Shiro與基本web環境整合登錄驗證明例

時間 2019-11-18

標籤 shiro 基本 web 環境整合登錄驗證欄目 HTML 简体版

原文原文鏈接

1. 用maven導入Shiro依賴包html

 <dependency>  
    <groupId>org.apache.shiro</groupId>  
    <artifactId>shiro-web</artifactId>  
    <version>1.2.2</version>  
</dependency> 
 <dependency>  
        <groupId>commons-logging</groupId>  
        <artifactId>commons-logging</artifactId>  
        <version>1.1.3</version>  
  </dependency>

2.配置web.xmljava

   <!-- 初始化shiro web environment -->
    <listener>
          <listener-class>org.apache.shiro.web.env.EnvironmentLoaderListener</listener-class>
  </listener>
  
<!-- 設置shiro攔截器-->
   <filter>
      <filter-name>ShiroFilter</filter-name>
      <filter-class>org.apache.shiro.web.servlet.ShiroFilter</filter-class>
  </filter>
  
  <filter-mapping>
      <filter-name>ShiroFilter</filter-name>
      <url-pattern>/*</url-pattern>
  </filter-mapping>

3.配置初始化shiro的配置文件 shiro.ini放在類文件根目錄web

[main]
authc.loginUrl=/login
authc.successUrl=/index
[users]
zhang=123,role1,role2  
wang=123,role1  
[urls]
/login=authc
/logout=logout
/* = authc

4.建立一個servlet並映射至登錄路徑/loginapache

public class LoginServlet extends HttpServlet {
	private static final long serialVersionUID = 1L;
    public LoginServlet() {
        super();
    }
	/**GET請求顯示登陸界面同時顯示錯誤信息
	 */
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		//顯示登陸界面
		request.getRequestDispatcher("/login.jsp").forward(request, response);	
	}

	/**FormAuthenticationFilter將會攔截POST請求進行登陸操做，咱們不須要再作登陸操做。
	 */
	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		System.out.println("登陸失敗纔會進入doPost方法。由於攔截器攔截了POST請求進行登陸，登陸成功則直接跳轉至訪問頁面。登陸失敗後才進入Post方法");
		System.out.println("登陸失敗纔再登陸界面，並添加錯誤信息");
		
		//FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME值爲shiroLoginFailure，保存了登陸錯誤信息，值爲異常的類全名
		String errorFullClassName = (String)request.getAttribute(FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME);
		String cerrorKey="error";//客戶端顯示的錯誤信息
		if(UnknownAccountException.class.getName().equals(errorFullClassName)){
			//未知帳戶
			request.setAttribute(cerrorKey, "用戶名密碼錯誤");
		}else if(IncorrectCredentialsException.class.getName().equals(errorFullClassName)){
			//密碼錯誤
			request.setAttribute(cerrorKey, "用戶名密碼錯誤");
		}else{
			//其餘錯誤如帳戶鎖定等等
			request.setAttribute(cerrorKey, "其餘錯誤");
		}
		//顯示登陸界面
		doGet(request, response);
	}

}

  <servlet>
      <servlet-name>LoginServlet</servlet-name>
      <servlet-class>baseshiroweb.LoginServlet</servlet-class>
  </servlet>
  
  <servlet-mapping>
      <servlet-name>LoginServlet</servlet-name>
      <url-pattern>/login</url-pattern>
  </servlet-mapping>

5.建立一個登錄界面login.jspapp

<%@ page language="java" contentType="text/html; charset=UTF-8"
    pageEncoding="UTF-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Insert title here</title>
</head>
<body>
登錄界面<br/>
<form action="/baseshiroweb/login" method="post">

   Username: <input type="text" name="username"/> <br/>
   Password: <input type="password" name="password"/><br/>
   <input type="checkbox" name="rememberMe" value="true"/>Remember Me?<br/>
   <input type="submit" value="提交"/>
</form>
${error}
</body>
</html>

6.建立一個登錄成功後的信息顯示servlet並添加退出jsp

public class MyServlet extends HttpServlet{

	
	@Override
	protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
		resp.getWriter().println("<html>");
		resp.getWriter().println("hello shiro web"+"<br/>");
		Subject subject = SecurityUtils.getSubject();
		resp.getWriter().println("principal:"+subject.getPrincipal()+"<br/>");
		resp.getWriter().println("isAuthenticated"+subject.isAuthenticated()+"<br/>");
		resp.getWriter().println("<a href='/baseshiroweb/logout'>logout</a>");
		resp.getWriter().println("</html>");
	}
}

  <servlet>
      <servlet-name>myservlet</servlet-name>
      <servlet-class>baseshiroweb.MyServlet</servlet-class>
  </servlet>
  
    <servlet-mapping>
      <servlet-name>myservlet</servlet-name>
      <url-pattern>/index</url-pattern>
  </servlet-mapping>

　此時訪問http://localhost:8080/baseshiroweb/indexmaven

執行流程：ide

1.將會請求/index路徑　post

2.匹配Shiro配置文件裏的[urls]內的/*路徑的authc攔截器，跳轉至登錄登錄界面/loginui

3.在/login進行登陸操做，成功則跳轉至/index，失敗則返回/login界面並顯示錯誤信息

4./index成功登陸後，點擊超連接logout訪問/logout進行退出操做。/logout路徑匹配logout攔截器。

完整的web.xml爲

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">
 
  <display-name>Archetype Created Web Application</display-name>
   <!-- 初始化shiro web environment -->
    <listener>
          <listener-class>org.apache.shiro.web.env.EnvironmentLoaderListener</listener-class>
  </listener>
  
<!-- 設置shiro攔截器-->
   <filter>
      <filter-name>ShiroFilter</filter-name>
      <filter-class>org.apache.shiro.web.servlet.ShiroFilter</filter-class>
  </filter>
  
  <filter-mapping>
      <filter-name>ShiroFilter</filter-name>
      <url-pattern>/*</url-pattern>
  </filter-mapping>
  
  <servlet>
      <servlet-name>myservlet</servlet-name>
      <servlet-class>baseshiroweb.MyServlet</servlet-class>
  </servlet>
  
    <servlet-mapping>
      <servlet-name>myservlet</servlet-name>
      <url-pattern>/index</url-pattern>
  </servlet-mapping>
  
  <servlet>
      <servlet-name>LoginServlet</servlet-name>
      <servlet-class>baseshiroweb.LoginServlet</servlet-class>
  </servlet>
  
  <servlet-mapping>
      <servlet-name>LoginServlet</servlet-name>
      <url-pattern>/login</url-pattern>
  </servlet-mapping>

</web-app>

相關標籤/搜索

每日一句

每一个你不满意的现在，都有一个你没有努力的曾经。