Shiro+jsp+servlet+jdbc+c3po整合
-
db.sql
/* Navicat Premium Data Transfer Source Server : mysql Source Server Type : MySQL Source Server Version : 50709 Source Host : localhost:3306 Source Schema : rbac Target Server Type : MySQL Target Server Version : 50709 File Encoding : 65001 Date: 14/04/2020 17:09:07 */ SET NAMES utf8mb4; SET FOREIGN_KEY_CHECKS = 0; -- ---------------------------- -- Table structure for Role -- ---------------------------- DROP TABLE IF EXISTS `Role`; CREATE TABLE `Role` ( `rid` int(11) NOT NULL AUTO_INCREMENT, `rname` varchar(20) NOT NULL, `rdesc` varchar(20) DEFAULT NULL, PRIMARY KEY (`rid`) ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=latin1; -- ---------------------------- -- Records of Role -- ---------------------------- BEGIN; INSERT INTO `Role` VALUES (1, 'manager', 'manager desc'); INSERT INTO `Role` VALUES (2, 'guest', 'guest desc'); COMMIT; -- ---------------------------- -- Table structure for permission -- ---------------------------- DROP TABLE IF EXISTS `permission`; CREATE TABLE `permission` ( `pid` int(11) NOT NULL AUTO_INCREMENT, `pname` varchar(20) NOT NULL, `pdesc` varchar(20) DEFAULT NULL, PRIMARY KEY (`pid`) ) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=latin1; -- ---------------------------- -- Records of permission -- ---------------------------- BEGIN; INSERT INTO `permission` VALUES (1, 'select', 'select desc'); INSERT INTO `permission` VALUES (2, 'insert', 'insert desc'); INSERT INTO `permission` VALUES (3, 'delete', 'delete desc'); INSERT INTO `permission` VALUES (4, 'update', 'update desc'); COMMIT; -- ---------------------------- -- Table structure for role_perms -- ---------------------------- DROP TABLE IF EXISTS `role_perms`; CREATE TABLE `role_perms` ( `rid` int(11) NOT NULL, `pid` int(11) NOT NULL, PRIMARY KEY (`rid`,`pid`), KEY `FK_Reference_4` (`pid`), CONSTRAINT `FK_Reference_3` FOREIGN KEY (`rid`) REFERENCES `Role` (`rid`), CONSTRAINT `FK_Reference_4` FOREIGN KEY (`pid`) REFERENCES `permission` (`pid`) ) ENGINE=InnoDB DEFAULT CHARSET=latin1; -- ---------------------------- -- Records of role_perms -- ---------------------------- BEGIN; INSERT INTO `role_perms` VALUES (1, 1); INSERT INTO `role_perms` VALUES (2, 1); INSERT INTO `role_perms` VALUES (1, 2); INSERT INTO `role_perms` VALUES (2, 2); INSERT INTO `role_perms` VALUES (1, 3); INSERT INTO `role_perms` VALUES (1, 4); COMMIT; -- ---------------------------- -- Table structure for user -- ---------------------------- DROP TABLE IF EXISTS `user`; CREATE TABLE `user` ( `uid` int(11) NOT NULL AUTO_INCREMENT, `username` varchar(20) NOT NULL, `password` varchar(20) NOT NULL, `tel` varchar(20) NOT NULL, `addr` varchar(50) DEFAULT NULL, PRIMARY KEY (`uid`) ) ENGINE=InnoDB AUTO_INCREMENT=6 DEFAULT CHARSET=latin1; -- ---------------------------- -- Records of user -- ---------------------------- BEGIN; INSERT INTO `user` VALUES (1, 'wukong', '888888', '13333333333', 'huaguoshan'); INSERT INTO `user` VALUES (2, 'bajie', '888888', '13333333333', 'gaolaozhuang'); INSERT INTO `user` VALUES (3, 'shanseng', '888888', '13333333333', 'liushanhe'); INSERT INTO `user` VALUES (4, 'tangtang', '888888', '13333333333', 'datang'); INSERT INTO `user` VALUES (5, 'bailongma', '888888', '1111111111', 'donghailonggong'); COMMIT; -- ---------------------------- -- Table structure for user_role -- ---------------------------- DROP TABLE IF EXISTS `user_role`; CREATE TABLE `user_role` ( `uid` int(11) NOT NULL, `rid` int(11) NOT NULL, PRIMARY KEY (`uid`,`rid`), KEY `FK_Reference_2` (`rid`), CONSTRAINT `FK_Reference_1` FOREIGN KEY (`uid`) REFERENCES `user` (`uid`), CONSTRAINT `FK_Reference_2` FOREIGN KEY (`rid`) REFERENCES `Role` (`rid`) ) ENGINE=InnoDB DEFAULT CHARSET=latin1; -- ---------------------------- -- Records of user_role -- ---------------------------- BEGIN; INSERT INTO `user_role` VALUES (1, 1); INSERT INTO `user_role` VALUES (4, 1); INSERT INTO `user_role` VALUES (2, 2); INSERT INTO `user_role` VALUES (3, 2); COMMIT; SET FOREIGN_KEY_CHECKS = 1;
