使用IDEA创建SSM程序框架（五）

private static org.apache.log4j.Logger log=org.apache.log4j.Logger.getLogger(LoginController.class);


        logger.info("home");
        logger.debug("home");
        logger.error("home");

package com.liuhy.ssm.realm;

import com.liuhy.ssm.model.User;
import com.liuhy.ssm.service.ILoginService;
import com.liuhy.ssm.service.IUserService;
import com.liuhy.ssm.utils.PasswordHelper;
import org.apache.shiro.authc.*;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.Permission;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.crypto.hash.Md5Hash;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.util.ByteSource;
import org.springframework.beans.factory.annotation.Autowired;

import java.util.HashSet;
import java.util.List;
import java.util.Set;

public class UserRealm extends AuthorizingRealm {

    @Autowired
    ILoginService loginService;

    @Autowired
    IUserService userService;

    @Autowired
    private PasswordHelper passwordHelper;

    /**
     * 权限校验
     * @param principals
     * @return
     */
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        System.err.println("doGetAuthorizationInfo");
        String username = (String) principals.getPrimaryPrincipal();
        SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
        Set<String> role = new HashSet<String>();
        authorizationInfo.setRoles(role);
        authorizationInfo.setStringPermissions(permission);
        return authorizationInfo;
    }

    /**
     * 身份校验
     * @param token
     * @return
     * @throws AuthenticationException
     */
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        System.out.println("doGetAuthenticationInfo");
        String username = (String) token.getPrincipal();
        User user = userService.findByName(username);
        if (user == null) {
            throw new UnknownAccountException(); //没有找到账号
        }
        String struername=user.getUsername();
        String strpwd=user.getPassword();
        String str=user.getCredentialsSalt();
        String strname=getName();
        System.out.println(struername+"|"+strpwd+"|"+str+"|"+strname);
        SimpleAuthenticationInfo authenticationInfo = new SimpleAuthenticationInfo(
                struername, //用户名
                strpwd, //密码
                ByteSource.Util.bytes(str), //salt=username+salt
                strname //realm name
        );
        return authenticationInfo;
    }

    @Override
    public void clearCachedAuthorizationInfo(PrincipalCollection principals) {
        super.clearCachedAuthorizationInfo(principals);
    }

    @Override
    public void clearCachedAuthenticationInfo(PrincipalCollection principals) {
        super.clearCachedAuthenticationInfo(principals);
    }

    @Override
    public void clearCache(PrincipalCollection principals) {
        super.clearCache(principals);
    }

    public void clearAllCachedAuthorizationInfo() {
        getAuthorizationCache().clear();
    }

    public void clearAllCachedAuthenticationInfo() {
        getAuthenticationCache().clear();
    }

    public void clearAllCache() {
        clearAllCachedAuthenticationInfo();
        clearAllCachedAuthorizationInfo();
    }
}

package com.liuhy.ssm.exception;

import org.apache.shiro.authz.UnauthorizedException;
import org.springframework.http.HttpStatus;
import org.springframework.web.bind.annotation.ControllerAdvice;
import org.springframework.web.bind.annotation.ExceptionHandler;
import org.springframework.web.bind.annotation.ResponseStatus;
import org.springframework.web.context.request.NativeWebRequest;

@ControllerAdvice
public class DefaultExceptionHandler {
    @ExceptionHandler({UnauthorizedException.class})
    @ResponseStatus(HttpStatus.UNAUTHORIZED)
    public String processUnauthenticatedException(NativeWebRequest request, UnauthorizedException e) {
        return "unauthorized";
    }
}

package com.liuhy.ssm.credentials;

import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.ExcessiveAttemptsException;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.cache.Cache;
import org.apache.shiro.cache.CacheManager;

import java.util.concurrent.atomic.AtomicInteger;

public class RetryLimitHashedCredentialsMatcher extends HashedCredentialsMatcher {

