├── .gitignore
├── README.md
├── pom.xml
└── src
    ├── main
        ├── java
        │   └── com
        │   │   └── pjb
        │   │       ├── SpringbootMybatisShiroApplication.java
        │   │       ├── config
        │   │           ├── MyShiroRealm.java
        │   │           └── ShiroConfig.java
        │   │       ├── controller
        │   │           ├── HomeController.java
        │   │           └── UserInfoController.java
        │   │       ├── entity
        │   │           ├── SysPermission.java
        │   │           ├── SysRole.java
        │   │           └── UserInfo.java
        │   │       ├── mapper
        │   │           ├── SysPermissionMapper.java
        │   │           ├── SysRoleMapper.java
        │   │           └── UserInfoMapper.java
        │   │       └── service
        │   │           ├── UserInfoService.java
        │   │           └── impl
        │   │               └── UserInfoServiceImpl.java
        └── resources
        │   ├── application.yml
        │   ├── com
        │       └── pjb
        │       │   └── mapper
        │       │       ├── SysPermissionMapper.xml
        │       │       ├── SysRoleMapper.xml
        │       │       └── UserInfoMapper.xml
        │   ├── ehcache-shiro.xml
        │   └── templates
        │       ├── 403.html
        │       ├── index.html
        │       ├── login.html
        │       ├── userInfo.html
        │       ├── userInfoAdd.html
        │       └── userInfoDel.html
    └── test
        └── java
            └── com
                └── pjb
                    └── SpringbootMybatisShiroApplicationTests.java


/.gitignore:
--------------------------------------------------------------------------------
 1 | target/
 2 | !.mvn/wrapper/maven-wrapper.jar
 3 | 
 4 | ### STS ###
 5 | .apt_generated
 6 | .classpath
 7 | .factorypath
 8 | .project
 9 | .settings
10 | .springBeans
11 | 
12 | ### IntelliJ IDEA ###
13 | .idea
14 | *.iws
15 | *.iml
16 | *.ipr
17 | 
18 | ### NetBeans ###
19 | nbproject/private/
20 | build/
21 | nbbuild/
22 | dist/
23 | nbdist/
24 | .nb-gradle/


