Shiro登陆和赋权
2019-12-10 18:02:05 0 举报shiro登陆和赋权
作者其他创作
大纲/内容
HashedCredentialsMatcher
- hashAlgorithm : String- hashIterations : int- hashSalted : boolean- storedCredentialsHexEncoded : boolean
继承
ShiroFilterFactoryBean配置
Authenticator执行授权
Security Manager进行授权
登陆过程
DefaultWebSessionManager
- sessionIdCookie : Cookie - sessionIdCookieEnabled : boolean- sessionIdUrlRewritingEnabled : boolean
拥有
CustomSessionManager
- AUTHORIZATION : String
Authenticator执行认证
Subject执行授权
构造Security Manager环境
根据Realm进行授权验证并返回结果
AuthorizingRealm
# doGetAuthorizationInfo(PrincipalCollection principals) : AuthorizationInfo# doGetAuthenticationInfo(AuthenticationToken token) : AuthenticationInfo
CustomRealm
- userService:UserService
Security Manager进行认证
AbstractSessionManager
- globalSessionTimeout : long
DefaultWebSecurityManager
+ HTTP_SESSION_MODE : String+ NATIVE_SESSION_MODE : String- sessionMode : String
ShiroConfig
根据Realm进行验证并返回结果
DefaultSecurityManager
# rememberMeManager : RememberMeManager # subjectDAO : SubjectDAO # subjectFactory : SubjectFactory
授权过程
调用Subject.login()执行认证
依赖
ShiroFilterFactoryBean
收藏
0 条评论
下一页
