给jdbcRealm配置数据源

通过jdbcRealm查询数据库

@Test
public void testAuthentication(){

    IniRealm iniRealm = new IniRealm("classpath:user.ini");
    //1.创建SecurityManager
    DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager();
    defaultSecurityManager.setRealm(iniRealm);


    //2.主题提交认证请求
    SecurityUtils.setSecurityManager(defaultSecurityManager);
    Subject subject = SecurityUtils.getSubject();

    UsernamePasswordToken token = new UsernamePasswordToken("wakeng","123456");
    subject.login(token);

    System.out.println("login isAuthenticated : "+subject.isAuthenticated());
    subject.checkRole("admin");
    subject.checkPermission("user:updata");

    subject.logout();

    System.out.println("logout isAuthenticated : "+subject.isAuthenticated());
}

[users]
wakeng=123456,admin
[roles]
admin=user:delete,user:updata

user.ini

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.SimpleAccount;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.mgt.DefaultSecurityManager;
import org.apache.shiro.realm.SimpleAccountRealm;
import org.apache.shiro.subject.Subject;
import org.junit.Before;
import org.junit.Test;

/**
 * AuthenticationTest
 *
 * @author Wakeng
 */
public class AuthenticationTest {
    SimpleAccountRealm simpleAccountRealm = new SimpleAccountRealm();

    @Before
    public void addUser(){
        simpleAccountRealm.addAccount("wakeng","123456","admin","user");
    }


    @Test
    public void testAuthentication(){
        //1.创建SecurityManager
        DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager();
        defaultSecurityManager.setRealm(simpleAccountRealm);

        //2.主题提交认证请求
        SecurityUtils.setSecurityManager(defaultSecurityManager);
        Subject subject = SecurityUtils.getSubject();

        UsernamePasswordToken token = new UsernamePasswordToken("wakeng","123456");
        subject.login(token);

        System.out.println("login isAuthenticated : "+subject.isAuthenticated());
        //判断是否有admin权限
        subject.checkRoles("admin","user");

        subject.logout();

        System.out.println("logout isAuthenticated : "+subject.isAuthenticated());
    }
}

想看所有笔记和代码的，点我:
https://blog.csdn.net/ranandrun/article/details/86605751#1RealmMyRealm_243

权限认证的代码。与角色认证稍有不同，需要弄清楚的是一个用户可能用多个角色身份。一种角色身份可能有多种权限。

iniRealm

shiro授权

Shiro简单认证

Shiro认证

顶顶顶顶的

JDBC的POM.XML

mysql,druid

还可以进行本地二次缓存, 而不用每次都从Redis中读取, 性能会更高, 留给自己实现...???