waiter.config.web

Class ShiroConfig

java.lang.Object

waiter.config.web.ShiroConfig

@Configuration
public class ShiroConfig
extends Object

shiro权限管理的配置

Constructor Summary

Constructors

Constructor and Description
ShiroConfig()

Method Summary

Modifier and Type	Method and Description
org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor	authorizationAttributeSourceAdvisor(org.apache.shiro.web.mgt.DefaultWebSecurityManager securityManager) 启用shrio授权注解拦截方式，AOP式方法级权限检查
org.apache.shiro.web.session.mgt.DefaultWebSessionManager	defaultWebSessionManager(org.apache.shiro.cache.CacheManager cacheShiroManager, WaiterProperties waiterProperties) session管理器(单机环境)
org.apache.shiro.cache.CacheManager	getCacheShiroManager(org.springframework.cache.ehcache.EhCacheManagerFactoryBean ehcache) 缓存管理器 使用Ehcache实现
org.apache.shiro.spring.LifecycleBeanPostProcessor	lifecycleBeanPostProcessor() Shiro生命周期处理器: 用于在实现了Initializable接口的Shiro bean初始化时调用Initializable接口回调(例如:UserRealm) 在实现了Destroyable接口的Shiro bean销毁时调用 Destroyable接口回调(例如:DefaultSecurityManager)
org.springframework.beans.factory.config.MethodInvokingFactoryBean	methodInvokingFactoryBean(org.apache.shiro.web.mgt.DefaultWebSecurityManager securityManager) 在方法中 注入 securityManager,进行代理控制
org.apache.shiro.web.servlet.SimpleCookie	rememberMeCookie() 记住密码Cookie
org.apache.shiro.web.mgt.CookieRememberMeManager	rememberMeManager(org.apache.shiro.web.servlet.SimpleCookie rememberMeCookie) rememberMe管理器, cipherKey生成见Base64Test.java
org.apache.shiro.web.mgt.DefaultWebSecurityManager	securityManager(org.apache.shiro.web.mgt.CookieRememberMeManager rememberMeManager, org.apache.shiro.cache.CacheManager cacheShiroManager, org.apache.shiro.session.mgt.SessionManager sessionManager) 安全管理器
org.apache.shiro.web.session.mgt.ServletContainerSessionManager	servletContainerSessionManager() spring session管理器（多机环境）
ShiroDbRealm	shiroDbRealm() 项目自定义的Realm
org.apache.shiro.spring.web.ShiroFilterFactoryBean	shiroFilter(org.apache.shiro.web.mgt.DefaultWebSecurityManager securityManager) Shiro的过滤器链

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ShiroConfig

public ShiroConfig()

Method Detail

securityManager

@Bean
public org.apache.shiro.web.mgt.DefaultWebSecurityManager securityManager(org.apache.shiro.web.mgt.CookieRememberMeManager rememberMeManager,
                                                                                org.apache.shiro.cache.CacheManager cacheShiroManager,
                                                                                org.apache.shiro.session.mgt.SessionManager sessionManager)

安全管理器

servletContainerSessionManager

@Bean
 @ConditionalOnProperty(prefix="waiter",
                       name="spring-session-open",
                       havingValue="true")
public org.apache.shiro.web.session.mgt.ServletContainerSessionManager servletContainerSessionManager()

spring session管理器（多机环境）

defaultWebSessionManager

@Bean
 @ConditionalOnProperty(prefix="waiter",
                       name="spring-session-open",
                       havingValue="false")
public org.apache.shiro.web.session.mgt.DefaultWebSessionManager defaultWebSessionManager(org.apache.shiro.cache.CacheManager cacheShiroManager,
                                                                                                                                                                                                                                        WaiterProperties waiterProperties)

session管理器(单机环境)

getCacheShiroManager

@Bean
public org.apache.shiro.cache.CacheManager getCacheShiroManager(org.springframework.cache.ehcache.EhCacheManagerFactoryBean ehcache)

缓存管理器 使用Ehcache实现

shiroDbRealm

@Bean
public ShiroDbRealm shiroDbRealm()

项目自定义的Realm

rememberMeManager

@Bean
public org.apache.shiro.web.mgt.CookieRememberMeManager rememberMeManager(org.apache.shiro.web.servlet.SimpleCookie rememberMeCookie)

rememberMe管理器, cipherKey生成见Base64Test.java

rememberMeCookie

@Bean
public org.apache.shiro.web.servlet.SimpleCookie rememberMeCookie()

记住密码Cookie

shiroFilter

@Bean
public org.apache.shiro.spring.web.ShiroFilterFactoryBean shiroFilter(org.apache.shiro.web.mgt.DefaultWebSecurityManager securityManager)

Shiro的过滤器链

methodInvokingFactoryBean

@Bean
public org.springframework.beans.factory.config.MethodInvokingFactoryBean methodInvokingFactoryBean(org.apache.shiro.web.mgt.DefaultWebSecurityManager securityManager)

在方法中 注入 securityManager,进行代理控制

lifecycleBeanPostProcessor

@Bean
public org.apache.shiro.spring.LifecycleBeanPostProcessor lifecycleBeanPostProcessor()

Shiro生命周期处理器: 用于在实现了Initializable接口的Shiro bean初始化时调用Initializable接口回调(例如:UserRealm) 在实现了Destroyable接口的Shiro bean销毁时调用 Destroyable接口回调(例如:DefaultSecurityManager)

authorizationAttributeSourceAdvisor

@Bean
public org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(org.apache.shiro.web.mgt.DefaultWebSecurityManager securityManager)

启用shrio授权注解拦截方式，AOP式方法级权限检查