org.apache.shiro.mgt.RealmSecurityManager Java Examples

@Override
public void contextInitialized( ServletContextEvent sce )
{
    configuration.refresh();
    ShiroIniConfiguration config = configuration.get();
    String iniResourcePath = config.iniResourcePath().get() == null ? "classpath:shiro.ini" : config.iniResourcePath().get();
    sce.getServletContext().setInitParameter( "shiroConfigLocations", iniResourcePath );
    WebEnvironment env = initEnvironment( sce.getServletContext() );

    if ( realmsRefs != null && realmsRefs.iterator().hasNext() ) {

        // Register Realms Services
        RealmSecurityManager realmSecurityManager = ( RealmSecurityManager ) env.getSecurityManager();
        Collection<Realm> iniRealms = new ArrayList<Realm>( realmSecurityManager.getRealms() );
        for ( ServiceReference<Realm> realmRef : realmsRefs ) {
            iniRealms.add( realmRef.get() );
            LOG.debug( "Realm Service '{}' registered!", realmRef.identity() );
        }
        realmSecurityManager.setRealms( iniRealms );

    }

}
 

/**
 * 给角色授权菜单
 *
 * @param uuid
 * @param roleId
 * @return
 */
@RequestMapping(value = "/addRoleMenu")
@ResponseBody
public ResponseModel addRoleMenu(String uuid, Long roleId) {
    uuid = uuid.replaceAll("'", "");
    final List<Long> menuIds = Arrays.stream(uuid.split(",")).map(Long::parseLong).collect(Collectors.toList());
    List<SysRoleMenuAO> list = new ArrayList<>();
    menuIds.forEach(o -> {
        final SysRoleMenuAO roleMenuAO = new SysRoleMenuAO();
        roleMenuAO.setMenuId(o);
        roleMenuAO.setRoleId(roleId);
        list.add(roleMenuAO);
    });
    ResponseModel resp = sysRoleMenuFeign.addRoleMenu(list);

    //重新刷新shrio中的url 和菜单权限
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    MyShiroRealm realm = (MyShiroRealm) rsm.getRealms().iterator().next();
    realm.clearCachedAuthorization();
    return resp;
}
 

@Inject
public RealmManagerImpl(
    final BeanLocator beanLocator,
    final EventManager eventManager,
    final RealmConfigurationStore store,
    @Named("initial") final Provider<RealmConfiguration> defaults,
    final RealmSecurityManager realmSecurityManager,
    final Map<String, Realm> availableRealms)
{
  this.beanLocator = checkNotNull(beanLocator);
  this.eventManager = checkNotNull(eventManager);
  this.store = checkNotNull(store);
  log.debug("Store: {}", store);
  this.defaults = checkNotNull(defaults);
  log.debug("Defaults: {}", defaults);
  this.realmSecurityManager = checkNotNull(realmSecurityManager);
  this.availableRealms = checkNotNull(availableRealms);
}
 

@Inject
public DefaultSecuritySystem(final EventManager eventManager,
                             final RealmSecurityManager realmSecurityManager,
                             final RealmManager realmManager,
                             final AnonymousManager anonymousManager,
                             final Map<String, AuthorizationManager> authorizationManagers,
                             final Map<String, UserManager> userManagers,
                             final SecurityHelper securityHelper)
{
  this.eventManager = checkNotNull(eventManager);
  this.realmSecurityManager = checkNotNull(realmSecurityManager);
  this.realmManager = checkNotNull(realmManager);
  this.anonymousManager = checkNotNull(anonymousManager);
  this.authorizationManagers = checkNotNull(authorizationManagers);
  this.userManagers = checkNotNull(userManagers);
  this.securityHelper = checkNotNull(securityHelper);
}
 

@Override
protected void bindWebSecurityManager(final AnnotatedBindingBuilder<? super WebSecurityManager> bind) {
  bind(NexusWebSecurityManager.class).asEagerSingleton();

  // bind RealmSecurityManager and WebSecurityManager to _same_ component
  bind(RealmSecurityManager.class).to(NexusWebSecurityManager.class);
  bind.to(NexusWebSecurityManager.class);

  // bindings used by external modules
  expose(RealmSecurityManager.class);
  expose(WebSecurityManager.class);
}
 

protected Realm getRealm() {
    final SecurityManager securityManager = SecurityUtils.getSecurityManager();
    if(securityManager instanceof RealmSecurityManager) {
        Collection<Realm> realms = ((RealmSecurityManager) securityManager).getRealms();
        if(!CollectionUtils.isEmpty(realms) && realms.size() == 1) {
            return realms.iterator().next();
        }
    }
    
    throw new MultiRealmException();
}
 

@Override
public void activateService()
        throws Exception
{
    configuration.refresh();
    ShiroIniConfiguration config = configuration.get();

    String iniResourcePath = config.iniResourcePath().get() == null
                             ? Shiro.DEFAULT_INI_RESOURCE_PATH
                             : config.iniResourcePath().get();

    setIni( Ini.fromResourcePath( iniResourcePath ) );
    securityManager = getInstance();

    if ( realmsRefs != null && realmsRefs.iterator().hasNext() ) {

        // Register Realms Services
        RealmSecurityManager realmSecurityManager = ( RealmSecurityManager ) securityManager;
        Collection<Realm> iniRealms = new ArrayList<>( realmSecurityManager.getRealms() );
        for ( ServiceReference<Realm> realmRef : realmsRefs ) {
            iniRealms.add( realmRef.get() );
            LOG.debug( "Realm Service '{}' registered!", realmRef.identity() );
        }
        realmSecurityManager.setRealms( iniRealms );

