2017.2.15 开涛shiro教程-第二十一章-授予身份与切换身份 tableentityservicedao

Posted 2020-08-31 七月流火嗞嗞嗞

tags:

篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了2017.2.15 开涛shiro教程-第二十一章-授予身份与切换身份 tableentityservicedao相关的知识，希望对你有一定的参考价值。

原博客地址：http://jinnianshilongnian.iteye.com/blog/2018398

根据下载的pdf学习。

第二十一章授予身份与切换身份（一）

1.使用场景

某个领导因为某些原因不能访问一些网站，他想把这个网站上的工作委托给秘书，但是他又不想提供账户、密码。此时可以使用shiro的 RunAs 功能。

RunAs：允许一个用户假装为另一个用户（如果获得了允许）的身份进行访问。

注意，本章代码基于《第十六章综合实例》，详细的数据模型及基本流程见该章。

2.表及数据

请运行 shiro-example-chapter21/sql/ shiro-schema.sql 表结构
请运行 shiro-example-chapter21/sql/ shiro-data.sql 数据

 1 drop table if exists sys_user;
 2 drop table if exists sys_organization;
 3 drop table if exists sys_resource;
 4 drop table if exists sys_role;
 5 drop table if exists sys_user_runas;
 6 
 7 create table sys_user (
 8   id bigint auto_increment,
 9   organization_id bigint,
10   username varchar(100),
11   password varchar(100),
12   salt varchar(100),
13   role_ids varchar(100),
14   locked bool default false,
15   constraint pk_sys_user primary key(id)
16 ) charset=utf8 ENGINE=InnoDB;
17 create unique index idx_sys_user_username on sys_user(username);
18 create index idx_sys_user_organization_id on sys_user(organization_id);
19 
20 create table sys_organization (
21   id bigint auto_increment,
22   name varchar(100),
23   parent_id bigint,
24   parent_ids varchar(100),
25   available bool default false,
26   constraint pk_sys_organization primary key(id)
27 ) charset=utf8 ENGINE=InnoDB;
28 create index idx_sys_organization_parent_id on sys_organization(parent_id);
29 create index idx_sys_organization_parent_ids on sys_organization(parent_ids);
30 
31 
32 create table sys_resource (
33   id bigint auto_increment,
34   name varchar(100),
35   type varchar(50),
36   url varchar(200),
37   parent_id bigint,
38   parent_ids varchar(100),
39   permission varchar(100),
40   available bool default false,
41   constraint pk_sys_resource primary key(id)
42 ) charset=utf8 ENGINE=InnoDB;
43 create index idx_sys_resource_parent_id on sys_resource(parent_id);
44 create index idx_sys_resource_parent_ids on sys_resource(parent_ids);
45 
46 create table sys_role (
47   id bigint auto_increment,
48   role varchar(100),
49   description varchar(100),
50   resource_ids varchar(100),
51   available bool default false,
52   constraint pk_sys_role primary key(id)
53 ) charset=utf8 ENGINE=InnoDB;
54 create index idx_sys_role_resource_ids on sys_role(resource_ids);
55 
56 create table sys_user_runas (
57   from_user_id bigint,
58   to_user_id bigint,
59   constraint pk_sys_user_runas primary key(from_user_id, to_user_id)
60 ) charset=utf8 ENGINE=InnoDB;

