me.leep.wf.services.system.impl.TestShiroRealmImpl.java Source code

Introduction

Here is the source code for me.leep.wf.services.system.impl.TestShiroRealmImpl.java

Source

/*********************************************************************
 * ???
 *
 *  Apache License, Version 2.0 ????
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 ********************************************************************/
package me.leep.wf.services.system.impl;

import java.io.Serializable;

import org.apache.commons.lang.StringUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.util.ByteSource;

/**
 *  ?,?. ?  ????? http://shiro.apache.org/java-authentication-guide.html
 * 
 * Subject       Security specific user 'view' of an application user. It can be a human being, a third-party process, 
 *                a server connecting to you application application, or even a cron job. Basically, it is anything or 
 *                anyone communicating with your application.
 * 
 * Principals   A subjects identifying attributes. First name, last name, social security number, username
 * 
 * Credentials   secret data that are used to verify identities. Passwords, Biometric data, x509 certificates,
 * 
 * Realms      Security specific DAO, data access object, software component that talkts to a backend data source. 
 *             If you have usernames and password in LDAP, then you would have an LDAP Realm that would communicate 
 *             with LDAP. The idea is that you would use a realm per back-end data source and Shiro would know how 
 *             to coordinate with these realms together to do what you have to do.
 * 
 * @author fq1798
 *
 */
public class TestShiroRealmImpl extends AuthorizingRealm {

    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        System.out.println(
                " , ?loaddoGetAuthorizationInfo.................");

        // doGetAuthenticationInfo ?
        ShiroUser shiroUser = (ShiroUser) principals.fromRealm(getName()).iterator().next();

        String userName = shiroUser.getName();
        if (StringUtils.equals("admin", userName)) {

            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();

            //?<shiro:hasRole>name
            info.addRole("admin");
            //? <shiro:hasPermission> name
            info.addStringPermission("user:edit");

            return info;
        } else if (StringUtils.equals("test", userName)) {
            SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();

            //?<shiro:hasRole>name
            info.addRole("test");
            //? <shiro:hasPermission> name,  ?,?  
            info.addStringPermission("user:view");

            return info;
        } else {
            return null;
        }
    }

    /**
     * AuthenticationInfo represents a Subject's (aka user's) stored account information 
     * relevant to the authentication/log-in process only. 
     */
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {

        UsernamePasswordToken usernamePasswordToke = (UsernamePasswordToken) token;

        String username = usernamePasswordToke.getUsername();

        System.out.println("====================?  begin ==========================");
        System.out.println("username: " + username);
        System.out.print("password: ");
        System.out.println(usernamePasswordToke.getPassword());
        System.out.println("principal: " + usernamePasswordToke.getPrincipal());
        System.out.println("======================?  end ========================");

        /**
         * Constructor that takes in a single 'primary' principal of the account, its corresponding hashed credentials, the salt used to hash the credentials, and the name of the realm to associate with the principals.
         * This is a convenience constructor and will construct a PrincipalCollection based on the principal and realmName argument.
         * 
         * 
         * Parameters:
         * 
         * principal - the 'primary' principal associated with the specified realm.
         * hashedCredentials - the hashed credentials that verify the given principal.
         * credentialsSalt - the salt used when hashing the given hashedCredentials
         * realmName - the realm from where the principal and credentials were acquired.
         */
        if (StringUtils.equals("admin", username)) {
            return new SimpleAuthenticationInfo(new ShiroUser("admin", "admin"), "admin",
                    ByteSource.Util.bytes("admin"), getName());
        } else if (StringUtils.equals("test", username)) {
            return new SimpleAuthenticationInfo(new ShiroUser("test", "test"), "test",
                    ByteSource.Util.bytes("test"), getName());
        }
        return null;
    }

    /**
     * AuthenticationSubject??????.
     */
    public static class ShiroUser implements Serializable {
        private static final long serialVersionUID = -1373760761780840081L;
        public String loginName;
        public String name;

        public ShiroUser(String loginName, String name) {
            this.loginName = loginName;
            this.name = name;
        }

        public String getName() {
            return name;
        }

        /**
         * <shiro:principal/>.
         */
        @Override
        public String toString() {
            return loginName;
        }

        //      /**
        //       * ?equals,?loginName;
        //       */
        //      @Override
        //      public int hashCode() {
        //         return HashCodeBuilder.reflectionHashCode(this, "loginName");
        //      }
        //
        //      /**
        //       * ?equals,?loginName
        //       */
        //      @Override
        //      public boolean equals(Object obj) {
        //         return EqualsBuilder.reflectionEquals(this, obj, "loginName");
        //      }
    }

}