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # Springboot-Mybatis-Shiro
2 | Springboot+Mybatis+Shiro实现角色权限管理
3 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 3 | 	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 4 | 	<modelVersion>4.0.0</modelVersion>
 5 | 
 6 | 	<groupId>com.pjb</groupId>
 7 | 	<artifactId>springboot-mybatis-shiro</artifactId>
 8 | 	<version>0.0.1-SNAPSHOT</version>
 9 | 	<packaging>jar</packaging>
10 | 
11 | 	<name>springboot-mybatis-shiro</name>
12 | 	<description>Demo project for Spring Boot</description>
13 | 
14 | 	<parent>
15 | 		<groupId>org.springframework.boot</groupId>
16 | 		<artifactId>spring-boot-starter-parent</artifactId>
17 | 		<version>2.1.6.RELEASE</version>
18 | 		<relativePath/> <!-- lookup parent from repository -->
19 | 	</parent>
20 | 
21 | 	<properties>
22 | 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
23 | 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
24 | 		<java.version>1.8</java.version>
25 | 	</properties>
26 | 
27 | 	<dependencies>
28 | 		<dependency>
29 | 			<groupId>org.mybatis.spring.boot</groupId>
30 | 			<artifactId>mybatis-spring-boot-starter</artifactId>
31 | 			<version>2.1.0</version>
32 | 		</dependency>
33 | 		<dependency>
34 | 			<groupId>org.springframework.boot</groupId>
35 | 			<artifactId>spring-boot-starter-thymeleaf</artifactId>
36 | 		</dependency>
37 | 		<!--因为thymeleaf校验html文件的时候会特别严格，比如<input> 必须加上/结尾，这里需要依赖nekohtml-->
38 | 		<dependency>
39 | 			<groupId>net.sourceforge.nekohtml</groupId>
40 | 			<artifactId>nekohtml</artifactId>
41 | 			<version>1.9.22</version>
42 | 		</dependency>
43 | 		<dependency>
44 | 			<groupId>org.springframework.boot</groupId>
45 | 			<artifactId>spring-boot-starter-web</artifactId>
46 | 		</dependency>
47 | 
48 | 		<dependency>
49 | 			<groupId>mysql</groupId>
50 | 			<artifactId>mysql-connector-java</artifactId>
51 | 		</dependency>
52 | 		<dependency>
53 | 			<groupId>org.projectlombok</groupId>
54 | 			<artifactId>lombok</artifactId>
55 | 			<optional>true</optional>
56 | 		</dependency>
57 | 		<!--shiro-->
58 | 		<dependency>
59 | 			<groupId>org.apache.shiro</groupId>
60 | 			<artifactId>shiro-all</artifactId>
61 | 			<version>1.4.1</version>
62 | 			<type>pom</type>
63 | 		</dependency>
64 | 		<dependency>
65 | 			<groupId>org.springframework.boot</groupId>
66 | 			<artifactId>spring-boot-starter-test</artifactId>
67 | 			<scope>test</scope>
68 | 		</dependency>
69 | 	</dependencies>
70 | 
71 | 	<build>
72 | 		<plugins>
73 | 			<plugin>
74 | 				<groupId>org.springframework.boot</groupId>
75 | 				<artifactId>spring-boot-maven-plugin</artifactId>
76 | 			</plugin>
77 | 		</plugins>
78 | 	</build>
79 | 
80 | 
81 | </project>
82 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/SpringbootMybatisShiroApplication.java:
--------------------------------------------------------------------------------
 1 | package com.pjb;
 2 | 
 3 | import org.mybatis.spring.annotation.MapperScan;
 4 | import org.springframework.boot.SpringApplication;
 5 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 6 | 
 7 | @SpringBootApplication
 8 | @MapperScan("com.pjb.mapper")
 9 | public class SpringbootMybatisShiroApplication {
10 | 
11 | 	public static void main(String[] args) {
12 | 		SpringApplication.run(SpringbootMybatisShiroApplication.class, args);
13 | 	}
14 | }
15 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/config/MyShiroRealm.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.config;
 2 | 
 3 | import com.pjb.entity.UserInfo;
 4 | import com.pjb.mapper.SysPermissionMapper;
 5 | import com.pjb.mapper.SysRoleMapper;
 6 | import com.pjb.service.UserInfoService;
 7 | import org.apache.shiro.authc.AuthenticationException;
 8 | import org.apache.shiro.authc.AuthenticationInfo;
 9 | import org.apache.shiro.authc.AuthenticationToken;
10 | import org.apache.shiro.authc.SimpleAuthenticationInfo;
11 | import org.apache.shiro.authz.AuthorizationInfo;
12 | import org.apache.shiro.authz.SimpleAuthorizationInfo;
13 | import org.apache.shiro.realm.AuthorizingRealm;
14 | import org.apache.shiro.subject.PrincipalCollection;
15 | import org.apache.shiro.util.ByteSource;
16 | import org.springframework.beans.factory.annotation.Autowired;
17 | 
18 | /**
19 |  * @author jinbin
20 |  * @date 2017-12-01 21:25
21 |  */
22 | public class MyShiroRealm extends AuthorizingRealm {
23 |     @Autowired
24 |     UserInfoService userInfoService;
25 |     @Autowired
26 |     SysRoleMapper sysRoleMapper;
27 |     @Autowired
28 |     SysPermissionMapper sysPermissionMapper;
29 |     @Override
30 |     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principal) {
31 |         System.out.println("权限配置-->MyShiroRealm.doGetAuthorizationInfo()");
32 |         SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
33 |         UserInfo userInfo  = (UserInfo)principal.getPrimaryPrincipal();
34 |         sysRoleMapper.findRoleByUsername(userInfo.getUsername()).stream().forEach(
35 |                 sysRole -> {
36 |                     authorizationInfo.addRole(sysRole.getRole());
37 |                     sysPermissionMapper.findPermissionByRoleId(sysRole.getId()).stream().forEach(
38 |                             sysPermission -> {
39 |                                 authorizationInfo.addStringPermission(sysPermission.getPermission());
40 |                             }
41 |                     );
42 |                 }
43 |         );
44 |         return authorizationInfo;
45 |     }
46 | 
47 |     @Override
48 |     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
49 |         //获取用户的输入的账号.
50 |         String username = (String)token.getPrincipal();
51 |         System.out.println(token.getCredentials());
52 |         //通过username从数据库中查找 User对象，如果找到，没找到.
53 |         //实际项目中，这里可以根据实际情况做缓存，如果不做，Shiro自己也是有时间间隔机制，2分钟内不会重复执行该方法
54 |         UserInfo userInfo = userInfoService.findByUsername(username);
55 |         System.out.println("----->>userInfo="+userInfo);
56 |         if(userInfo == null){
57 |             ////没有返回登录用户名对应的SimpleAuthenticationInfo对象时,就会在LoginController中抛出UnknownAccountException异常
58 |             return null;
59 |         }
60 |         return new SimpleAuthenticationInfo(
61 |                 userInfo, //用户名
62 |                 userInfo.getPassword(), //密码
