new RetryLimitCredentialsMatcher(getCacheManager()); + rm.setHashAlgorithmName("md5"); + rm.setHashIterations(4); + return rm; - } - @Bean(name = "userLoginRealm") - public LoginRealm getLoginRealm(){ - LoginRealm realm= new LoginRealm(); - realm.setCredentialsMatcher(getRetryLimitCredentialsMatcher()); - return realm; - } - @Bean(name = "blogLoginRealm") - public BlogRealm blogLoginRealm(){ - BlogRealm realm= new BlogRealm(); - realm.setCredentialsMatcher(getRetryLimitCredentialsMatcher()); - return realm; - } + } - @Bean - public EhCacheManager getCacheManager(){ - EhCacheManager ehCacheManager=new EhCacheManager(); - ehCacheManager.setCacheManagerConfigFile("classpath:ehcache/ehcache.xml"); - return ehCacheManager; - } + /* @Bean + public BlogRetryLimitCredentialsMatcher getBlogRetryLimitCredentialsMatcher() { + BlogRetryLimitCredentialsMatcher rm = new BlogRetryLimitCredentialsMatcher(getCacheManager()); + rm.setHashAlgorithmName("md5"); + rm.setHashIterations(4); + return rm; - @Bean - public LifecycleBeanPostProcessor getLifecycleBeanPostProcessor() { - return new LifecycleBeanPostProcessor(); - } + }*/ - @Bean - public AtLeastOneSuccessfulStrategy getAtLeastOneSuccessfulStrategy(){ - AtLeastOneSuccessfulStrategy strategy=new AtLeastOneSuccessfulStrategy(); - return strategy; - } - @Bean - public MyModularRealmAuthenticator getMyModularRealmAuthenticator(){ - MyModularRealmAuthenticator authenticator=new MyModularRealmAuthenticator(); - authenticator.setAuthenticationStrategy(getAtLeastOneSuccessfulStrategy()); - return authenticator; - } - @Bean(name="securityManager") - public SecurityManager getSecurityManager(@Qualifier("userLoginRealm") LoginRealm loginRealm, - @Qualifier("blogLoginRealm") BlogRealm blogLoginRealm){ - DefaultWebSecurityManager dwm=new DefaultWebSecurityManager(); - List loginRealms=new ArrayList<>(); - dwm.setAuthenticator(getMyModularRealmAuthenticator()); - loginRealm.setName("UserLogin"); - blogLoginRealm.setName("BlogLogin"); - loginRealms.add(loginRealm); - loginRealms.add(blogLoginRealm); - dwm.setRealms(loginRealms); - dwm.setCacheManager(getCacheManager()); - dwm.setSessionManager(defaultWebSessionManager()); - return dwm; - } + @Bean(name = "userLoginRealm") + public LoginRealm getLoginRealm() { + LoginRealm realm = new LoginRealm(); + realm.setCredentialsMatcher(getRetryLimitCredentialsMatcher()); + return realm; + } - @Bean - public PermissionFilter getPermissionFilter(){ - PermissionFilter pf=new PermissionFilter(); - return pf; - } + @Bean(name = "blogLoginRealm") + public BlogRealm blogLoginRealm() { + return new BlogRealm(); + } - @Bean - public VerfityCodeFilter getVerfityCodeFilter(){ - VerfityCodeFilter vf= new VerfityCodeFilter(); - vf.setFailureKeyAttribute("shiroLoginFailure"); - vf.setJcaptchaParam("code"); - vf.setVerfitiCode(true); - return vf; - } + @Bean + public EhCacheManager getCacheManager() { + EhCacheManager ehCacheManager = new EhCacheManager(); + ehCacheManager.setCacheManagerConfigFile("classpath:ehcache/ehcache.xml"); + return ehCacheManager; + } - @Bean(name = "shiroFilter") - public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager") SecurityManager securityManager){ - ShiroFilterFactoryBean sfb = new ShiroFilterFactoryBean(); - sfb.setSecurityManager(securityManager); - sfb.setLoginUrl("/login"); - sfb.setUnauthorizedUrl("/goLogin"); - Map filters=new HashMap<>(); - filters.put("per",getPermissionFilter()); - filters.put("verCode",getVerfityCodeFilter()); - sfb.setFilters(filters); - Map filterMap = new LinkedHashMap<>(); - filterMap.put("/login","verCode,anon"); - filterMap.put("/blogLogin","verCode,anon"); - //filterMap.put("/login","anon"); - filterMap.put("/getCode","anon"); - filterMap.put("/blog/**","anon"); - filterMap.put("/logout","logout"); - filterMap.put("/plugin/**","anon"); - filterMap.put("/user/**","per"); - filterMap.put("/**","authc"); - sfb.setFilterChainDefinitionMap(filterMap); - return sfb; - } + @Bean + public LifecycleBeanPostProcessor getLifecycleBeanPostProcessor() { + return new LifecycleBeanPostProcessor(); + } - @Bean - public DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator() { - DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator(); - advisorAutoProxyCreator.setProxyTargetClass(true); - return advisorAutoProxyCreator; - } + @Bean + public AtLeastOneSuccessfulStrategy