ssh框架整合shiro, shiro不执行myrealm的认证方法

weixin_43707266 2020-05-10 02:02:19

现象描述：做了一个简单的登录页面，用shiro。
登录页面：login.jsp, 登录成功：index.jsp。

配置如下：
applicationContext-shiro.xml

<bean id="myRealm" class="tester.shiro.MyRealm">
<property name="loginService" ref="loginService"></property>
</bean>


<bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">

<property name="realm" ref="myRealm" />

<property name="cacheManager" ref="cacheManager" />
</bean>


<bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">

<property name="securityManager" ref="securityManager" />

<property name="loginUrl" value="/jsp/login.jsp" />

<property name="successUrl" value="/jsp/index.jsp" />

<property name="unauthorizedUrl" value="/jsp/403.jsp" />


<property name="filterChainDefinitions">
<value>

login_*=anon
/jsp/register.jsp=anon
/jsp/login.jsp=anon


/jsp/index.jsp=authc









/** = authc

</value>
</property>
</bean>

<bean id="cacheManager" class="org.apache.shiro.cache.MemoryConstrainedCacheManager" />
<bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />


<bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"
depends-on="lifecycleBeanPostProcessor">
<property name="proxyTargetClass" value="true" />
</bean>

<bean class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
<property name="securityManager" ref="securityManager" />
</bean>

myrealm类实现如下：
@Component
@Transactional
public class MyRealm extends AuthorizingRealm {

private LoginService loginService;

//授权信息（doGetAuthorizationInfo)
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals)
{
System.out.println("授权信息......");
//从principals中获取登陆用户输入的登录名
String loginname = (String) principals.fromRealm(getName()).iterator().next();//用迭代器
//从数据库判断用户是否存在
User user = loginService.findUserByName(loginname);
if(user != null)
{
SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
Set<Role> roles = user.getRoles();
for (Role role : roles)
{
//把角色的名字添加到授权信息中
info.addRole(role.getRole_name());
//获取角色的对应权限
Set<Permission> permissions = role.getPermissions();
for (Permission permission : permissions)
{
info.addStringPermission(permission.getValidateurl());
}
}
return info;
}
return null;
}

//获取身份验证信息（doGetAuthenticationInfo
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException
{
System.out.println("验证信息......");
// 转换成为更简单的UsernamePasswordToken对象
UsernamePasswordToken usertoken = (UsernamePasswordToken) token;
User user = loginService.findUserByName(usertoken.getUsername());
if(user != null)
{
SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(user.getUsername(),usertoken.getPassword(),getName());
return info;
}
return null;
}

public LoginService getLoginService() {
return loginService;
}

public void setLoginService(LoginService loginService) {
this.loginService = loginService;
}

}

login.jsp:
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>登录页面</title>
</head>
<body>
<form action="${pageContext.request.contextPath }/login_login" method=post >

<label>请输入账号：</label> <input type="text" name="user.username" />
<label>请输入密码：</label> <input type="password" name="user.password" />

<input type="submit" value="登录"/>
</form>

</body>
</html>

现象：
在login.jsp页面登录，页面没有反应，关键是程序没有报错，控制台没有任何打印（由此判断没有进入myrealm的认证方法），大家能不能帮忙看看，哪里有问题呢？

...全文