shiro域名

import org.apache.shiro.realm.Realm;
import org.apache.shiro.realm.text.TextConfigurationRealm;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.apache.shiro.web.servlet.ShiroFilter;

public class ShiroConfig {

    public static void main(String[] args) {
        // 创建 Realm
        Realm realm = new TextConfigurationRealm();
        ((TextConfigurationRealm) realm).setCredentialsMatcher(new HashedCredentialsMatcher("SHA-256"));

        // 配置用户、角色和权限
        ((TextConfigurationRealm) realm).setUsers Collections.singletonMap("user", new SimpleAuthenticationInfo("user", "password", getName()));
        ((TextConfigurationRealm) realm).setRoles Collections.singletonMap("admin", Collections.singleton("user:create"));
        ((TextConfigurationRealm) realm).setPermissions(Collections.singletonMap("user:create", Collections.singletonList(new SimpleGrantedAuthority("user:create"))));

        // 创建 SecurityManager
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        securityManager.setRealm(realm);

        // 创建 ShiroFilter
        ShiroFilterFactoryBean shiroFilter = new ShiroFilterFactoryBean();
        shiroFilter.setSecurityManager(securityManager);
        shiroFilter.setLoginUrl("/login");
        shiroFilter.setUnauthorizedUrl("/unauthorized");

        // 配置过滤器链
        Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
        filterChainDefinitionMap.put("/public/**", "anon");
        filterChainDefinitionMap.put("/admin/**", "authc, roles[admin]");
        shiroFilter.setFilterChainDefinitionMap(filterChainDefinitionMap);

        // 初始化 Shiro
        SecurityUtils.setSecurityManager(securityManager);
    }
}