shiro-schema.sql

 1 DELIMITER ;
 2 delete from sys_user;
 3 delete from sys_role;
 4 delete from sys_resource;
 5 delete from sys_organization;
 6 delete from sys_user_runas;
 7 
 8 insert into sys_user values(1,1,\'admin\',\'d3c59d25033dbf980d29554025c23a75\',\'8d78869f470951332959580424d4bf4f\', \'1\', false);
 9 insert into sys_user values(2,1,\'zhang\',\'c6a02f6c9a5aaf311ec94009b6b024d0\',\'588ae709311808bd7e5fade1c84407c7\', \'1\', false);
10 insert into sys_user values(3,1,\'wang\',\'2e6f83bdaef108d4f23b2a1f2b9928cc\',\'bd647b15f6724ea711272c4a3c6d16c0\', \'1\', false);
11 
12 insert into sys_organization values(1, \'总公司\', 0, \'0/\', true);
13 insert into sys_organization values(2, \'分公司1\', 1, \'0/1/\', true);
14 insert into sys_organization values(3, \'分公司2\', 1, \'0/1/\', true);
15 insert into sys_organization values(4, \'分公司11\', 2, \'0/1/2/\', true);
16 
17 insert into sys_resource values(1, \'资源\', \'menu\', \'\', 0, \'0/\', \'\', true);
18 
19 insert into sys_resource values(11, \'组织机构管理\', \'menu\', \'/organization\', 1, \'0/1/\', \'organization:*\', true);
20 insert into sys_resource values(12, \'组织机构新增\', \'button\', \'\', 11, \'0/1/11/\', \'organization:create\', true);
21 insert into sys_resource values(13, \'组织机构修改\', \'button\', \'\', 11, \'0/1/11/\', \'organization:update\', true);
22 insert into sys_resource values(14, \'组织机构删除\', \'button\', \'\', 11, \'0/1/11/\', \'organization:delete\', true);
23 insert into sys_resource values(15, \'组织机构查看\', \'button\', \'\', 11, \'0/1/11/\', \'organization:view\', true);
24 
25 insert into sys_resource values(21, \'用户管理\', \'menu\', \'/user\', 1, \'0/1/\', \'user:*\', true);
26 insert into sys_resource values(22, \'用户新增\', \'button\', \'\', 21, \'0/1/21/\', \'user:create\', true);
27 insert into sys_resource values(23, \'用户修改\', \'button\', \'\', 21, \'0/1/21/\', \'user:update\', true);
28 insert into sys_resource values(24, \'用户删除\', \'button\', \'\', 21, \'0/1/21/\', \'user:delete\', true);
29 insert into sys_resource values(25, \'用户查看\', \'button\', \'\', 21, \'0/1/21/\', \'user:view\', true);
30 
31 insert into sys_resource values(31, \'资源管理\', \'menu\', \'/resource\', 1, \'0/1/\', \'resource:*\', true);
32 insert into sys_resource values(32, \'资源新增\', \'button\', \'\', 31, \'0/1/31/\', \'resource:create\', true);
33 insert into sys_resource values(33, \'资源修改\', \'button\', \'\', 31, \'0/1/31/\', \'resource:update\', true);
34 insert into sys_resource values(34, \'资源删除\', \'button\', \'\', 31, \'0/1/31/\', \'resource:delete\', true);
35 insert into sys_resource values(35, \'资源查看\', \'button\', \'\', 31, \'0/1/31/\', \'resource:view\', true);
36 
37 insert into sys_resource values(41, \'角色管理\', \'menu\', \'/role\', 1, \'0/1/\', \'role:*\', true);
38 insert into sys_resource values(42, \'角色新增\', \'button\', \'\', 41, \'0/1/41/\', \'role:create\', true);
39 insert into sys_resource values(43, \'角色修改\', \'button\', \'\', 41, \'0/1/41/\', \'role:update\', true);
40 insert into sys_resource values(44, \'角色删除\', \'button\', \'\', 41, \'0/1/41/\', \'role:delete\', true);
41 insert into sys_resource values(45, \'角色查看\', \'button\', \'\', 41, \'0/1/41/\', \'role:view\', true);
42 
43 insert into sys_role values(1, \'admin\', \'超级管理员\', \'11,21,31,41\', true);

shiro-data.sql

增加的sql语句：

1 drop table if exists sys_user_runas;
2 create table sys_user_runas (
3   from_user_id bigint,
4   to_user_id bigint,
5   constraint pk_sys_user_runas primary key(from_user_id, to_user_id)
6 ) charset=utf8 ENGINE=InnoDB;