63 |                 ByteSource.Util.bytes(userInfo.getCredentialsSalt()),//salt=username+salt
64 |                 getName()  //realm name
65 |         );
66 |     }
67 | }
68 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/config/ShiroConfig.java:
--------------------------------------------------------------------------------
  1 | package com.pjb.config;
  2 | 
  3 | import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
  4 | import org.apache.shiro.cache.ehcache.EhCacheManager;
  5 | import org.apache.shiro.mgt.SecurityManager;
  6 | import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
  7 | import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
  8 | import org.apache.shiro.web.mgt.CookieRememberMeManager;
  9 | import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
 10 | import org.apache.shiro.web.servlet.SimpleCookie;
 11 | import org.springframework.context.annotation.Bean;
 12 | import org.springframework.context.annotation.Configuration;
 13 | import org.springframework.web.servlet.handler.SimpleMappingExceptionResolver;
 14 | 
 15 | import java.util.LinkedHashMap;
 16 | import java.util.Map;
 17 | import java.util.Properties;
 18 | 
 19 | /**
 20 |  * @author jinbin
 21 |  * @date 2017-12-01 21:31
 22 |  */
 23 | @Configuration
 24 | public class ShiroConfig {
 25 |     @Bean
 26 |     public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager) {
 27 | 
 28 |         ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
 29 |         shiroFilterFactoryBean.setSecurityManager(securityManager);
 30 | 
 31 |         Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
 32 |         filterChainDefinitionMap.put("/logout", "logout");
 33 |         filterChainDefinitionMap.put("/index", "user");
 34 |         filterChainDefinitionMap.put("/", "user");
 35 |         filterChainDefinitionMap.put("/favicon.ico", "anon");
 36 |         filterChainDefinitionMap.put("/**", "authc");
 37 |         //authc表示需要验证身份才能访问，还有一些比如anon表示不需要验证身份就能访问等。
 38 |         shiroFilterFactoryBean.setLoginUrl("/login");
 39 |         shiroFilterFactoryBean.setSuccessUrl("/index");
 40 |         shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
 41 |         return shiroFilterFactoryBean;
 42 |     }
 43 | 
 44 | 
 45 |     //SecurityManager 是 Shiro 架构的核心，通过它来链接Realm和用户(文档中称之为Subject.)
 46 |     @Bean
 47 |     public SecurityManager securityManager() {
 48 |         DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
 49 |         securityManager.setRealm(myShiroRealm()); //将Realm注入到SecurityManager中。
 50 |         securityManager.setCacheManager(ehCacheManager()); //注入缓存对象。
 51 |         securityManager.setRememberMeManager(cookieRememberMeManager());//注入rememberMeManager;
 52 |         return securityManager;
 53 |     }
 54 | 
 55 |     @Bean
 56 |     public MyShiroRealm myShiroRealm() {
 57 |         MyShiroRealm myShiroRealm = new MyShiroRealm();
 58 |         myShiroRealm.setCredentialsMatcher(hashedCredentialsMatcher()); //设置解密规则
 59 |         return myShiroRealm;
 60 |     }
 61 | 
 62 |     //因为我们的密码是加过密的，所以，如果要Shiro验证用户身份的话，需要告诉它我们用的是md5加密的，并且是加密了两次。同时我们在自己的Realm中也通过SimpleAuthenticationInfo返回了加密时使用的盐。这样Shiro就能顺利的解密密码并验证用户名和密码是否正确了。
 63 |     @Bean
 64 |     public HashedCredentialsMatcher hashedCredentialsMatcher() {
 65 |         HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
 66 |         //散列算法:这里使用MD5算法;
 67 |         hashedCredentialsMatcher.setHashAlgorithmName("md5");
 68 |         //散列的次数，比如散列两次，相当于 md5(md5(""));
 69 |         hashedCredentialsMatcher.setHashIterations(2);
 70 |         return hashedCredentialsMatcher;
 71 |     }
 72 |     /**
 73 |      *  开启shiro aop注解支持.
 74 |      *  使用代理方式;所以需要开启代码支持;
 75 |      * @param securityManager
 76 |      * @return
 77 |      */
 78 |     @Bean
 79 |     public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager){
 80 |         AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
 81 |         authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
 82 |         return authorizationAttributeSourceAdvisor;
 83 |     }
 84 |     @Bean
 85 |     public SimpleMappingExceptionResolver resolver() {
 86 |         SimpleMappingExceptionResolver resolver = new SimpleMappingExceptionResolver();
 87 |         Properties properties = new Properties();
 88 |         properties.setProperty("org.apache.shiro.authz.UnauthorizedException", "/403");
 89 |         resolver.setExceptionMappings(properties);
 90 |         return resolver;
 91 |     }
 92 |     @Bean
 93 |     public EhCacheManager ehCacheManager() {
 94 |         EhCacheManager ehCacheManager = new EhCacheManager();
 95 |         ehCacheManager.setCacheManagerConfigFile("classpath:ehcache-shiro.xml");
 96 |         return ehCacheManager;
 97 |     }
 98 | 
 99 |     /**
100 |      * cookie对象;
101 |      */
102 |     @Bean
103 |     public SimpleCookie rememberMeCookie() {
104 |         //这个参数是cookie的名称，对应前端的checkbox的name = rememberMe
105 |         SimpleCookie simpleCookie = new SimpleCookie("rememberMe");
106 |         //<!-- 记住我cookie生效时间30天 ,单位秒;-->
107 |         simpleCookie.setMaxAge(259200);
108 |         return simpleCookie;
109 |     }
110 | 
111 |     /**
112 |      * cookie管理对象;
113 |      */
114 |     @Bean
115 |     public CookieRememberMeManager cookieRememberMeManager() {
116 |         CookieRememberMeManager manager = new CookieRememberMeManager();
117 |         manager.setCookie(rememberMeCookie());
118 |         return manager;
119 |     }
120 | }
121 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/controller/HomeController.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.controller;
 2 | 
 3 | import org.apache.shiro.authc.IncorrectCredentialsException;
 4 | import org.apache.shiro.authc.UnknownAccountException;
 5 | import org.springframework.stereotype.Controller;
 6 | import org.springframework.web.bind.annotation.RequestMapping;
 7 | 
 8 | import javax.servlet.http.HttpServletRequest;
 9 | import java.util.Map;
10 | 
11 | /**
12 |  * @author jinbin
13 |  * @date 2017-12-01 21:35
14 |  */
15 | @Controller
16 | public class HomeController {
17 |     @RequestMapping({"/","/index"})
18 |     public String index(){
19 |         return"/index";
20 |     }
21 | 
