ShiroConfig.java 3.1 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677
  1. //package com.imed.costaccount.common.shiro;
  2. //
  3. //import org.apache.shiro.mgt.SecurityManager;
  4. //import org.apache.shiro.spring.LifecycleBeanPostProcessor;
  5. //import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
  6. //import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
  7. //import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
  8. //import org.springframework.context.annotation.Bean;
  9. //import org.springframework.context.annotation.Configuration;
  10. //
  11. //import javax.servlet.Filter;
  12. //import java.util.HashMap;
  13. //import java.util.LinkedHashMap;
  14. //import java.util.Map;
  15. //
  16. //@Configuration
  17. //public class ShiroConfig {
  18. //
  19. // @Bean("securityManager")
  20. // public SecurityManager securityManager(OAuth2Realm realm) {
  21. // DefaultWebSecurityManager defaultWebSecurityManager = new DefaultWebSecurityManager();
  22. // defaultWebSecurityManager.setRealm(realm);
  23. // defaultWebSecurityManager.setRememberMeManager(null);
  24. // return defaultWebSecurityManager;
  25. // }
  26. //
  27. // @Bean("shiroFilter")
  28. // public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager,OAuth2Filter filter) {
  29. // ShiroFilterFactoryBean filterFactoryBean = new ShiroFilterFactoryBean();
  30. // filterFactoryBean.setSecurityManager(securityManager);
  31. // // OAuth2过滤
  32. // Map<String, Filter> filters = new HashMap<>();
  33. // filters.put("oauth2", filter);
  34. // filterFactoryBean.setFilters(filters);
  35. //
  36. // // HTTP请求过滤
  37. // Map<String, String> filterMap = new LinkedHashMap<>();
  38. // filterMap.put("/webjars/**", "anon");
  39. // filterMap.put("/druid/**", "anon");
  40. // filterMap.put("/app/**", "anon");
  41. // filterMap.put("/sys/login", "anon");
  42. // filterMap.put("/swagger/**", "anon");
  43. // filterMap.put("/v2/api-docs", "anon");
  44. // filterMap.put("/swagger-ui.html", "anon");
  45. // filterMap.put("/static/js/**", "anon");
  46. // filterMap.put("/doc.html", "anon");
  47. // filterMap.put("/swagger-resources/**", "anon");
  48. // filterMap.put("/captcha.jpg", "anon");
  49. // filterMap.put("/user/register", "anon");
  50. // filterMap.put("/employee/demo", "anon");
  51. // filterMap.put("/employee/login", "anon");
  52. // filterMap.put("/**/*.jpg", "anon");
  53. // filterMap.put("/**/*.png", "anon");
  54. //
  55. // // 除了以上的,其他的都使用oauth2过滤器
  56. // filterMap.put("/**", "oauth2");
  57. // filterFactoryBean.setFilterChainDefinitionMap(filterMap);
  58. // return filterFactoryBean;
  59. // }
  60. //
  61. // @Bean("lifecycleBeanPostProcessor")
  62. // public LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
  63. // return new LifecycleBeanPostProcessor();
  64. // }
  65. //
  66. // /**
  67. // * AOP 使用 的通知点增强点
  68. // * @param securityManager
  69. // * @return
  70. // */
  71. // @Bean
  72. // public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
  73. // AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
  74. // advisor.setSecurityManager(securityManager);
  75. // return advisor;
  76. // }
  77. //}