me.leep.wf.services.system.impl.ShiroRealmImpl.java Source code

Introduction

Here is the source code for me.leep.wf.services.system.impl.ShiroRealmImpl.java

Source

/*********************************************************************
 * ???
 *
 *  Apache License, Version 2.0 ????
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 ********************************************************************/
package me.leep.wf.services.system.impl;

import java.io.Serializable;

import me.leep.wf.entity.system.UserBean;
import me.leep.wf.repository.system.UserRepository;

import org.activiti.engine.IdentityService;
import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.crypto.hash.Sha256Hash;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.util.ByteSource;
import org.springframework.beans.factory.annotation.Autowired;

/**
 * http://shiro.apache.org/java-authentication-guide.html
 * 
 * Subject Security specific user 'view' of an application user. It can be a
 * human being, a third-party process, a server connecting to you application
 * application, or even a cron job. Basically, it is anything or anyone
 * communicating with your application.
 * 
 * Principals A subjects identifying attributes. First name, last name, social
 * security number, username
 * 
 * Credentials secret data that are used to verify identities. Passwords,
 * Biometric data, x509 certificates,
 * 
 * Realms Security specific DAO, data access object, software component that
 * talkts to a backend data source. If you have usernames and password in LDAP,
 * then you would have an LDAP Realm that would communicate with LDAP. The idea
 * is that you would use a realm per back-end data source and Shiro would know
 * how to coordinate with these realms together to do what you have to do.
 * 
 * @author ??
 * 
 */
public class ShiroRealmImpl extends AuthorizingRealm {
    @Autowired
    private IdentityService identityService;

    @Autowired
    private UserRepository userRepository;

    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        System.out.println(
                " , ?loaddoGetAuthorizationInfo.................");

        //  doGetAuthenticationInfo ?
        ShiroUser shiroUser = (ShiroUser) principals.fromRealm(getName()).iterator().next();

        String userName = shiroUser.getName();
        if (StringUtils.equals("admin", userName)) {

            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();

            // ?<shiro:hasRole>name
            info.addRole("admin");
            // ? <shiro:hasPermission> name
            info.addStringPermission("user:edit");

            return info;
        } else if (StringUtils.equals("test", userName)) {
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();

            // ?<shiro:hasRole>name
            info.addRole("test");
            // ? <shiro:hasPermission> name,  ?,? 
            info.addStringPermission("user:view");

            return info;
        } else {
            return null;
        }
    }

    /**
     * AuthenticationInfo represents a Subject's (aka user's) stored account
     * information relevant to the authentication/log-in process only.
     */
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {

        UsernamePasswordToken usernamePasswordToke = (UsernamePasswordToken) token;

        String username = usernamePasswordToke.getUsername();

        System.out.println("====================?  begin ==========================");
        System.out.println("username: " + username);
        System.out.print("password: ");
        System.out.println(usernamePasswordToke.getPassword());
        System.out.println("principal: " + usernamePasswordToke.getPrincipal());
        System.out.println("======================?  end ========================");

        /**
         * Constructor that takes in a single 'primary' principal of the
         * account, its corresponding hashed credentials, the salt used to hash
         * the credentials, and the name of the realm to associate with the
         * principals. This is a convenience constructor and will construct a
         * PrincipalCollection based on the principal and realmName argument.
         * 
         * 
         * Parameters:
         * 
         * principal - the 'primary' principal associated with the specified
         * realm. hashedCredentials - the hashed credentials that verify the
         * given principal. credentialsSalt - the salt used when hashing the
         * given hashedCredentials realmName - the realm from where the
         * principal and credentials were acquired.
         */
        String encodedPassword = new Sha256Hash(usernamePasswordToke.getPassword()).toBase64();
        boolean isAuth = identityService.checkPassword(username, encodedPassword);
        if (isAuth) {
            UserBean user = userRepository.findByNumber(username).get(0);
            return new SimpleAuthenticationInfo(new ShiroUser(user.getId(), user.getNumber(), user.getName()),
                    String.valueOf(usernamePasswordToke.getPassword()), ByteSource.Util.bytes(user.getId()),
                    getName());
        } else
            return null;
    }

    /**
     * AuthenticationSubject??????.
     */
    public static class ShiroUser implements Serializable {
        private static final long serialVersionUID = -1373760761780840081L;
        public String id;
        public String number;
        public String name;

        public ShiroUser(String userid, String number, String name) {
            this.id = userid;
            this.number = number;
            this.name = name;
        }

        public ShiroUser(String number, String name) {
            this.number = number;
            this.name = name;
        }

        public String getName() {
            return name;
        }

        /**
         * <shiro:principal/>.
         */
        @Override
        public String toString() {
            return number;
        }

        public String getDisplayName() {
            return name;
        }

    }

}