3.实体entity

 1 package com.github.zhangkaitao.shiro.chapter21.entity;
 2 import java.io.Serializable;
 3 
 4 public class Organization implements Serializable {
 5     private Long id; //编号
 6     private String name; //组织机构名称
 7     private Long parentId; //父编号
 8     private String parentIds; //父编号列表，如1/2/
 9     private Boolean available = Boolean.FALSE;
10 
11     //getter、setter略
12 
13     public boolean isRootNode() {
14         return parentId == 0;
15     }
16 
17     public String makeSelfAsParentIds() {
18         return getParentIds() + getId() + "/";
19     }
20 
21     @Override
22     public boolean equals(Object o) {
23         if (this == o) return true;
24         if (o == null || getClass() != o.getClass()) return false;
25 
26         Organization that = (Organization) o;
27 
28         if (id != null ? !id.equals(that.id) : that.id != null) return false;
29 
30         return true;
31     }
32 
33     @Override
34     public int hashCode() {
35         return id != null ? id.hashCode() : 0;
36     }
37 
38     @Override
39     public String toString() {
40         return "Organization{" +
41                 "id=" + id +
42                 ", name=\'" + name + \'\\\'\' +
43                 ", parentId=" + parentId +
44                 ", parentIds=\'" + parentIds + \'\\\'\' +
45                 ", available=" + available +
46                 \'}\';
47     }
48 }

Organization

 1 package com.github.zhangkaitao.shiro.chapter21.entity;
 2 import java.io.Serializable;
 3 
 4 public class Resource implements Serializable {
 5     private Long id; //编号
 6     private String name; //资源名称
 7     private ResourceType type = ResourceType.menu; //资源类型
 8     private String url; //资源路径
 9     private String permission; //权限字符串
10     private Long parentId; //父编号
11     private String parentIds; //父编号列表
12     private Boolean available = Boolean.FALSE;
13 
14     public static enum ResourceType {
15         menu("菜单"), button("按钮");
16 
17         private final String info;
18         private ResourceType(String info) {
19             this.info = info;
20         }
21 
22         public String getInfo() {
23             return info;
24         }
25     }
26 
27     //getter、setter略
28 
29     public boolean isRootNode() {
30         return parentId == 0;
31     }
32 
33     public String makeSelfAsParentIds() {
34         return getParentIds() + getId() + "/";
35     }
36 
37     @Override
38     public boolean equals(Object o) {
39         if (this == o) return true;
40         if (o == null || getClass() != o.getClass()) return false;
41 
42         Resource resource = (Resource) o;
43 
44         if (id != null ? !id.equals(resource.id) : resource.id != null) return false;
45 
46         return true;
47     }
48 
49     @Override
50     public int hashCode() {
51         return id != null ? id.hashCode() : 0;
52     }
53 
54     @Override
55     public String toString() {
56         return "Resource{" +
57                 "id=" + id +
58                 ", name=\'" + name + \'\\\'\' +
59                 ", type=" + type +
60                 ", permission=\'" + permission + \'\\\'\' +
61                 ", parentId=" + parentId +
62                 ", parentIds=\'" + parentIds + \'\\\'\' +
63                 ", available=" + available +
64                 \'}\';
65     }
66 }

Resource

 1 package com.github.zhangkaitao.shiro.chapter21.entity;
 2 
 3 import org.springframework.util.CollectionUtils;
 4 import org.springframework.util.StringUtils;
 5 import java.io.Serializable;
 6 import java.util.ArrayList;
 7 import java.util.List;
 8 
 9 public class Role implements Serializable {
10     private Long id; //编号
11     private String role; //角色标识 程序中判断使用,如"admin"
12     private String description; //角色描述,UI界面显示使用
13     private List<Long> resourceIds; //拥有的资源
14     private Boolean available = Boolean.FALSE; //是否可用,如果不可用将不会添加给用户
15 
16     public Role() {
17     }
18 
19     public Role(String role, String description, Boolean available) {
20         this.role = role;
21         this.description = description;
22         this.available = available;
23     }
24 
25    //getter、setter略
26     public List<Long> getResourceIds() {
27         if(resourceIds == null) {
28             resourceIds = new ArrayList<Long>();
29         }
30         return resourceIds;
31     }
32 
33     public void setResourceIds(List<Long> resourceIds) {
34         this.resourceIds = resourceIds;
35     }
36 
37     public String getResourceIdsStr() {
38         if(CollectionUtils.isEmpty(resourceIds)) {
39             return "";
40         }
41         StringBuilder s = new StringBuilder();
42         for(Long resourceId : resourceIds) {
43             s.append(resourceId);
44             s.append(",");
45         }
46         return s.toString();
47     }
48 
49     public void setResourceIdsStr(String resourceIdsStr) {
50         if(StringUtils.isEmpty(resourceIdsStr)) {
51             return;
52         }
53         String[] resourceIdStrs = resourceIdsStr.split(",");
54         for(String resourceIdStr : resourceIdStrs) {
55             if(StringUtils.isEmpty(resourceIdStr)) {
56                 continue;
57             }
58             getResourceIds().add(Long.valueOf(resourceIdStr));
59         }
60     }
61 
62    
63     @Override
64     public boolean equals(Object o) {
65         if (this == o) return true;
66         if (o == null || getClass() != o.getClass()) return false;
67 
68         Role role = (Role) o;
69 
70         if (id != null ? !id.equals(role.id) : role.id != null) return false;
71 
72         return true;
73     }
74 
75     @Override
76     public int hashCode() {
77         return id != null ? id.hashCode() : 0;
78     }
79 
80     @Override
81     public String toString() {
82         return "Role{" +
83                 "id=" + id +
84                 ", role=\'" + role + \'\\\'\' +
85                 ", description=\'" + description + \'\\\'\' +
86                 ", resourceIds=" + resourceIds +
87                 ", available=" + available +
88                 \'}\';
89     }
90 }

