81 lines
3.1 KiB
Java
81 lines
3.1 KiB
Java
package com.common.base.shiro;
|
||
|
||
|
||
import com.common.base.shiro.service.ShiroService;
|
||
import com.common.base.shiro.service.SystemRealm;
|
||
import com.common.base.utils.RedisUtil;
|
||
import org.apache.shiro.authc.*;
|
||
import org.apache.shiro.authz.AuthorizationInfo;
|
||
import org.apache.shiro.realm.AuthorizingRealm;
|
||
import org.apache.shiro.subject.PrincipalCollection;
|
||
|
||
import javax.annotation.Resource;
|
||
import java.util.Date;
|
||
import java.util.Map;
|
||
|
||
public class CustomRealm extends AuthorizingRealm {
|
||
|
||
@Resource
|
||
private ShiroService shiroService;
|
||
|
||
@Resource
|
||
private RedisUtil redisUtil;
|
||
|
||
@Resource
|
||
private SystemRealm systemRealm;
|
||
|
||
@Override
|
||
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
|
||
//1. 从 PrincipalCollection 中来获取登录用户的信息
|
||
Object user = principalCollection.getPrimaryPrincipal();
|
||
return systemRealm.setAuthoriztion(user);
|
||
}
|
||
|
||
@Override
|
||
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) {
|
||
String accessToken = (String) token.getPrincipal();
|
||
String userId;
|
||
if (RedisUtil.isUseful) {
|
||
Map<Object,Object> hashMap = redisUtil.hmget(accessToken);
|
||
userId = (String) hashMap.get("userId");
|
||
if (userId == null) {
|
||
throw new IncorrectCredentialsException("token失效，请重新登录");
|
||
}
|
||
String tokenStr = (String) redisUtil.hget("session", String.valueOf(userId));
|
||
if (tokenStr==null||!tokenStr.equals(accessToken)) {
|
||
redisUtil.del(accessToken);
|
||
throw new IncorrectCredentialsException("token失效，请重新登录");
|
||
}
|
||
Date expireTime = (Date) hashMap.get("expireTime");
|
||
System.out.println(expireTime);
|
||
if (expireTime.getTime() < System.currentTimeMillis()) {
|
||
redisUtil.del(accessToken);
|
||
throw new IncorrectCredentialsException("token失效，请重新登录");
|
||
}
|
||
} else {
|
||
//1. 根据accessToken，查询用户信息
|
||
FtToken tokenEntity = shiroService.findByToken(accessToken);
|
||
userId = tokenEntity.getUserId();
|
||
//2. token失效
|
||
if (tokenEntity.getExpireTime().getTime() < System.currentTimeMillis()) {
|
||
throw new IncorrectCredentialsException("token失效，请重新登录");
|
||
}
|
||
}
|
||
//3. 调用数据库的方法, 从数据库中查询 username 对应的用户记录
|
||
Object user = shiroService.findByUserId(userId);
|
||
//4. 若用户不存在, 则可以抛出 UnknownAccountException 异常
|
||
if (user == null) {
|
||
throw new UnknownAccountException("用户不存在!");
|
||
}
|
||
//5. 根据用户的情况, 来构建 AuthenticationInfo 对象并返回. 通常使用的实现类为: SimpleAuthenticationInfo
|
||
return new SimpleAuthenticationInfo(user, accessToken, this.getName());
|
||
}
|
||
|
||
@Override
|
||
public boolean supports(AuthenticationToken authenticationToken) {
|
||
return authenticationToken instanceof AuthToken;
|
||
}
|
||
|
||
}
|
||
|