22 |     // 这里如果不写method参数的话，默认支持所有请求，如果想缩小请求范围，还是要添加method来支持get, post等等某个请求。
23 |     @RequestMapping("/login")
24 |     public String login(HttpServletRequest request, Map<String, Object> map) {
25 |         // 登录失败从request中获取shiro处理的异常信息。
26 |         // shiroLoginFailure:就是shiro异常类的全类名.
27 |         Object exception = request.getAttribute("shiroLoginFailure");
28 |         String msg = "";
29 |         if (exception != null) {
30 |             if (exception instanceof UnknownAccountException) {
31 |                 msg = "账户不存在或密码不正确";
32 |             } else if (exception instanceof IncorrectCredentialsException) {
33 |                 msg = "账户不存在或密码不正确";
34 |             } else {
35 |                 msg = "其他异常";
36 |             }
37 |         }
38 | 
39 |         map.put("msg", msg);
40 |         // 此方法不处理登录成功,由shiro进行处理.
41 |         return "login";
42 |     }
43 | 
44 |     @RequestMapping("/403")
45 |     public String unauthorizedRole(){
46 |         return "403";
47 |     }
48 | }
49 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/controller/UserInfoController.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.controller;
 2 | 
 3 | import org.apache.shiro.authz.annotation.RequiresPermissions;
 4 | import org.springframework.stereotype.Controller;
 5 | import org.springframework.web.bind.annotation.RequestMapping;
 6 | 
 7 | /**
 8 |  * @author jinbin
 9 |  * @date 2017-12-01 21:36
10 |  */
11 | @Controller
12 | @RequestMapping("/userInfo")
13 | public class UserInfoController {
14 |     /**
15 |      * 用户查询.
16 |      */
17 |     @RequestMapping("/userList")
18 |     @RequiresPermissions("userInfo:view")
19 |     public String userInfo(){
20 |         return "userInfo";
21 |     }
22 | 
23 |     /**
24 |      * 用户添加;
25 |      */
26 |     @RequestMapping("/userAdd")
27 |     @RequiresPermissions("userInfo:add")
28 |     public String userInfoAdd(){
29 |         return "userInfoAdd";
30 |     }
31 | 
32 |     /**
33 |      * 用户删除;
34 |      * @return
35 |      */
36 |     @RequestMapping("/userDel")
37 |     @RequiresPermissions("userInfo:del")
38 |     public String userDel(){
39 |         return "userInfoDel";
40 |     }
41 | }
42 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/entity/SysPermission.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.entity;
 2 | 
 3 | import lombok.AllArgsConstructor;
 4 | import lombok.Data;
 5 | import lombok.NoArgsConstructor;
 6 | 
 7 | /**
 8 |  * @author jinbin
 9 |  * @date 2017-12-01 20:55
10 |  */
11 | @Data
12 | @AllArgsConstructor
13 | @NoArgsConstructor
14 | public class SysPermission {
15 |     Integer id;//主键.
16 |     String name;//名称.
17 |     String url;//资源路径.
18 |     String permission; //权限字符串
19 | }
20 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/entity/SysRole.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.entity;
 2 | 
 3 | import lombok.AllArgsConstructor;
 4 | import lombok.Data;
 5 | import lombok.NoArgsConstructor;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | /**
10 |  * @author jinbin
11 |  * @date 2017-12-01 20:54
12 |  */
13 | @Data
14 | @AllArgsConstructor
15 | @NoArgsConstructor
16 | public class SysRole {
17 |     Integer id;
18 |     String role;//角色标识程序中判断使用,如"admin",这个是唯一的:
19 |     String description; // 角色描述,UI界面显示使用
20 |     private Boolean available = Boolean.FALSE; // 是否可用,如果不可用将不会添加给用户
21 | }
22 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/entity/UserInfo.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.entity;
 2 | 
 3 | import lombok.AllArgsConstructor;
 4 | import lombok.Data;
 5 | import lombok.NoArgsConstructor;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | /**
10 |  * @author jinbin
11 |  * @date 2017-12-01 20:52
12 |  */
13 | @Data
14 | @AllArgsConstructor
15 | @NoArgsConstructor
16 | public class UserInfo {
17 |     Integer uid;//用户id
18 |     String username;//帐号
19 |     String name;
20 |     String password;
21 |     String salt;
22 |     byte state;
23 |     /**
24 |      * 密码盐.
25 |      * @return
26 |      */
27 |     public String getCredentialsSalt(){
28 | 
29 |         return this.username+this.salt;
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/mapper/SysPermissionMapper.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.mapper;
 2 | 
 3 | import com.pjb.entity.SysPermission;
 4 | import org.apache.ibatis.annotations.Param;
 5 | import org.springframework.stereotype.Component;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | /**
10 |  * @author jinbin
11 |  * @date 2017-12-01 21:12
12 |  */
13 | @Component
14 | public interface SysPermissionMapper {
15 |     //根据角色ID查询角色对应的权限信息
16 |     List<SysPermission> findPermissionByRoleId(@Param("roleId") Integer roleId);
17 | }
18 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/mapper/SysRoleMapper.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.mapper;
 2 | 
 3 | import com.pjb.entity.SysRole;
 4 | import org.apache.ibatis.annotations.Param;
 5 | import org.springframework.stereotype.Component;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | /**
10 |  * @author jinbin
11 |  * @date 2017-12-01 21:02
12 |  */
13 | @Component
14 | public interface SysRoleMapper {
15 |     //通过username查找用户角色信息
16 |     List<SysRole> findRoleByUsername(@Param("username") String username);
17 | }
18 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/mapper/UserInfoMapper.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.mapper;
 2 | 
 3 | import com.pjb.entity.UserInfo;
 4 | import org.apache.ibatis.annotations.Mapper;
 5 | import org.apache.ibatis.annotations.Param;
 6 | import org.springframework.stereotype.Component;
 7 | 
 8 | import java.util.List;
 9 | 
10 | /**
11 |  * @author jinbin
12 |  * @date 2017-12-01 20:58
13 |  */
14 | @Component
15 | public interface UserInfoMapper {
16 |     //通过username查找用户信息
17 |     UserInfo findByUsername(@Param("username") String username);
18 | }
19 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/service/UserInfoService.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.service;
 2 | 
 3 | import com.pjb.entity.UserInfo;
 4 | 
 5 | /**
 6 |  * @author jinbin
 7 |  * @date 2017-12-01 21:22
 8 |  */
 9 | public interface UserInfoService {
10 |     /**通过username查找用户信息;*/
11 |     UserInfo findByUsername(String username);
12 | }
13 | 