-
pom.xml
<?xml version="1.0" encoding="UTF-8"?> <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"> <modelVersion>4.0.0</modelVersion> <groupId>com.qfedu</groupId> <artifactId>Days47ShiroWEB</artifactId> <version>1.0-SNAPSHOT</version> <packaging>war</packaging> <dependencies> <dependency> <groupId>junit</groupId> <artifactId>junit</artifactId> <version>4.12</version> </dependency> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-web</artifactId> <version>1.3.2</version> </dependency> <dependency> <groupId>mysql</groupId> <artifactId>mysql-connector-java</artifactId> <version>5.1.44</version> </dependency> <dependency> <groupId>javax.servlet.jsp</groupId> <artifactId>jsp-api</artifactId> <version>2.2</version> <scope>provided</scope> </dependency> <dependency> <groupId>javax.servlet</groupId> <artifactId>javax.servlet-api</artifactId> <version>3.0.1</version> <scope>provided</scope> </dependency> <dependency> <groupId>jstl</groupId> <artifactId>jstl</artifactId> <version>1.2</version> </dependency> <dependency> <groupId>org.projectlombok</groupId> <artifactId>lombok</artifactId> <version>1.18.6</version> <scope>provided</scope> </dependency> <dependency> <groupId>c3p0</groupId> <artifactId>c3p0</artifactId> <version>0.9.0.2</version> </dependency> </dependencies> <build> <plugins> <!-- define the project compile level --> <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-compiler-plugin</artifactId> <version>3.6.1</version> <configuration> <source>1.8</source> <target>1.8</target> </configuration> </plugin> <!-- 添加tomcat插件 --> <plugin> <groupId>org.apache.tomcat.maven</groupId> <artifactId>tomcat7-maven-plugin</artifactId> <version>2.2</version> <configuration> <path>/</path> <port>8889</port> </configuration> </plugin> </plugins> </build> </project>
-
Web.xml
<?xml version="1.0" encoding="UTF-8"?> <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd" version="3.1"> <listener> <listener-class>org.apache.shiro.web.env.EnvironmentLoaderListener</listener-class> </listener> <filter> <filter-name>ShiroFilter</filter-name> <filter-class>org.apache.shiro.web.servlet.ShiroFilter</filter-class> </filter> <filter-mapping> <filter-name>ShiroFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> </web-app>
-
User.java
package com.qfedu.entity; import lombok.Data; import java.io.Serializable; /** * (User)實體類 * * @author makejava * @since 2020-04-14 11:06:42 */ @Data public class User implements Serializable { private static final long serialVersionUID = 617289138502785533L; private Integer uid; private String username; private String password; private String tel; private String addr; } -
Role.java
package com.qfedu.entity; import lombok.Data; import java.io.Serializable; import java.util.Set; /** * (Role)實體類 * * @author makejava * @since 2020-04-14 11:06:42 */ @Data public class Role implements Serializable { private static final long serialVersionUID = -74163700661732397L; private Integer rid; private String rname; private String rdesc; private Set<Permission> ps; } -
Permission.java
package com.qfedu.entity; import lombok.Data; import java.io.Serializable; import java.util.Set; /** * (Permission)實體類 * * @author makejava * @since 2020-04-14 11:06:42 */ @Data public class Permission implements Serializable { private static final long serialVersionUID = 581645870054218482L; private Integer pid; private String pname; private String pdesc; private Set<Role> rs; } -
