package com.shiro.shiroframe;

import org.apache.shiro.SecurityUtils;

import org.apache.shiro.authc.UsernamePasswordToken;

import org.apache.shiro.mgt.DefaultSecurityManager;

import org.apache.shiro.realm.SimpleAccountRealm;

import org.apache.shiro.subject.Subject;

import org.junit.jupiter.api.BeforeEach;

import org.junit.jupiter.api.Test;

public class ShiroAuthorizerTest {

    //realm，暂时用来存储我们假造的用户信息

    SimpleAccountRealm simpleAccountRealm=new SimpleAccountRealm();

    @BeforeEach

    public void setUserMsg(){

        //添加一个用户信息并设置角色为admin

        simpleAccountRealm.addAccount("houru","miyue","admin","user");//设置该用户既是管理员又是普通用户

    }

    @Test

    public void ShiroAuthorizerTest() {

        //构建SecurityManager环境

        DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager();

        //SecurityManager环境下设置realm

        defaultSecurityManager.setRealm(simpleAccountRealm);

        //SecurityUtils先获取SecurityManager环境

        SecurityUtils.setSecurityManager(defaultSecurityManager);

      //获取subject

        Subject subject= SecurityUtils.getSubject();

        //通过UsernamePasswordToken组织提交认证所要传递的参数

        UsernamePasswordToken usernamePasswordToken=new UsernamePasswordToken("houru","miyue");

        //登录认证

        subject.login(usernamePasswordToken);

        //打印是否认证通过：subject.isAuthenticated()

        System.err.println(subject.isAuthenticated());

        //权限认证

        //检查当前用户是否具有admin角色权限

        subject.checkRole("admin");

        //检查当前用户是否具有admin，user等角色权限

        subject.checkRoles("admin","user");

    }

}