    private Cache<String, AtomicInteger> passwordRetryCache;
    public RetryLimitHashedCredentialsMatcher(CacheManager cacheManager){
        passwordRetryCache = cacheManager.getCache("passwordRetryCache");
    }
    @Override
    public boolean doCredentialsMatch(AuthenticationToken token, AuthenticationInfo info) {
        String username = (String) token.getPrincipal();
        AtomicInteger retryCount = passwordRetryCache.get(username);
        if(retryCount == null){
            retryCount = new AtomicInteger(0);
            passwordRetryCache.put(username,retryCount);
        }
        if(retryCount.incrementAndGet() > 5){
            throw new ExcessiveAttemptsException();
        }
        boolean matches = super.doCredentialsMatch(token,info);
        if(matches){
            passwordRetryCache.remove(username);
        }
        return matches;
    }
}

package com.liuhy.ssm.controller;

import com.liuhy.ssm.model.User;
import com.liuhy.ssm.service.ILoginService;
import com.liuhy.ssm.utils.PasswordHelper;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.*;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;

@Controller
//@RequestMapping(value = "user")
public class LoginController {
    //默认输出路径
    private static org.apache.log4j.Logger logger=org.apache.log4j.Logger.getLogger(LoginController.class);
    @Autowired
    ILoginService loginService;
    @RequestMapping(value = "login")
    public String login( @RequestParam(value = "username", required = false) String username,
                         @RequestParam(value = "password", required = false) String password,
                         @RequestParam(value = "remember", required = false) String remember,
                         Model model) {
        System.out.println("login");
        System.out.println("登陆用户输入的用户名：" + username + "，密码：" + password);
//        username="admin";
//        password="123";
        String error = null;
        if (username != null && password != null) {
            //初始化
            Subject subject = SecurityUtils.getSubject();
            UsernamePasswordToken token = new UsernamePasswordToken(username, password);
            if (remember != null) {
                if (remember.equals("on")) {
                    token.setRememberMe(true);
                } else {
                    token.setRememberMe(false);
                }
            } else {
                token.setRememberMe(false);
                try {
                    subject.login(token);
                    System.out.println("用户是否登录：" + subject.isAuthenticated());
                    return "redirect:main.do";
                } catch (UnknownAccountException e) {
                    e.printStackTrace();
                    error = "用户账户不存在，错误信息：" + e.getMessage();
                } catch (IncorrectCredentialsException e) {
                    e.printStackTrace();
                    error = "用户名或密码错误，错误信息：" + e.getMessage();
                } catch (LockedAccountException e) {
                    e.printStackTrace();
                    error = "该账号已锁定，错误信息：" + e.getMessage();
                } catch (DisabledAccountException e) {
                    e.printStackTrace();
                    error = "该账号已禁用，错误信息：" + e.getMessage();
                } catch (ExcessiveAttemptsException e) {
                    e.printStackTrace();
                    error = "该账号登录失败次数过多，错误信息：" + e.getMessage();
                } catch (Exception e) {
                    e.printStackTrace();
                    error = "未知错误，错误信息：" + e.getMessage();
                }
            }
        }
        else{
            error = "请输入用户名和密码";
        }
        model.addAttribute("error", error);
        return "login";
    }

    @RequestMapping(value = "test")
    public String test() {
        System.out.println("test");
        logger.info("test");
        logger.debug("test");
        logger.error("test");
        return "test";
    }
}

package com.liuhy.ssm.service;

import com.liuhy.ssm.model.User;
import org.apache.shiro.authz.Permission;


import java.util.List;

public interface IUserService{
        User findByName(String username);

}

package com.liuhy.ssm.service.impl;

import com.liuhy.ssm.dao.UserDao;
import com.liuhy.ssm.model.User;
import com.liuhy.ssm.service.IUserService;
import org.apache.shiro.authz.Permission;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import java.util.List;

@Service
public class UserServiceImpl implements IUserService {

    @Autowired
    private UserDao userDao;

    @Override
    public User findByName(String username) {
        return userDao.findByName(username);
    }
}

package com.liuhy.ssm.model;

