package org.zln.hello.realm;

import org.apache.shiro.authc.*;

import org.apache.shiro.realm.Realm;

/**

 * Created by sherry on 16/9/8.

 */

public class MyRealm01 implements Realm {

    @Override

    public String getName() {

        return "MyRealm01";

    }

    @Override

    public boolean supports(AuthenticationToken token) {

        //仅支持UsernamePasswordToken类型的 Token

        return token instanceof UsernamePasswordToken;

    }

    @Override

    public AuthenticationInfo getAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {

        String username = (String)token.getPrincipal(); //得到用户名

        String password = new String((char[])token.getCredentials()); //得到密码

        if(!"zhang".equals(username)) {

            throw new UnknownAccountException(); //如果用户名错误

            //

        }

        if(!"123".equals(password)) {

            throw new IncorrectCredentialsException(); //如果密码错误

        }

        //如果身份认证验证成功,返回一个 AuthenticationInfo 实现;

        return new SimpleAuthenticationInfo(username, password, getName());

    }

}

#声明一个 realm

MyRealm01=org.zln.hello.realm.MyRealm01

#指定 securityManager 的 realms 实现

securityManager.realms=$MyRealm01

package org.zln.hello;

import org.apache.log4j.LogManager;

import org.apache.log4j.Logger;

import org.apache.shiro.SecurityUtils;

import org.apache.shiro.authc.UsernamePasswordToken;

import org.apache.shiro.config.IniSecurityManagerFactory;

import org.apache.shiro.mgt.SecurityManager;

import org.apache.shiro.subject.Subject;

import org.apache.shiro.util.Factory;

/**

 * Created by sherry on 16/9/8.

 */

public class HelloWorld {

    private static Logger logger = LogManager.getLogger(HelloWorld.class);

    private static Subject subject;

    static {

        //1、获取 SecurityManager 工厂,此处使用 Ini 配置文件初始化 SecurityManager

//        Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");

        Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro-realm.ini");

        //2、得到 SecurityManager 实例 并绑定给 SecurityUtils

        SecurityManager securityManager = factory.getInstance();

        SecurityUtils.setSecurityManager(securityManager);

        //3、得到 Subject 及创建用户名/密码身份验证 Token(即用户身份/凭证)

        subject = SecurityUtils.getSubject();

    }

    public static boolean login(String username,String password){

        UsernamePasswordToken token = new UsernamePasswordToken(username,password);

        //4、登录,即身份验证

        try {

            subject.login(token);

        }catch (Exception e){

            logger.info("身份验证失败");

            logger.error(e.getMessage(),e);

            return false;

        }

        return subject.isAuthenticated();//是否成功登陆

    }

    public static void main(String[] args) {

        //6、退出

        subject.logout();

    }

}