--------------------------------------------------------------------------------
/src/main/java/com/pjb/service/impl/UserInfoServiceImpl.java:
--------------------------------------------------------------------------------
 1 | package com.pjb.service.impl;
 2 | 
 3 | import com.pjb.entity.UserInfo;
 4 | import com.pjb.mapper.UserInfoMapper;
 5 | import com.pjb.service.UserInfoService;
 6 | import org.springframework.beans.factory.annotation.Autowired;
 7 | import org.springframework.stereotype.Service;
 8 | 
 9 | /**
10 |  * @author jinbin
11 |  * @date 2017-12-01 21:22
12 |  */
13 | @Service("UserInfoService")
14 | public class UserInfoServiceImpl implements UserInfoService {
15 |     @Autowired
16 |     UserInfoMapper userInfoMapper;
17 |     @Override
18 |     public UserInfo findByUsername(String username) {
19 |         return userInfoMapper.findByUsername(username);
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/src/main/resources/application.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |     datasource:
 3 |       url: jdbc:mysql://localhost:3306/test1?useSSL=false&serverTimezone=UTC
 4 |       username: root
 5 |       password: 1997
 6 |       driver-class-name: com.mysql.cj.jdbc.Driver
 7 |     thymeleaf:
 8 |        cache: false
 9 |        mode: LEGACYHTML5
10 | mybatis:
11 |   type-aliases-package: com.pjb.entity
12 |   mapper-locations: classpath*:com.pjb.mapper/*.xml


