한 걸음 한 걸음 shiro - 2 설정 을 가르쳐 주 고 realm 을 사용자 정의 합 니 다.

CREATE TABLE IF NOT EXISTS `user` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT COMMENT '  ID',
  `user_name` varchar(10) NOT NULL DEFAULT '' COMMENT '   ',
  `password` varchar(50) NOT NULL DEFAULT '' COMMENT '    ，     ，  md5',
  `roles` varchar(20) NOT NULL DEFAULT '' COMMENT '   ，    ',
  `create_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '    ',
  `update_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '    ',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uniq_idx_role_name` (`user_name`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='   ';

@Service
public class UserService {
    //mybatis     dao
    @Resource
    private UserDao userDao;

    //       user  
    public User queryUserByName(String name) {
        try {
            if (StringUtils.isBlank(name)) {
                return null;
            }
            return userDao.queryUserByName(name);
        } catch (Exception e) {
            log.error("db error when query user:{}", name, e);
        }
        return null;
    }
    
    //              
    public Set queryUserRole(String userName) {
        User user = queryUserByName(userName);
        if (user == null) {
            return Collections.emptySet();
        }
        List roleList = StringAssist.splitComma(user.getRoles());
        return Sets.newHashSet(roleList);
    }
}

     @PostMapping("login")
    public String login(String username, String password) {
        try {
            //shiro  SecurityUtils.getSubject()    ，            ，      
            Subject subject = SecurityUtils.getSubject();
            //     ，            
            if (subject.isAuthenticated()) {
                return "redirect:/static/html/indexLogin.html";
            }
            //     UsernamePasswordToken，shiro token  Principal Credentials   
            //Principal             ，Credentials            
            //UsernamePasswordToken username  Principal，password  Credentials
            UsernamePasswordToken token = new UsernamePasswordToken(username, password);
            //rememberMe     
            token.setRememberMe(true);
            subject.login(token);
        } catch (AuthenticationException e) {
            //              ，           
            return "redirect:/static/html/loginError.html";
        }
        return "redirect:/static/html/indexLogin.html";
    }

public class MyRealm extends AuthorizingRealm {

    @Resource
    private UserService userService;

    //         roles   permission     ，                 
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        //principals.getPrimaryPrincipal()          
        if (principals == null || StringUtils.isBlank((String) principals.getPrimaryPrincipal())) {
            return null;
        }
        //         SimpleAuthorizationInfo
        return new SimpleAuthorizationInfo(userService.queryUserRole((String) principals.getPrimaryPrincipal()));
    }

    //token     login    UsernamePasswordToken
    //getPrincipal()     getUsername(),getCredentials()    getPassword()
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
        if (token == null||StringUtils.isBlank((String) token.getPrincipal())) {
            return null;
        }
        //  token       ，  user  
        User user = userService.queryUserByName((String) token.getPrincipal());
        if (user == null) {
            return null;
        }
        //SimpleAuthenticationInfo          ，            、  、        
        //                   md5       ，    ，      ，           
        //getName()   realm   ，            realm，    ，     realm
        //      ，    token SimpleAuthenticationInfo    ，    Principal()，   token Credentials
        //  md5  SimpleAuthenticationInfo     ，     SimpleAuthenticationInfo Credentials  
        return new SimpleAuthenticationInfo(
                user.getUserName(), user.getPassword(), ByteSource.Util.bytes(user.getUserName()), getName());
    }