Java tutorial
/******************************************************************************* * Copyright (c) 2005, 2014 springside.github.io * * Licensed under the Apache License, Version 2.0 (the "License"); *******************************************************************************/ package com.enlight.game.service.account; import java.io.Serializable; import java.util.ArrayList; import java.util.List; import javax.annotation.PostConstruct; import javax.servlet.ServletRequest; import javax.servlet.http.HttpServletRequest; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.AuthenticationInfo; import org.apache.shiro.authc.AuthenticationToken; import org.apache.shiro.authc.SimpleAuthenticationInfo; import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.authc.credential.HashedCredentialsMatcher; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; import org.apache.shiro.subject.PrincipalCollection; import org.apache.shiro.util.ByteSource; import org.apache.shiro.web.subject.WebSubject; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.beans.factory.annotation.Autowired; import org.springside.modules.utils.Encodes; import com.enlight.game.entity.User; import com.enlight.game.entity.UserRole; import com.enlight.game.service.store.StoreService; import com.enlight.game.service.userRole.UserRoleService; import com.google.common.base.Objects; import com.octo.captcha.service.CaptchaService; public class ShiroDbRealm extends AuthorizingRealm { private static final Logger logger = LoggerFactory.getLogger(ShiroDbRealm.class); protected AccountService accountService; @Autowired protected UserRoleService userRoleService; @Autowired private StoreService storeService; @Autowired private CaptchaService captchaService; /** * ?,. */ @Override protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException { UsernamePasswordToken token = (UsernamePasswordToken) authcToken; User user = accountService.findUserByLoginName(token.getUsername()); ServletRequest request = ((WebSubject) SecurityUtils.getSubject()).getServletRequest(); String passw = request.getParameter("password"); String storeName = null; if (request.getParameter("password") != null) { logger.debug("..."); HttpServletRequest trequest = (HttpServletRequest) request; String captchaID = trequest.getSession().getId(); Boolean flag = false; flag = captchaService.validateResponseForID(captchaID, request.getParameter("j_captcha")); if (flag.booleanValue()) { logger.debug("??"); String storeId = request.getParameter("storeId"); String categoryId = request.getParameter("categoryId"); if (storeId != "" && storeId != null) { storeName = storeService.findById(Integer.valueOf(storeId)).getName(); } else { storeName = null; } if (user != null) { if (isNomal(user)) { byte[] salt = Encodes.decodeHex(user.getSalt()); return new SimpleAuthenticationInfo( new ShiroUser(user.getId(), user.getLoginName(), user.getName(), storeId, categoryId, storeName, passw), user.getPassword(), ByteSource.Util.bytes(salt), getName()); } return null; } else { return null; } } else { logger.debug("??"); return null; } } else if (request.getParameter("password") == null) { logger.debug("?..."); String storeId = (String) request.getAttribute("storeId"); String categoryId = (String) request.getAttribute("categoryId"); String password = (String) request.getAttribute("password"); if (storeId != "" && storeId != null) { storeName = storeService.findById(Integer.valueOf(storeId)).getName(); } else { storeName = null; } if (user != null) { if (isNomal(user)) { byte[] salt = Encodes.decodeHex(user.getSalt()); return new SimpleAuthenticationInfo( new ShiroUser(user.getId(), user.getLoginName(), user.getName(), storeId, categoryId, storeName, password), user.getPassword(), ByteSource.Util.bytes(salt), getName()); } return null; } else { return null; } } else { return null; } } private boolean isNomal(User user) { if (user.getStatus().equals(User.STATUS_VALIDE)) { return true; } return false; } /** * ?, ???. */ @Override protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) { ShiroUser shiroUser = (ShiroUser) principals.getPrimaryPrincipal(); User user = accountService.findUserByLoginName(shiroUser.loginName); SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); if (user.getRoles().length() == 0 && user.getStoreId() != null && user.getStoreId() != "" && user.getStoreId().length() != 0) { UserRole userRole = userRoleService .findByUserIdAndStoreId(user.getId(), Long.parseLong(shiroUser.getStoreId())).get(0); List<String> list = userRole.getRoleList(); List<String> f = new ArrayList<String>(); for (String str : list) { f.add(str); } f.add(shiroUser.categoryId); info.addRoles(f); } else if (user.getRoles().equals(User.USER_ROLE_ADMIN)) { info.addRoles(user.getRoleList()); } else { info.addRoles(user.getRoleList()); } return info; } /** * PasswordHash. */ @PostConstruct public void initCredentialsMatcher() { HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(AccountService.HASH_ALGORITHM); matcher.setHashIterations(AccountService.HASH_INTERATIONS); setCredentialsMatcher(matcher); } public void setAccountService(AccountService accountService) { this.accountService = accountService; } /** * AuthenticationSubject??????. */ public static class ShiroUser implements Serializable { private static final long serialVersionUID = -1373760761780840081L; public Long id; public String loginName; public String name; //id public String storeId; public String categoryId; public String storeName; public String passw; public ShiroUser(Long id, String loginName, String name, String storeId, String categoryId, String storeName, String passw) { this.id = id; this.loginName = loginName; this.name = name; this.storeId = storeId; this.categoryId = categoryId; this.storeName = storeName; this.passw = passw; } public String getName() { return name; } /** * <shiro:principal/>. */ @Override public String toString() { return loginName; } public String getStoreId() { return storeId; } public void setStoreId(String storeId) { this.storeId = storeId; } public String getCategoryId() { return categoryId; } public String getStoreName() { return storeName; } public String getPassw() { return passw; } /** * ?hashCode,?loginName; */ @Override public int hashCode() { return Objects.hashCode(loginName); } /** * ?equals,?loginName; */ @Override public boolean equals(Object obj) { if (this == obj) { return true; } if (obj == null) { return false; } if (getClass() != obj.getClass()) { return false; } ShiroUser other = (ShiroUser) obj; if (loginName == null) { if (other.loginName != null) { return false; } } else if (!loginName.equals(other.loginName)) { return false; } return true; } } }