Shiro 与 SpringSecurity [关闭]

Shiro与Spring Security简介

java
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.config.IniSecurityManagerFactory;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.util.Factory;
public class ShiroAuthenticationExample {
    public static void main(String[] args) {
        // 创建SecurityManager工厂
        Factory factory = new IniSecurityManagerFactory("classpath:shiro.ini");
        // 获取SecurityManager实例
        SecurityManager securityManager = factory.getInstance();
        // 将SecurityManager设置到当前环境中
        SecurityUtils.setSecurityManager(securityManager);
        // 获取当前用户Subject
        Subject currentUser = SecurityUtils.getSubject();
        
        // 创建用户名/密码身份验证Token
        UsernamePasswordToken token = new UsernamePasswordToken("username", "password");
        
        try {
            // 身份验证
            currentUser.login(token);
            System.out.println("身份验证成功！");
        } catch (AuthenticationException e) {
            // 身份验证失败
            System.out.println("身份验证失败：" + e.getMessage());
        }
    }
}

java
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.inMemoryAuthentication()
            .withUser("username").password("password").roles("USER");
    }
    
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
            .antMatchers("/admin/**").hasRole("ADMIN")
            .antMatchers("/user/**").hasAnyRole("USER", "ADMIN")
            .anyRequest().authenticated()
            .and()
            .formLogin().permitAll()
            .and()
            .logout().permitAll();
    }
    
}