Role

 1 package com.github.zhangkaitao.shiro.chapter21.entity;
 2 
 3 import org.springframework.util.CollectionUtils;
 4 import org.springframework.util.StringUtils;
 5 import java.io.Serializable;
 6 import java.util.ArrayList;
 7 import java.util.List;
 8 
 9 public class User implements Serializable {
10     private Long id; //编号
11     private Long organizationId; //所属公司
12     private String username; //用户名
13     private String password; //密码
14     private String salt; //加密密码的盐
15     private List<Long> roleIds; //拥有的角色列表
16     private Boolean locked = Boolean.FALSE;
17 
18     public User() {
19     }
20 
21     public User(String username, String password) {
22         this.username = username;
23         this.password = password;
24     }
25 
26    //getter、setter略
27     
28     public String getCredentialsSalt() {
29         return username + salt;
30     }
31 
32     public List<Long> getRoleIds() {
33         if(roleIds == null) {
34             roleIds = new ArrayList<Long>();
35         }
36         return roleIds;
37     }
38 
39     public void setRoleIds(List<Long> roleIds) {
40         this.roleIds = roleIds;
41     }
42 
43     public String getRoleIdsStr() {
44         if(CollectionUtils.isEmpty(roleIds)) {
45             return "";
46         }
47         StringBuilder s = new StringBuilder();
48         for(Long roleId : roleIds) {
49             s.append(roleId);
50             s.append(",");
51         }
52         return s.toString();
53     }
54 
55     public void setRoleIdsStr(String roleIdsStr) {
56         if(StringUtils.isEmpty(roleIdsStr)) {
57             return;
58         }
59         String[] roleIdStrs = roleIdsStr.split(",");
60         for(String roleIdStr : roleIdStrs) {
61             if(StringUtils.isEmpty(roleIdStr)) {
62                 continue;
63             }
64             getRoleIds().add(Long.valueOf(roleIdStr));
65         }
66     }
67 
68     @Override
69     public boolean equals(Object o) {
70         if (this == o) return true;
71         if (o == null || getClass() != o.getClass()) return false;
72 
73         User user = (User) o;
74 
75         if (id != null ? !id.equals(user.id) : user.id != null) return false;
76 
77         return true;
78     }
79 
80     @Override
81     public int hashCode() {
82         return id != null ? id.hashCode() : 0;
83     }
84 
85     @Override
86     public String toString() {
87         return "User{" +
88                 "id=" + id +
89                 ", organizationId=" + organizationId +
90                 ", username=\'" + username + \'\\\'\' +
91                 ", password=\'" + password + \'\\\'\' +
92                 ", salt=\'" + salt + \'\\\'\' +
93                 ", roleIds=" + roleIds +
94                 ", locked=" + locked +
95                 \'}\';
96     }
97 }

User

这都是前面章节的内容了。重点是UserRunAs。该实体定义了授予身份账号（A）与被授予身份账号（B）的关系。B将假装为A进行访问。

 1 第二十一章
 python学习手册:第二十一章——模块：宏伟蓝图
 WPF学习第二十一章 特殊容器
 Python 第二十一章
 Qt Gui 第二十一章
 第二十一章：创建和操纵表