/**
 * @author Administrator
 */
public class User {
    public User(Long id, String username, String nickname, String password, String email, String avatar, String enable, String open_id, String wx_open_id, String createtime, String updatetime, String salt) {
        this.id = id;
        this.username = username;
        this.nickname = nickname;
        this.password = password;
        this.email = email;
        this.avatar = avatar;
        this.enable = enable;
        this.open_id = open_id;
        this.wx_open_id = wx_open_id;
        this.createtime = createtime;
        this.updatetime = updatetime;
        this.salt = salt;
    }

    //    CREATE TABLE `sys_user` (
//            `id` BIGINT(20) NOT NULL AUTO_INCREMENT,
//	`username` VARCHAR(20) NULL DEFAULT NULL,
//	`nickname` VARCHAR(50) NULL DEFAULT NULL,
//	`password` VARCHAR(50) NULL DEFAULT NULL,
//	`avatar` VARCHAR(255) NULL DEFAULT NULL,
//	`email` VARCHAR(100) NULL DEFAULT NULL,
//	`enable` TINYINT(1) NULL DEFAULT ‘1‘,
//            `open_id` VARCHAR(32) NULL DEFAULT NULL COMMENT ‘qq登录api的openid‘,
//            `wx_open_id` VARCHAR(32) NULL DEFAULT NULL,
//	`createtime` DATETIME NULL DEFAULT NULL,
//	`updatetime` DATETIME NULL DEFAULT NULL,
//    PRIMARY KEY (`id`),
//    UNIQUE INDEX `username` (`username`) USING BTREE
//)
//    COLLATE=‘utf8_general_ci‘
//    ENGINE=InnoDB
//            AUTO_INCREMENT=1
//            ;
    private Long id;


    private String username;
    private String nickname;
    private String password;
    private String email;
    private String avatar;
    private String enable;
    private String open_id;
    private String wx_open_id;
    private String createtime;
    private String updatetime;

    public String getSalt() {
        return salt;
    }

    public void setSalt(String salt) {
        this.salt = salt;
    }

    private String salt; //盐


    public void setId(Long id) {
        this.id = id;
    }

    public String getUsername() {
        return username;
    }

    public void setUsername(String username) {
        this.username = username;
    }

    public String getNickname() {
        return nickname;
    }

    public void setNickname(String nickname) {
        this.nickname = nickname;
    }

    public String getPassword() {
        return password;
    }

    public void setPassword(String password) {
        this.password = password;
    }

    public String getEmail() {
        return email;
    }

    public void setEmail(String email) {
        this.email = email;
    }

    public String getAvatar() {
        return avatar;
    }

    public void setAvatar(String avatar) {
        this.avatar = avatar;
    }

    public String getEnable() {
        return enable;
    }

    public void setEnable(String enable) {
        this.enable = enable;
    }

    public String getOpen_id() {
        return open_id;
    }

    public void setOpen_id(String open_id) {
        this.open_id = open_id;
    }

    public String getWx_open_id() {
        return wx_open_id;
    }

    public void setWx_open_id(String wx_open_id) {
        this.wx_open_id = wx_open_id;
    }

    public String getCreatetime() {
        return createtime;
    }

    public void setCreatetime(String create_time) {
        this.createtime = create_time;
    }

    public String getUpdatetime() {
        return updatetime;
    }

    public void setUpdatetime(String updatetime) {
        this.updatetime = updatetime;
    }

    public String getCredentialsSalt() {
        return username + salt;
    }

    @Override
    public String toString() {
        return "User{" +
                "id=" + id +
                ", username=‘" + username + ‘\‘‘ +
                ", nickname=‘" + nickname + ‘\‘‘ +
                ", password=‘" + password + ‘\‘‘ +
                ", email=‘" + email + ‘\‘‘ +
                ", avatar=‘" + avatar + ‘\‘‘ +
                ", enable=‘" + enable + ‘\‘‘ +
                ", open_id=‘" + open_id + ‘\‘‘ +
                ", wx_open_id=‘" + wx_open_id + ‘\‘‘ +
                ", createtime=‘" + createtime + ‘\‘‘ +
                ", updatetime=‘" + updatetime + ‘\‘‘ +
                ", salt=‘" + salt + ‘\‘‘ +
                ‘}‘;
    }
}