jeecg-boot 1.0版本发布 | 企业级快速开发平台

2019-03-04 12:48:25 +08:00
parent bd6661f41b
commit f2893943d4
383 changed files with 60642 additions and 27 deletions
@@ -0,0 +1,134 @@
+package org.jeecg.config;
+
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.Map;
+import javax.servlet.Filter;
+import org.apache.shiro.mgt.DefaultSessionStorageEvaluator;
+import org.apache.shiro.mgt.DefaultSubjectDAO;
+import org.apache.shiro.mgt.SecurityManager;
+import org.apache.shiro.spring.LifecycleBeanPostProcessor;
+import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
+import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
+import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
+import org.jeecg.modules.shiro.authc.MyRealm;
+import org.jeecg.modules.shiro.authc.aop.JwtFilter;
+import org.jeecg.modules.shiro.authc.aop.ResourceCheckFilter;
+import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.DependsOn;
+
+/**
+ * @author: Scott
+ * @date: 2018/2/7
+ * @description: shiro 配置类
+ */
+
+@Configuration
+public class ShiroConfig {
+	
+	/**
+	 * Filter Chain定义说明 
+	 * 
+	 * 1、一个URL可以配置多个Filter，使用逗号分隔
+	 * 2、当设置多个过滤器时，全部验证通过，才视为通过
+	 * 3、部分过滤器可指定参数，如perms，roles
+	 */
+	@Bean("shiroFilter")
+	public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {
+		ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
+		shiroFilterFactoryBean.setSecurityManager(securityManager);
+		// 拦截器
+		Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>();
+		// 配置不会被拦截的链接 顺序判断
+		filterChainDefinitionMap.put("/sys/login", "anon"); //登录接口排除
+		filterChainDefinitionMap.put("/sys/common/view/**", "anon");//图片预览不限制token
+		filterChainDefinitionMap.put("/api/auth/logout", "anon");//退出登录
+		filterChainDefinitionMap.put("/auth/2step-code", "anon");//退出登录
+		
+		filterChainDefinitionMap.put("/**.js", "anon");
+		filterChainDefinitionMap.put("/**.css", "anon");
+		filterChainDefinitionMap.put("/druid/**", "anon");
+		filterChainDefinitionMap.put("/swagger-ui.html", "anon");
+		filterChainDefinitionMap.put("/swagger**/**", "anon");
+		filterChainDefinitionMap.put("/webjars/**", "anon");
+		filterChainDefinitionMap.put("/v2/**", "anon");
+		
+		
+		filterChainDefinitionMap.put("/processInstance/**", "anon");
+		filterChainDefinitionMap.put("/task/**", "anon");
+		
+		
+		//TODO 排除Online请求
+		filterChainDefinitionMap.put("/auto/cgform/**", "anon");
+		//filterChainDefinitionMap.put("/cgAutoListController?list&id=**", "anon");
+		//filterChainDefinitionMap.put("/cgFormBuildController/**", "anon");
+		//TODO 排除FineReport请求
+		//filterChainDefinitionMap.put("/ReportServer?reportlet=**", "anon");
+		
+		
+		//用户，需要角色权限 “user”
+		//filterChainDefinitionMap.put("/test/**", "roles[test]");
+        //管理员，需要角色权限 “admin”
+		//filterChainDefinitionMap.put("/sys/**", "roles[admin]");
+        
+		// 添加自己的过滤器并且取名为jwt
+		Map<String, Filter> filterMap = new HashMap<String, Filter>(1);
+		filterMap.put("jwt", new JwtFilter());
+		filterMap.put("resourceCheckFilter", new ResourceCheckFilter());
+		shiroFilterFactoryBean.setFilters(filterMap);
+		// <!-- 过滤链定义，从上向下顺序执行，一般将/**放在最为下边
+		filterChainDefinitionMap.put("/**", "jwt");
+		//filterChainDefinitionMap.put("/**", "resourceCheckFilter");
+
+		// 未授权界面;
+		shiroFilterFactoryBean.setUnauthorizedUrl("/403");
+		shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
+		return shiroFilterFactoryBean;
+	}
+
+	@Bean("securityManager")
+	public DefaultWebSecurityManager securityManager(MyRealm myRealm) {
+		DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
+		securityManager.setRealm(myRealm);
+
+		/*
+		 * 关闭shiro自带的session，详情见文档
+		 * http://shiro.apache.org/session-management.html#SessionManagement-
+		 * StatelessApplications%28Sessionless%29
+		 */
+		DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO();
+		DefaultSessionStorageEvaluator defaultSessionStorageEvaluator = new DefaultSessionStorageEvaluator();
+		defaultSessionStorageEvaluator.setSessionStorageEnabled(false);
+		subjectDAO.setSessionStorageEvaluator(defaultSessionStorageEvaluator);
+		securityManager.setSubjectDAO(subjectDAO);
+
+		return securityManager;
+	}
+
+	/**
+	 * 下面的代码是添加注解支持
+	 * @return
+	 */
+	@Bean
+	@DependsOn("lifecycleBeanPostProcessor")
+	public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
+		DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
+		defaultAdvisorAutoProxyCreator.setProxyTargetClass(true);
+		return defaultAdvisorAutoProxyCreator;
+	}
+
+	@Bean
+	public LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
+		return new LifecycleBeanPostProcessor();
+	}
+
+	@Bean
+	public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager) {
+		AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
+		advisor.setSecurityManager(securityManager);
+		return advisor;
+	}
+
+}