getAtLeastOneSuccessfulStrategy() { + return new AtLeastOneSuccessfulStrategy(); + } - @Bean - public AuthorizationAttributeSourceAdvisor getAuthorizationAttributeSourceAdvisor(@Qualifier("securityManager") SecurityManager securityManager){ - AuthorizationAttributeSourceAdvisor as=new AuthorizationAttributeSourceAdvisor(); - as.setSecurityManager(securityManager); - return as; - } - @Bean - public DefaultWebSessionManager defaultWebSessionManager() { - DefaultWebSessionManager defaultWebSessionManager = new DefaultWebSessionManager(); - defaultWebSessionManager.setSessionIdCookieEnabled(true); - defaultWebSessionManager.setGlobalSessionTimeout(21600000); - defaultWebSessionManager.setDeleteInvalidSessions(true); - defaultWebSessionManager.setSessionValidationSchedulerEnabled(true); - defaultWebSessionManager.setSessionIdUrlRewritingEnabled(false); - return defaultWebSessionManager; - } + @Bean + public MyModularRealmAuthenticator getMyModularRealmAuthenticator() { + MyModularRealmAuthenticator authenticator = new MyModularRealmAuthenticator(); + authenticator.setAuthenticationStrategy(getAtLeastOneSuccessfulStrategy()); + return authenticator; + } + + @Bean(name = "securityManager") + public SecurityManager getSecurityManager(@Qualifier("userLoginRealm") LoginRealm loginRealm, + @Qualifier("blogLoginRealm") BlogRealm blogLoginRealm) { + DefaultWebSecurityManager dwm = new DefaultWebSecurityManager(); + List loginRealms = new ArrayList<>(); + dwm.setAuthenticator(getMyModularRealmAuthenticator()); + loginRealm.setName("UserLogin"); + blogLoginRealm.setName("BlogLogin"); + loginRealms.add(loginRealm); + loginRealms.add(blogLoginRealm); + dwm.setRealms(loginRealms); + dwm.setCacheManager(getCacheManager()); + dwm.setSessionManager(defaultWebSessionManager()); + return dwm; + } + + @Bean + public PermissionFilter getPermissionFilter() { + return new PermissionFilter(); + } + + @Bean + public MyBasicHttpAuthenticationFilter getAuthenticationFilter() { + return new MyBasicHttpAuthenticationFilter(); + } + + @Bean + public VerfityCodeFilter getVerfityCodeFilter() { + VerfityCodeFilter vf = new VerfityCodeFilter(); + vf.setFailureKeyAttribute("shiroLoginFailure"); + vf.setJcaptchaParam("code"); + vf.setVerfitiCode(true); + return vf; + } + + @Bean(name = "shiroFilter") + public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager") SecurityManager securityManager) { + ShiroFilterFactoryBean sfb = new ShiroFilterFactoryBean(); + sfb.setSecurityManager(securityManager); + sfb.setLoginUrl("/login"); + sfb.setUnauthorizedUrl("/goLogin"); + Map filters = new HashMap<>(); + filters.put("per", getPermissionFilter()); + filters.put("verCode", getVerfityCodeFilter()); + filters.put("jwt", getAuthenticationFilter()); + sfb.setFilters(filters); + Map filterMap = new LinkedHashMap<>(); + filterMap.put("/login", "verCode,anon"); + filterMap.put("/blogLogin", "verCode,anon"); + //filterMap.put("/login","anon"); + filterMap.put("/getCode", "anon"); + // filterMap.put("/blog/**", "anon"); + filterMap.put("/logout", "logout"); + filterMap.put("/plugin/**", "anon"); + filterMap.put("/user/**", "per"); + filterMap.put("/blog/**", "jwt"); + filterMap.put("/**", "authc"); + sfb.setFilterChainDefinitionMap(filterMap); + return sfb; + } + + @Bean + public DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator() { + DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator(); + advisorAutoProxyCreator.setProxyTargetClass(true); + return advisorAutoProxyCreator; + } + + @Bean + public AuthorizationAttributeSourceAdvisor getAuthorizationAttributeSourceAdvisor(@Qualifier("securityManager") SecurityManager securityManager) { + AuthorizationAttributeSourceAdvisor as = new AuthorizationAttributeSourceAdvisor(); + as.setSecurityManager(securityManager); + return as; + } + + @Bean + public DefaultWebSessionManager defaultWebSessionManager() { + DefaultWebSessionManager defaultWebSessionManager = new DefaultWebSessionManager(); + defaultWebSessionManager.setSessionIdCookieEnabled(true); + defaultWebSessionManager.setGlobalSessionTimeout(21600000); + defaultWebSessionManager.setDeleteInvalidSessions(true); + defaultWebSessionManager.setSessionValidationSchedulerEnabled(true); + defaultWebSessionManager.setSessionIdUrlRewritingEnabled(false); + return defaultWebSessionManager; + } /* @Bean public FilterRegistrationBean delegatingFilterProxy(){