shiro-web整合

1.所需要jar

 <!-- shiro核心包 -->
         <dependency>
             <groupId>org.apache.shiro</groupId>
             <artifactId>shiro-core</artifactId>
             <version>1.2.5</version>
         </dependency>
         <!-- 添加shiro web支持 -->
         <dependency>
             <groupId>org.apache.shiro</groupId>
             <artifactId>shiro-web</artifactId>
             <version>1.2.5</version>
         </dependency>

         <!-- 添加sevlet支持 -->
         <dependency>
             <groupId>javax.servlet</groupId>
             <artifactId>javax.servlet-api</artifactId>
             <version>3.1.0</version>
         </dependency>
         <!-- 添加jsp支持 -->
         <dependency>
             <groupId>javax.servlet.jsp</groupId>
             <artifactId>javax.servlet.jsp-api</artifactId>
             <version>2.3.1</version>
         </dependency>
         <!-- 添加jstl支持 -->
         <dependency>
             <groupId>javax.servlet</groupId>
             <artifactId>jstl</artifactId>
             <version>1.2</version>
         </dependency>
         <!-- 添加log4j日志 -->
         <dependency>
             <groupId>log4j</groupId>
             <artifactId>log4j</artifactId>
             <version>1.2.17</version>
         </dependency>
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
             <version>1.2</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>
             <version>1.7.21</version>
         </dependency>

2.shiro.ini

 [main]
 authc.loginUrl=/login

 [users]
 csdn1=123,admin,teacher
 csdn2=123,teacher
 csdn3=123,student
 csdn4=123

 [roles]
 admin=user:*,student:*
 teacher=student:*

 [urls]
 /login=anon
 /admin=authc

3.ShiroUtil.java

 package util;

 import org.apache.shiro.SecurityUtils;
 import org.apache.shiro.authc.UsernamePasswordToken;
 import org.apache.shiro.config.IniSecurityManagerFactory;
 import org.apache.shiro.mgt.SecurityManager;
 import org.apache.shiro.subject.Subject;
 import org.apache.shiro.util.Factory;

 public class ShiroUtil {

     public static Subject getCurrUser(String config,String username,String password){
         //初始化工厂
                 Factory<SecurityManager> factory=new IniSecurityManagerFactory(config);
                  SecurityManager securityManager=factory.getInstance();
                  SecurityUtils.setSecurityManager(securityManager);
                  Subject subject=SecurityUtils.getSubject();
                  UsernamePasswordToken token=new UsernamePasswordToken(username,password);
                 try {
                      subject.login(token);
                      System.out.println("登陆成功");
                 } catch (Exception e) {
                      e.printStackTrace();
                      System.out.println("登陆失败");
                 }
                 return subject;
     }
 }

4.AdminServlet.java

 package servlet;

 import java.io.IOException;

 import javax.servlet.ServletException;
 import javax.servlet.annotation.WebServlet;
 import javax.servlet.http.HttpServlet;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;

 @WebServlet("/admin")
 public class AdminServlet extends HttpServlet {

     private static final long serialVersionUID = -8898740167735658141L;

     @Override
     public void service(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
         request.getRequestDispatcher("/admin.jsp").forward(request, response);
     }
 }

5.LoginSerlet.java

 package servlet;

 import java.io.IOException;

 import javax.servlet.ServletException;
 import javax.servlet.annotation.WebServlet;
 import javax.servlet.http.HttpServlet;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;

 import org.apache.shiro.SecurityUtils;
 import org.apache.shiro.authc.UsernamePasswordToken;
 import org.apache.shiro.subject.Subject;

 import util.ShiroUtil;

 @WebServlet("/login")
 public class LoginSerlet extends HttpServlet{

     private static final long serialVersionUID = 4689893605443801988L;

     @Override
     public void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
         req.getRequestDispatcher("/login.jsp").forward(req, resp);
     }
     @Override
     public void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
         String username=req.getParameter("username");
         String password=req.getParameter("password");
         Subject subject=SecurityUtils.getSubject();
         UsernamePasswordToken token=new UsernamePasswordToken(username,password);
         try {
             subject.login(token);
             resp.sendRedirect("success.jsp");
         } catch (Exception e) {
             req.setAttribute("error", "用户名或密码错误");
             req.getRequestDispatcher("/login.jsp").forward(req, resp);
         }
     }
 }

package servlet;
import java.io.IOException;
import javax.servlet.ServletException;import javax.servlet.annotation.WebServlet;import javax.servlet.http.HttpServlet;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;
@WebServlet("/admin")public class AdminServlet extends HttpServlet {
private static final long serialVersionUID = -8898740167735658141L;
@Overridepublic void service(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {request.getRequestDispatcher("/admin.jsp").forward(request, response);}}