1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
  import org.apache.shiro.SecurityUtils;
  import org.apache.shiro.authc.*;
  import org.apache.shiro.config.IniSecurityManagerFactory;
  import org.apache.shiro.mgt.SecurityManager;
  import org.apache.shiro.session.Session;
  import org.apache.shiro.subject.Subject;
  import org.apache.shiro.util.Factory;
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;

  public class Tutorial {

      private static final transient Logger log = LoggerFactory.getLogger(Tutorial.class);

      public static void main(String[] args) {
          log.info("My First Apache Shiro Application");
          System.exit(0);
      }
  }

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
  public static void main(String[] args) {

      log.info("My First Apache Shiro Application");

      // 1. 使用 Factory 模式 ingest（摄入） Shiro INI 文件
      // classpath: 前缀用来告诉 Shiro 加载文件的路径；file:, url: 同样被支持
      Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");

      // 2. 调用 getInstance() 方法分析 INI 文件并映射配置返回一个 SecurityManager 实例
      SecurityManager securityManager = factory.getInstance();

      // 3. 设置 SecurityManager 为静态单例（memory），通过 JVM 访问。
      // 这种方式在单 JVM，多 Shiro 生效的环境不令人满意的，虽然在这个简单的程序中 ok，但更多复杂的应用环境通常会在特定的应用程序内存中放置 SecurityManager 对象（例如 web app 的 ServletContext 或 Spring, Guice ，JBoss DI 容器等）。
      SecurityUtils.setSecurityManager(securityManager);

      System.exit(0);
  }

1
2
3
  // 通过 getSubject() 在独立应用程序中基于用户数据获取当前执行操作的 Subject。
  // 如果是在服务器环境（例如 web app），则基于用户数据相关的当前线程或即将来的请求
  Subject currentUser = SecurityUtils.getSubject();

1
2
3
  // 获取当前用户的 Session。
  Session session = currentUser.getSession();
  session.setAttribute( "someKey", "aValue" );

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
  if ( !currentUser.isAuthenticated() ) {
    // 从 GUI 收集用户主体和凭据，例如用户名、密码表单，X509 证书, OpenID 等.
    // 在这里，我们将使用用户名/密码
    UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");

    //this is all you have to do to support 'remember me' (不要配置 - 内建的!):
    token.setRememberMe(true);

    try {
        currentUser.login(token);
    } catch (UnknownAccountException uae) {
        log.info("There is no user with username of " + token.getPrincipal());
    } catch (IncorrectCredentialsException ice) {
        log.info("Password for account " + token.getPrincipal() + " was incorrect!");
    } catch (LockedAccountException lae) {
        log.info("The account for username " + token.getPrincipal() + " is locked.  " +
                "Please contact your administrator to unlock it.");
    }
    // ... catch more exceptions here (maybe custom ones specific to your application?
    catch (AuthenticationException ae) {
        //unexpected condition?  error?
    }

    //print their identifying principal (in this case, a username):
    log.info( "User [" + currentUser.getPrincipal() + "] logged in successfully." );

    //test a role:
    if (currentUser.hasRole("schwartz")) {
        log.info("May the Schwartz be with you!");
    } else {
        log.info("Hello, mere mortal.");
    }

    //test a typed permission (not instance-level)
    if (currentUser.isPermitted("lightsaber:weild")) {
        log.info("You may use a lightsaber ring.  Use it wisely.");
    } else {
        log.info("Sorry, lightsaber rings are for schwartz masters only.");
    }

    //a (very powerful) Instance Level permission:
    if (currentUser.isPermitted("winnebago:drive:eagle5")) {
        log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  " +
                "Here are the keys - have fun!");
    } else {
        log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");
    }

    //all done - log out!
    currentUser.logout();

    System.exit(0);
  }