Skip to main content

单点登录

JWT​

Shiro​

  1. 提供一个 Realm 实现
    • 认证，校验用户，doGetAuthenticationInfo。
    • 授权，获取用户权限，doGetAuthorizationInfo。
@Bean
public Realm realm() {
}
  1. 声明 ShiroFilterChainDefinition
@Bean
public ShiroFilterChainDefinition shiroFilterChainDefinition() {
    DefaultShiroFilterChainDefinition chainDefinition = new DefaultShiroFilterChainDefinition();
    // logged in users with the 'admin' role
    chainDefinition.addPathDefinition("/admin/**", "authc, roles[admin]");
    // logged in users with the 'document:read' permission
    chainDefinition.addPathDefinition("/docs/**", "authc, perms[document:read]");
    // all other paths require a logged in user
    chainDefinition.addPathDefinition("/**", "authc");
    return chainDefinition;
}
  1. 自定义 AuthenticatingFilter 实现
@Override
protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, 
                                    ServletResponse response) throws Exception {
    return true;
}
@Override
protected boolean onLoginFailure(AuthenticationToken token, AuthenticationException e,
                                     ServletRequest request, ServletResponse response) {
    return false;
}

CAS​