在resources下創建aaa.ini文件
[main] myRealm=com.qfedu.shiro.MyRealm securityManager.realm=$myRealm authc=org.apache.shiro.web.filter.authc.FormAuthenticationFilter authc.loginUrl=/index.html [urls] /index.html=anon /main.jsp=authc /manager.jsp=authc,roles[manager] /guest.jsp=authc,roles[guest] /select.jsp=perms[select] /delete.jsp=perms[delete]
-
Env.java
package com.qfedu.util; import java.io.IOException; import java.util.Properties; public class Env extends Properties { private Env(){ try { load(getClass().getResourceAsStream("/db.properties")); } catch (IOException e) { e.printStackTrace(); } } public static Env getInstance(){ return new Env(); } } -
在resouces下創建db.properties文件
driver=com.mysql.jdbc.Driver url=jdbc:mysql://localhost:3306/rbac?useSSL=true&serverTimezone=UTC&characterEncoding=UTF-8 user=root pass=123456
-
C3P0Utils.java
package com.qfedu.util; import com.mchange.v2.c3p0.ComboPooledDataSource; import java.beans.PropertyVetoException; import java.sql.Connection; import java.sql.PreparedStatement; import java.sql.ResultSet; import java.sql.SQLException; public class C3P0Utils { private static final String DB_URL= Env.getInstance().getProperty("url"); private static final String DB_DRIVER= Env.getInstance().getProperty("driver"); private static final String DB_USERNAME= Env.getInstance().getProperty("user"); private static final String DB_PASSWORD= Env.getInstance().getProperty("pass"); public static Connection getConnection(){ Connection conn = null; try { ComboPooledDataSource ds = new ComboPooledDataSource(); ds.setDriverClass(DB_DRIVER); ds.setJdbcUrl(DB_URL); ds.setUser(DB_USERNAME); ds.setPassword(DB_PASSWORD); conn = ds.getConnection(); } catch (PropertyVetoException e) { e.printStackTrace(); } catch (SQLException e) { e.printStackTrace(); } return conn; } public static void closeAll(Connection conn, PreparedStatement ptst, ResultSet rs){ try { if(rs != null){ rs.close(); rs = null; } if(ptst != null){ ptst.close(); ptst = null; } if(conn != null){ conn.close(); conn = null; } } catch (SQLException e) { e.printStackTrace(); } } } -
IUserDao.java
package com.qfedu.dao; import com.qfedu.entity.Permission; import com.qfedu.entity.Role; import com.qfedu.entity.User; import java.util.List; public interface IUserDao { User login(String username, String pass); List<Role> getAllRolesByUsername(String username); List<Permission> getAllPermissionsByUsername(String username); } -
UserDaoImpl.java
package com.qfedu.dao.impl; import com.qfedu.dao.IUserDao; import com.qfedu.entity.Permission; import com.qfedu.entity.Role; import com.qfedu.entity.User; import com.qfedu.util.C3P0Utils; import org.junit.Test; import java.sql.Connection; import java.sql.PreparedStatement; import java.sql.ResultSet; import java.sql.SQLException; import java.util.ArrayList; import java.util.List; public class UserDaoImpl implements IUserDao { private Connection conn = null; private PreparedStatement ptst = null; private ResultSet rs = null; @Override public User login(String username, String pass) { User u = null; try { conn = C3P0Utils.getConnection(); String sql = "select * from user where username = ? and password = ?"; ptst = conn.prepareStatement(sql); ptst.setString(1, username); ptst.setString(2, pass); rs = ptst.executeQuery(); if(rs.next()){ u = new User(); u.setUid(rs.getInt(1)); u.setUsername(rs.getString(2)); u.setPassword(rs.getString(3)); u.setTel(rs.getString(4)); u.setAddr(rs.getString(5)); } } catch (SQLException e) { e.printStackTrace(); }finally { C3P0Utils.closeAll(conn, ptst, rs); } return u; } @Override public List<Role> getAllRolesByUsername(String username) { List<Role> list = null; try { conn = C3P0Utils.getConnection(); String sql = "SELECT r.