--------------------------------------------------------------------------------
/src/main/resources/com/pjb/mapper/SysPermissionMapper.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8" ?>
 2 | <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd" >
 3 | <mapper namespace="com.pjb.mapper.SysPermissionMapper">
 4 |     <select id="findPermissionByRoleId" resultType="com.pjb.entity.SysPermission">
 5 |         SELECT
 6 |             sys_role.id,
 7 |             sys_role.available,
 8 |             sys_role.description,
 9 |             sys_role.role,
10 |             sys_permission.`name`,
11 |             sys_permission.permission,
12 |             sys_permission.url
13 |         FROM
14 |             (sys_permission, sys_role)
15 |         RIGHT JOIN sys_role_permission ON sys_permission.id = sys_role_permission.permission_id
16 |         AND sys_role_permission.role_id = sys_role.id
17 |         WHERE sys_role.id=#{roleId}
18 |     </select>
19 | </mapper>


--------------------------------------------------------------------------------
/src/main/resources/com/pjb/mapper/SysRoleMapper.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8" ?>
 2 | <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd" >
 3 | <mapper namespace="com.pjb.mapper.SysRoleMapper">
 4 | 
 5 |     <select id="findRoleByUsername" resultType="com.pjb.entity.SysRole">
 6 |           SELECT
 7 |             user_info.uid,
 8 |             user_info.`name`,
 9 |             user_info.`password`,
10 |             user_info.salt,
11 |             user_info.state,
12 |             user_info.username,
13 |             sys_role.id,
14 |             sys_role.available,
15 |             sys_role.description,
16 |             sys_role.role
17 |         FROM
18 |             user_info
19 |         RIGHT JOIN sys_user_role ON user_info.uid = sys_user_role.uid
20 |         LEFT JOIN sys_role ON sys_user_role.role_id = sys_role.id
21 |         WHERE username=#{username}
22 |     </select>
23 | </mapper>


