tamguo
7 years ago
parent
0b132c27e9
commit
fb2902de3e
@ -1,72 +0,0 @@
|
|||||||
package com.tamguo.config.shiro;
|
|
||||||
|
|
||||||
import java.util.Set;
|
|
||||||
import org.apache.shiro.authc.AuthenticationException;
|
|
||||||
import org.apache.shiro.authc.AuthenticationInfo;
|
|
||||||
import org.apache.shiro.authc.AuthenticationToken;
|
|
||||||
import org.apache.shiro.authc.IncorrectCredentialsException;
|
|
||||||
import org.apache.shiro.authc.LockedAccountException;
|
|
||||||
import org.apache.shiro.authc.SimpleAuthenticationInfo;
|
|
||||||
import org.apache.shiro.authc.UnknownAccountException;
|
|
||||||
import org.apache.shiro.authz.AuthorizationInfo;
|
|
||||||
import org.apache.shiro.authz.SimpleAuthorizationInfo;
|
|
||||||
import org.apache.shiro.crypto.hash.Sha256Hash;
|
|
||||||
import org.apache.shiro.realm.AuthorizingRealm;
|
|
||||||
import org.apache.shiro.subject.PrincipalCollection;
|
|
||||||
import org.springframework.beans.factory.annotation.Autowired;
|
|
||||||
|
|
||||||
import com.tamguo.modules.member.model.MemberEntity;
|
|
||||||
import com.tamguo.modules.member.service.IMemberService;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* 认证
|
|
||||||
*
|
|
||||||
*/
|
|
||||||
public class MemberRealm extends AuthorizingRealm {
|
|
||||||
|
|
||||||
@Autowired
|
|
||||||
private IMemberService iMemberService;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* 授权(验证权限时调用)
|
|
||||||
*/
|
|
||||||
@Override
|
|
||||||
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
|
|
||||||
Set<String > permsSet = null;
|
|
||||||
SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
|
|
||||||
info.setStringPermissions(permsSet);
|
|
||||||
|
|
||||||
return info;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* 认证(登录时调用)
|
|
||||||
*/
|
|
||||||
@Override
|
|
||||||
protected AuthenticationInfo doGetAuthenticationInfo(
|
|
||||||
AuthenticationToken token) throws AuthenticationException {
|
|
||||||
String username = (String) token.getPrincipal();
|
|
||||||
String password = new String((char[]) token.getCredentials());
|
|
||||||
|
|
||||||
MemberEntity member = iMemberService.findByUsername(username);
|
|
||||||
if(member == null) {
|
|
||||||
throw new UnknownAccountException("用户名或密码有误，请重新输入或找回密码");
|
|
||||||
}
|
|
||||||
Integer loginFailureCount = iMemberService.getLoginFailureCount(member);
|
|
||||||
if(loginFailureCount > 10) {
|
|
||||||
throw new LockedAccountException("账号被锁定");
|
|
||||||
}
|
|
||||||
|
|
||||||
if(!new Sha256Hash(password).toHex().equals(member.getPassword())){
|
|
||||||
loginFailureCount++;
|
|
||||||
iMemberService.updateLoginFailureCount(member , loginFailureCount);
|
|
||||||
throw new IncorrectCredentialsException("用户名或密码有误，请重新输入或找回密码");
|
|
||||||
}
|
|
||||||
// 更新登录时间
|
|
||||||
iMemberService.updateLastLoginTime(member.getId());
|
|
||||||
|
|
||||||
SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(member, password, getName());
|
|
||||||
return info;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
@ -1,69 +0,0 @@
|
|||||||
package com.tamguo.config.shiro;
|
|
||||||
|
|
||||||
import java.util.LinkedHashMap;
|
|
||||||
import java.util.Map;
|
|
||||||
|
|
||||||
import org.apache.shiro.cache.ehcache.EhCacheManager;
|
|
||||||
import org.apache.shiro.spring.LifecycleBeanPostProcessor;
|
|
||||||
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
|
|
||||||
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
|
|
||||||
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
|
|
||||||
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
|
|
||||||
import org.springframework.context.annotation.Bean;
|
|
||||||
import org.springframework.context.annotation.Configuration;
|
|
||||||
|
|
||||||
@Configuration
|
|
||||||
public class ShiroConfiguration {
|
|
||||||
private static Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>();
|
|
||||||
|
|
||||||
@Bean(name = "shiroRealm")
|
|
||||||
public MemberRealm getShiroRealm() {
|
|
||||||
return new MemberRealm();
|
|
||||||
}
|
|
||||||
|
|
||||||
@Bean(name = "shiroEhcacheManager")
|
|
||||||
public EhCacheManager getEhCacheManager() {
|
|
||||||
EhCacheManager em = new EhCacheManager();
|
|
||||||
em.setCacheManagerConfigFile("classpath:ehcache-shiro.xml");
|
|
||||||
return em;
|
|
||||||
}
|
|
||||||
|
|
||||||
@Bean(name = "lifecycleBeanPostProcessor")
|
|
||||||
public LifecycleBeanPostProcessor getLifecycleBeanPostProcessor() {
|
|
||||||
return new LifecycleBeanPostProcessor();
|
|
||||||
}
|
|
||||||
|
|
||||||
@Bean
|
|
||||||
public DefaultAdvisorAutoProxyCreator getDefaultAdvisorAutoProxyCreator() {
|
|
||||||
DefaultAdvisorAutoProxyCreator daap = new DefaultAdvisorAutoProxyCreator();
|
|
||||||
daap.setProxyTargetClass(true);
|
|
||||||
return daap;
|
|
||||||
}
|
|
||||||
|
|
||||||
@Bean(name = "securityManager")
|
|
||||||
public DefaultWebSecurityManager getDefaultWebSecurityManager() {
|
|
||||||
DefaultWebSecurityManager dwsm = new DefaultWebSecurityManager();
|
|
||||||
dwsm.setRealm(getShiroRealm());
|
|
||||||
dwsm.setCacheManager(getEhCacheManager());
|
|
||||||
return dwsm;
|
|
||||||
}
|
|
||||||
|
|
||||||
@Bean
|
|
||||||
public AuthorizationAttributeSourceAdvisor getAuthorizationAttributeSourceAdvisor() {
|
|
||||||
AuthorizationAttributeSourceAdvisor aasa = new AuthorizationAttributeSourceAdvisor();
|
|
||||||
aasa.setSecurityManager(getDefaultWebSecurityManager());
|
|
||||||
return new AuthorizationAttributeSourceAdvisor();
|
|
||||||
}
|
|
||||||
|
|
||||||
@Bean(name = "shiroFilter")
|
|
||||||
public ShiroFilterFactoryBean getShiroFilterFactoryBean() {
|
|
||||||
ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
|
|
||||||
shiroFilterFactoryBean.setSecurityManager(getDefaultWebSecurityManager());
|
|
||||||
shiroFilterFactoryBean.setLoginUrl("/login");
|
|
||||||
shiroFilterFactoryBean.setSuccessUrl("/index");
|
|
||||||
filterChainDefinitionMap.put("/member/**", "authc");
|
|
||||||
filterChainDefinitionMap.put("/**", "anon");
|
|
||||||
shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
|
|
||||||
return shiroFilterFactoryBean;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
Loading…
Reference in new issue