springboot集成shiro——登陆记住我

在shiro配置类中增加两个方法：

com.resthour.config.shrio.ShiroConfiguration

  /**
      * cookie管理对象
      * @return
      */
     @Bean
     public CookieRememberMeManager cookieRememberMeManager(){
         log.info("shiroConfiguration:rememberMeManager");
         CookieRememberMeManager cookieRememberMeManager = new CookieRememberMeManager();
         cookieRememberMeManager.setCookie(rememberMeCookie());
         return cookieRememberMeManager;
     }

     @Bean
     public SimpleCookie rememberMeCookie(){
         log.info("shiroConfiguration:rememberMeCookie");
         /*这个参数是cookie的名称，对应前端页面的checkbox的name=remremberMe*/
         SimpleCookie simpleCookie = new SimpleCookie("rememberMe");
         /*cookie的有效时间为30天，单位秒*/
         simpleCookie.setMaxAge(259200);
         return simpleCookie;
     }

将rememberMeCookie注入到SecurityManager中

  @Bean
     public SecurityManager securityManager() {
         DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
         /*设置realm*/
         securityManager.setRealm(myShiroRealm());
         /*注入缓存管理器*/
         securityManager.setCacheManager(ehCacheManager());
         /*注入cookie管理器*/
         securityManager.setRememberMeManager(cookieRememberMeManager());
         return securityManager;
     }

在shiro过滤器加入记住我过滤器

 @Bean
     public ShiroFilterFactoryBean shirFilter(SecurityManager securityManager) {
         log.info("ShiroFilterFactoryBean 实例化");
         ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
         shiroFilterFactoryBean.setSecurityManager(securityManager);

         Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
         filterChainDefinitionMap.put("/logout", "logout");
         /*匿名可以访问的地址*/
         filterChainDefinitionMap.put("/favicon.ico", "anon");
         filterChainDefinitionMap.put("/user/tologin", "anon");

         /*配置记住我或认证通过可以访问的地址*/
         filterChainDefinitionMap.put("/user/index", "user");
         filterChainDefinitionMap.put("/", "user");
         /*所有路径必须授权访问，且必须放在最后*/
         filterChainDefinitionMap.put("/**", "authc");
         /*登陆提交地址*/
         shiroFilterFactoryBean.setLoginUrl("/user/login");
         /*验证通过可以访问的地址*/
         shiroFilterFactoryBean.setSuccessUrl("/user/index");
         /*访问没有授权的资源*/
         shiroFilterFactoryBean.setUnauthorizedUrl("/403");

         shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);

         return shiroFilterFactoryBean;
     }

然后在登陆页面加入多选框记住我，关键name的值必须和shiro配置类中参数一致

SimpleCookie simpleCookie = new SimpleCookie("rememberMe");

 <!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8">
     <title>登陆页面</title>
 </head>
 <body>
     错误信息：<h4 th:text="${msg}"></h4>
     <form action="/user/login" method="post">
         <p>帐号：<input type="text" name="username" value="admin"></p>
         <p>密码：<input type="text" name="password" value="1234"></p>
         <p><input type="submit"  value="登陆"><input type="checkbox" name="rememberMe">记住我</p>
     </form>

 </body>
 </html>

最后附上完整的shiro配置类

 package com.resthour.config.shrio;

 import com.resthour.realm.MyShiroRealm;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.shiro.cache.ehcache.EhCacheManager;
 import org.apache.shiro.mgt.SecurityManager;
 import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
 import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
 import org.apache.shiro.web.mgt.CookieRememberMeManager;
 import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
 import org.apache.shiro.web.servlet.SimpleCookie;
 import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;

 import java.util.LinkedHashMap;
 import java.util.Map;

 /**
  * shiro配置类
  *
  * @author baobao
  * @date 2018-04-01 14:48
  */
 @Configuration
 @Slf4j
 public class ShiroConfiguration {

     @Bean
     public ShiroFilterFactoryBean shirFilter(SecurityManager securityManager) {
         log.info("ShiroFilterFactoryBean 实例化");
         ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
         shiroFilterFactoryBean.setSecurityManager(securityManager);

         Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
         filterChainDefinitionMap.put("/logout", "logout");
         /*匿名可以访问的地址*/
         filterChainDefinitionMap.put("/favicon.ico", "anon");
         filterChainDefinitionMap.put("/user/tologin", "anon");

         /*配置记住我或认证通过可以访问的地址*/
         filterChainDefinitionMap.put("/user/index", "user");
         filterChainDefinitionMap.put("/", "user");
         /*所有路径必须授权访问，且必须放在最后*/
         filterChainDefinitionMap.put("/**", "authc");
         /*登陆提交地址*/
         shiroFilterFactoryBean.setLoginUrl("/user/login");
         /*验证通过可以访问的地址*/
         shiroFilterFactoryBean.setSuccessUrl("/user/index");
         /*访问没有授权的资源*/
         shiroFilterFactoryBean.setUnauthorizedUrl("/403");

         shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);

         return shiroFilterFactoryBean;
     }

     @Bean
     public SecurityManager securityManager() {
         DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
         /*设置realm*/
         securityManager.setRealm(myShiroRealm());
         /*注入缓存管理器*/
         securityManager.setCacheManager(ehCacheManager());
         /*注入cookie管理器*/
         securityManager.setRememberMeManager(cookieRememberMeManager());
         return securityManager;
     }

     /**
      * 自定义realm
      * @return
      */
     @Bean
     public MyShiroRealm myShiroRealm() {
         MyShiroRealm myShiroRealm = new MyShiroRealm();
         return myShiroRealm;
     }

     /**
      *  开启Shiro的注解(如@RequiresRoles,@RequiresPermissions),需借助SpringAOP扫描使用Shiro注解的类,并在必要时进行安全逻辑验证
      * 配置以下两个bean(DefaultAdvisorAutoProxyCreator和AuthorizationAttributeSourceAdvisor)即可实现此功能
      * @return
      */
     @Bean
     public DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator(){
         DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
         advisorAutoProxyCreator.setProxyTargetClass(true);
         return advisorAutoProxyCreator;
     }

     /**
      * 开启aop注解支持
      * @param securityManager
      * @return
      */
     @Bean
     public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
         AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
         authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
         return authorizationAttributeSourceAdvisor;
     }

     /**
      * 缓存管理对象
      * @return
      */
     @Bean
     public EhCacheManager ehCacheManager(){
         EhCacheManager ehCacheManager = new EhCacheManager();
         ehCacheManager.setCacheManagerConfigFile("classpath:config/ehcache-shiro.xml");
         return ehCacheManager;
     }

     /**
      * cookie管理对象
      * @return
      */
     @Bean
     public CookieRememberMeManager cookieRememberMeManager(){
         log.info("shiroConfiguration:rememberMeManager");
         CookieRememberMeManager cookieRememberMeManager = new CookieRememberMeManager();
         cookieRememberMeManager.setCookie(rememberMeCookie());
         return cookieRememberMeManager;
     }

     @Bean
     public SimpleCookie rememberMeCookie(){
         log.info("shiroConfiguration:rememberMeCookie");
         /*这个参数是cookie的名称，对应前端页面的checkbox的name=remremberMe*/
         SimpleCookie simpleCookie = new SimpleCookie("rememberMe");
         /*cookie的有效时间为30天，单位秒*/
         simpleCookie.setMaxAge(259200);
         return simpleCookie;
     }

 }