Shiro configuration based on spring framework

First, add Shiro filter in Web. xml

XML code

2. <!--Shiro filter-->
4. <filter>
6. <filter-name>shirofilter</filter-name>
8. <filter-class>
10. Org.springframework.web.filter.DelegatingFilterProxy
12. </filter-class>
14. </filter>
16. <filter-mapping>
18. <filter-name>shirofilter</filter-name>
20. <url-pattern>/*</url-pattern>
22. </filter-mapping>

Second, add Shiro configuration in spring's Applicationcontext.xml
1. Add Shirofilter definition

XML code

2. <!--Shiro Filter--
4. <Bean id= "shirofilter" class="Org.apache.shiro.spring.web.ShiroFilterFactoryBean " >
6. <property name= "securitymanager" ref="SecurityManager" />
8. <property name= "loginurl" value="/login" />
10. <property name= "successurl" value="/user/list" />
12. <property name= "unauthorizedurl" value="/login" />
14. <property name="filterchaindefinitions">
16. <value>
18. /login = anon
20. /user/** = authc
22. /role/edit/* = Perms[role:edit]
24. /role/save = Perms[role:edit]
26. /role/list = Perms[role:view]
28. /** = authc
30. </value>
32. </Property>
34. </Bean>

2. Add SecurityManager definition

XML code

1. <Bean id= "securitymanager" class="Org.apache.shiro.web.mgt.DefaultWebSecurityManager " >
2. <property name="Realm" ref="Myrealm" />
3. </Bean>

3. Add Realm Definition

XML code

1. <Bean id="Myrealm" class= "com ... Myrealm " />

Third, implement Myrealm: Inherit Authorizingrealm, and rewrite authentication authorization method

Java code

2. Public class Myrealm extends authorizingrealm{
6. private Accountmanager Accountmanager;
8. public void Setaccountmanager (Accountmanager accountmanager) {
10. This.accountmanager = Accountmanager;
12. }
16. /** 
18. * Authorization Information
20. */
22. protected Authorizationinfo Dogetauthorizationinfo (
24. PrincipalCollection principals) {
26. String Username= (String) Principals.fromrealm (GetName ()). Iterator (). Next ();
28. if (username! = null) {
30. User user = Accountmanager.get (username);
32. if (user! = null && user.getroles () = null) {
34. Simpleauthorizationinfo info = new Simpleauthorizationinfo ();
36. For (SecurityRole each:user.getRoles ()) {
38. Info.addrole (Each.getname ());
40. Info.addstringpermissions (Each.getpermissionsasstring ());
42. }
44. return info;
46. }
48. }
50. return null;
52. }
56. /** 
58. * Certification Information
60. */
62. protected AuthenticationInfo Dogetauthenticationinfo (
64. Authenticationtoken Authctoken) throws authenticationexception {
66. Usernamepasswordtoken token = (usernamepasswordtoken) Authctoken;
68. String userName = Token.getusername ();
70. if (userName ! = null &&! "". Equals (UserName)) {
72. User user = Accountmanager.login (token.getusername (),
74. String.valueof (Token.getpassword ()));
78. if (user! = null)
80. return new Simpleauthenticationinfo (
82. User.getloginname (), User.getpassword (), GetName ());
84. }
86. return null;
88. }
92. }

Shiro configuration based on spring framework