* \n" + "\tFROM `user` u\n" + "\tINNER JOIN user_role ur on u.uid = ur.uid\n" + "\tINNER JOIN role r on ur.rid = r.rid\n" + "\twhere u.username = ? "; ptst = conn.prepareStatement(sql); ptst.setString(1, username); rs = ptst.executeQuery(); if(rs != null){ list = new ArrayList<>(); Role r = null; while (rs.next()){ r = new Role(); r.setRid(rs.getInt(1)); r.setRname(rs.getString(2)); r.setRdesc(rs.getString(3)); list.add(r); } } } catch (SQLException e) { e.printStackTrace(); }finally { C3P0Utils.closeAll(conn, ptst, rs); } return list; } @Override public List<Permission> getAllPermissionsByUsername(String username) { List<Permission> list = null; try { conn = C3P0Utils.getConnection(); String sql = "SELECT p.* \n" + "\tFROM `user` u\n" + "\tINNER JOIN user_role ur on u.uid = ur.uid\n" + "\tINNER JOIN role r on ur.rid = r.rid\n" + "\tINNER JOIN role_perms rp on r.rid = rp.rid\n" + "\tINNER JOIN permission p on rp.pid = p.pid\n" + "\twhere u.username = ?"; ptst = conn.prepareStatement(sql); ptst.setString(1, username); rs = ptst.executeQuery(); if(rs != null){ list = new ArrayList<>(); Permission r = null; while (rs.next()){ r = new Permission(); r.setPid(rs.getInt(1)); r.setPname(rs.getString(2)); r.setPdesc(rs.getString(3)); list.add(r); } } } catch (SQLException e) { e.printStackTrace(); }finally { C3P0Utils.closeAll(conn, ptst, rs); } return list; } @Test public void testlogin(){ System.out.println(new UserDaoImpl().login("wukong", "888888")); } @Test public void testGetRoles(){ System.out.println(new UserDaoImpl().getAllRolesByUsername("wukong")); } } -
IUserService.java
package com.qfedu.service; import com.qfedu.entity.Permission; import com.qfedu.entity.Role; import com.qfedu.entity.User; import java.util.List; public interface IUserService { User login(String username, String pass); List<Role> getAllRolesByUsername(String username); List<Permission> getAllPermissionsByUsername(String username); } -
UserServiceImpl.java
package com.qfedu.service.impl; import com.qfedu.dao.IUserDao; import com.qfedu.dao.impl.UserDaoImpl; import com.qfedu.entity.Permission; import com.qfedu.entity.Role; import com.qfedu.entity.User; import com.qfedu.service.IUserService; import java.util.List; public class UserServiceImpl implements IUserService { private IUserDao userDao = new UserDaoImpl(); @Override public User login(String username, String pass) { return userDao.login(username, pass); } @Override public List<Role> getAllRolesByUsername(String username) { return userDao.getAllRolesByUsername(username); } @Override public List<Permission> getAllPermissionsByUsername(String username) { return userDao.getAllPermissionsByUsername(username); } } -
MyRealm.java
package com.qfedu.shiro; import com.qfedu.entity.Permission; import com.qfedu.entity.Role; import com.qfedu.entity.User; import com.qfedu.service.IUserService; import com.qfedu.service.impl.UserServiceImpl; import org.apache.shiro.authc.*; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; import org.apache.shiro.subject.PrincipalCollection; import org.apache.shiro.web.filter.authc.FormAuthenticationFilter; import java.util.List; public class MyRealm extends AuthorizingRealm { FormAuthenticationFilter f; private IUserService userService = new UserServiceImpl(); @Override protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) { SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); System.out.println(principals + "000000"); String username = getAvailablePrincipal(principals).toString(); List<Role> list = userService.getAllRolesByUsername(username); for (Role r : list) { info.addRole(r.getRname()); } List<Permission> permissionList = userService.getAllPermissionsByUsername(username); for (Permission p : permissionList) { info.addStringPermission(p.getPname()); } return info; } @Override protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException { AuthenticationInfo info = null; UsernamePasswordToken tk = (UsernamePasswordToken) token; String username = tk.getUsername(); char[] password = tk.getPassword(); String pass = new String(password); User u = userService.login(username, pass); if (u != null && u.getUid() != 0){ info = new SimpleAuthenticationInfo(username, pass, getName()); } return info; } } -
UserServlet.java
package com.qfedu.controller; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.config.IniSecurityManagerFactory; import org.apache.shiro.mgt.SecurityManager; import org.apache.shiro.subject.Subject; import javax.servlet.ServletException; import javax.servlet.annotation.WebServlet; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; @WebServlet(urlPatterns = "/UserServlet") public class UserServlet extends HttpServlet { protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { String username = request.getParameter("username"); String password = request.getParameter("password"); // 構建SecurityManager工廠，IniSecurityManagerFactory可以從ini文件中初始化SecurityManager環境 IniSecurityManagerFactory factory = new IniSecurityManagerFactory("classpath:aaa.ini"); // 通過工廠創建SecurityManager SecurityManager manager = factory.getInstance(); // 將SecurityManager設置到運行環境中 SecurityUtils.setSecurityManager(manager); //創建一個Subject實例，該實例認證需要使用上面創建的SecurityManager Subject subject = SecurityUtils.getSubject(); //創建token令牌，賬號和密碼是ini文件中配置的 UsernamePasswordToken token = new UsernamePasswordToken(username, password); try { //用戶登錄 subject.login(token); } catch (AuthenticationException e) { e.printStackTrace(); } System.out.println(subject.hasRole("manager")); System.out.println(subject.hasRole("guest")); System.out.println(subject.isPermitted("select")); System.out.println(subject.isPermitted("delete")); if(subject.isAuthenticated()){ response.sendRedirect("main.jsp"); } } protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { doPost(request, response); } } -
index.html
<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <title>index</title> </head> <body> <h1>this is index page.</h1> <form action="UserServlet" method="post"> username:<input type="text" name="username" /><p /> password:<input type="text" name="password" /><p /> <input type="submit" value="submit" /><p /> </form> </body> </html>
-
main.jsp
<%-- Created by IntelliJ IDEA. User: james Date: 2020/4/14 Time: 2:52 PM To change this template use File | Settings | File Templates. --%> <%@ page contentType="text/html;charset=UTF-8" language="java" %> <%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %> <html> <head> <title>main</title> </head> <body> <h1>this is main page.</h1> <shiro:authenticated>i am login successfully.</shiro:authenticated><p /> <shiro:hasRole name="manager">i am a manager</shiro:hasRole><p /> <shiro:hasRole name="guest">i am a guest</shiro:hasRole><p /> <shiro:user> welcome back <shiro:principal/>! Not <shiro:principal/>? Click <a href="index.html">here</a> to login </shiro:user><p /> <shiro:hasPermission name="select">i can select</shiro:hasPermission><p /> <shiro:hasPermission name="delete">i can delete</shiro:hasPermission><p /> </body> </html>
-
最終訪問該項目，可以完成登陸認證、以及授權情況