--------------------------------------------------------------------------------
/src/main/resources/com/pjb/mapper/UserInfoMapper.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8" ?>
 2 | <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd" >
 3 | <mapper namespace="com.pjb.mapper.UserInfoMapper">
 4 | 
 5 |     <select id="findByUsername" resultType="com.pjb.entity.UserInfo">
 6 |         SELECT
 7 |             user_info.uid,
 8 |             user_info.`name`,
 9 |             user_info.`password`,
10 |             user_info.salt,
11 |             user_info.state,
12 |             user_info.username
13 |         FROM
14 |             user_info
15 |         WHERE username=#{username}
16 |     </select>
17 | </mapper>


--------------------------------------------------------------------------------
/src/main/resources/ehcache-shiro.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <ehcache name="es">
 3 | 
 4 |     <diskStore path="java.io.tmpdir"/>
 5 | 
 6 |     <!--
 7 |        name:缓存名称。
 8 |        maxElementsInMemory:缓存最大数目
 9 |        maxElementsOnDisk：硬盘最大缓存个数。
10 |        eternal:对象是否永久有效，一但设置了，timeout将不起作用。
11 |        overflowToDisk:是否保存到磁盘，当系统当机时
12 |        timeToIdleSeconds:设置对象在失效前的允许闲置时间（单位：秒）。仅当eternal=false对象不是永久有效时使用，可选属性，默认值是0，也就是可闲置时间无穷大。
13 |        timeToLiveSeconds:设置对象在失效前允许存活时间（单位：秒）。最大时间介于创建时间和失效时间之间。仅当eternal=false对象不是永久有效时使用，默认是0.，也就是对象存活时间无穷大。
14 |        diskPersistent：是否缓存虚拟机重启期数据 Whether the disk store persists between restarts of the Virtual Machine. The default value is false.
15 |        diskSpoolBufferSizeMB：这个参数设置DiskStore（磁盘缓存）的缓存区大小。默认是30MB。每个Cache都应该有自己的一个缓冲区。
16 |        diskExpiryThreadIntervalSeconds：磁盘失效线程运行时间间隔，默认是120秒。
17 |        memoryStoreEvictionPolicy：当达到maxElementsInMemory限制时，Ehcache将会根据指定的策略去清理内存。默认策略是LRU（最近最少使用）。你可以设置为FIFO（先进先出）或是LFU（较少使用）。
18 |         clearOnFlush：内存数量最大时是否清除。
19 |          memoryStoreEvictionPolicy:
20 |             Ehcache的三种清空策略;
21 |             FIFO，first in first out，这个是大家最熟的，先进先出。
22 |             LFU， Less Frequently Used，就是上面例子中使用的策略，直白一点就是讲一直以来最少被使用的。如上面所讲，缓存的元素有一个hit属性，hit值最小的将会被清出缓存。
23 |             LRU，Least Recently Used，最近最少使用的，缓存的元素有一个时间戳，当缓存容量满了，而又需要腾出地方来缓存新的元素的时候，那么现有缓存元素中时间戳离当前时间最远的元素将被清出缓存。
24 |     -->
25 |     <defaultCache
26 |             maxElementsInMemory="10000"
27 |             eternal="false"
28 |             timeToIdleSeconds="120"
29 |             timeToLiveSeconds="120"
30 |             overflowToDisk="false"
31 |             diskPersistent="false"
32 |             diskExpiryThreadIntervalSeconds="120"
33 |     />
34 | 
35 | 
36 |     <!-- 登录记录缓存锁定10分钟 -->
37 |     <cache name="passwordRetryCache"
38 |            maxEntriesLocalHeap="2000"
39 |            eternal="false"
40 |            timeToIdleSeconds="3600"
41 |            timeToLiveSeconds="0"
42 |            overflowToDisk="false"
43 |            statistics="true">
44 |     </cache>
45 | 
46 | </ehcache>


--------------------------------------------------------------------------------
/src/main/resources/templates/403.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Title</title>
 6 | </head>
 7 | <body>
 8 | <h3>403没有权限</h3>
 9 | </body>
10 | </html>


--------------------------------------------------------------------------------
/src/main/resources/templates/index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Title</title>
 6 | </head>
 7 | <body>
 8 | <h1>index</h1>
 9 | </body>
10 | </html>


--------------------------------------------------------------------------------
/src/main/resources/templates/login.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en" xmlns:th="http://www.w3.org/1999/xhtml">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Title</title>
 6 | </head>
 7 | <body>
 8 | 错误信息：<h4 th:text="${msg}"></h4>
 9 | <form action="" method="post">
10 |     <p>账号：<input type="text" name="username" value="admin"/></p>
11 |     <p>密码：<input type="text" name="password" value="123456"/></p>
12 |     <p><input type="submit" value="登录"/></p>
13 |     <P><input type="checkbox" name="rememberMe" />记住我</P>
14 | </form>
15 | </body>
16 | </html>


--------------------------------------------------------------------------------
/src/main/resources/templates/userInfo.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Title</title>
 6 | </head>
 7 | <body>
 8 | <h3>用户查询界面</h3>
 9 | </body>
10 | </html>


--------------------------------------------------------------------------------
/src/main/resources/templates/userInfoAdd.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Title</title>
 6 | </head>
 7 | <body>
 8 | <h3>用户添加界面</h3>
 9 | </body>
10 | </html>


--------------------------------------------------------------------------------
/src/main/resources/templates/userInfoDel.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <title>Title</title>
 6 | </head>
 7 | <body>
 8 | <h3>用户删除界面</h3>
 9 | </body>
10 | </html>


--------------------------------------------------------------------------------
/src/test/java/com/pjb/SpringbootMybatisShiroApplicationTests.java:
--------------------------------------------------------------------------------
 1 | package com.pjb;
 2 | 
 3 | import org.junit.Test;
 4 | import org.junit.runner.RunWith;
 5 | import org.springframework.boot.test.context.SpringBootTest;
 6 | import org.springframework.test.context.junit4.SpringRunner;
 7 | 
 8 | @RunWith(SpringRunner.class)
 9 | @SpringBootTest
10 | public class SpringbootMybatisShiroApplicationTests {
11 | 
12 | 	@Test
13 | 	public void contextLoads() {
14 | 	}
15 | 
16 | }
17 | 


--------------------------------------------------------------------------------