    }

    ThreadContext.bind( securityManager );
}
 

@Inject
public AuthorizingRealmImpl(final RealmSecurityManager realmSecurityManager,
                            final UserManager userManager,
                            final Map<String, UserManager> userManagerMap)
{
  this.realmSecurityManager = realmSecurityManager;
  this.userManager = userManager;
  this.userManagerMap = userManagerMap;
  HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
  credentialsMatcher.setHashAlgorithmName(Sha1Hash.ALGORITHM_NAME);
  setCredentialsMatcher(credentialsMatcher);
  setName(NAME);
  setAuthenticationCachingEnabled(false); // we authz only, no authc done by this realm
  setAuthorizationCachingEnabled(true);
}
 

/**
 * Clear the authentication cache for the given userId as a result of a password change.
 */
private void clearAuthcRealmCacheForUserId(final String userId) {
  // NOTE: we don't need to iterate all the Sec Managers, they use the same Realms, so one is fine.
  Optional.of(realmSecurityManager)
      .map(RealmSecurityManager::getRealms)
      .orElse(emptyList())
      .stream()
      .filter(realm -> realm instanceof AuthenticatingRealmImpl)
      .map(realm -> (AuthenticatingRealmImpl) realm)
      .findFirst()
      .ifPresent(realm -> realm.clearCache(userId));
}
 

/**
 * 重新加载用户权限
 *
 * @param user
 */
private void reloadAuthorizingByUserId(User user) {
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    ShiroRealm shiroRealm = (ShiroRealm) rsm.getRealms().iterator().next();
    Subject subject = SecurityUtils.getSubject();
    String realmName = subject.getPrincipals().getRealmNames().iterator().next();
    SimplePrincipalCollection principals = new SimplePrincipalCollection(user.getId(), realmName);
    subject.runAs(principals);
    shiroRealm.getAuthorizationCache().remove(subject.getPrincipals());
    subject.releaseRunAs();

    log.info("用户[{}]的权限更新成功！！", user.getUsername());

}
 

/**
 * 授权修改之后调用
 * 
 * @author 梦境迷离.
 * @time 上午9:32:02
 * @version V1.0
 *
 */
@After(value = "shiroAop()")
public void afterGrant(JoinPoint point) {
	int id = (int) point.getArgs()[0];
	log.info("第一个参数是用户id:{}", id);
	RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
	MyRealm realm = (MyRealm) rsm.getRealms().iterator().next();
	realm.clearCachedAuthorization(id);
}
 

/**
 * 重新加载用户权限
 *
 * @param user
 */
@Override
public void reloadAuthorizingByUserId(User user) {
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    ShiroRealm shiroRealm = (ShiroRealm) rsm.getRealms().iterator().next();
    Subject subject = SecurityUtils.getSubject();
    String realmName = subject.getPrincipals().getRealmNames().iterator().next();
    SimplePrincipalCollection principals = new SimplePrincipalCollection(user, realmName);
    subject.runAs(principals);
    shiroRealm.getAuthorizationCache().remove(subject.getPrincipals());
    subject.releaseRunAs();

    log.info("用户[{}]的权限更新成功！！", user.getUsername());

}
 

public void reloadAuthorizingByUserId(User user) {
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    UserRealm shiroRealm = (UserRealm) rsm.getRealms().iterator().next();
    Subject subject = SecurityUtils.getSubject();
    String realmName = subject.getPrincipals().getRealmNames().iterator().next();
    SimplePrincipalCollection principals = new SimplePrincipalCollection(user, realmName);
    subject.runAs(principals);
    shiroRealm.getAuthorizationCache().remove(subject.getPrincipals());
    subject.releaseRunAs();

    LOG.info("用户[{}]的权限更新成功！！", user.getUsername());

}
 

public static void clearCachedAuthorizationInfo()
{
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    UserRealm realm = (UserRealm) rsm.getRealms().iterator().next();
    realm.clearCachedAuthorizationInfo();
}
 

public static void clearCachedAuthorizationInfo()
{
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    UserRealm realm = (UserRealm) rsm.getRealms().iterator().next();
    realm.clearCachedAuthorizationInfo();
}
 

@Inject
public AnonymousAccessApiResource(final AnonymousManager anonymousManager, final RealmSecurityManager realmSecurityManager) {
  this.anonymousManager = checkNotNull(anonymousManager);
  this.realmSecurityManager = checkNotNull(realmSecurityManager);
}
 

@Inject
public RealmExistsValidator(final RealmSecurityManager realmSecurityManager) {
  this.realmSecurityManager = checkNotNull(realmSecurityManager);
}
 

public static void clearCachedAuthorizationInfo() {
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    UserRealm realm = (UserRealm) rsm.getRealms().iterator().next();
    realm.clearCachedAuthorizationInfo();
}
 

@Inject
public DefaultUserHealthCheck(final RealmManager realmManager, final RealmSecurityManager realmSecurityManager)
{
  this.realmManager = checkNotNull(realmManager);
  this.realmSecurityManager = checkNotNull(realmSecurityManager);
}
 

/**
 * 刷新权限
 */
public static void flushPrivileges() {
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    UserRealm realm = (UserRealm) rsm.getRealms().iterator().next();
    realm.clearCachedAuthorization();
}
 

public static void clearCachedAuthorizationInfo() {
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    CustomRealm realm = (CustomRealm) rsm.getRealms().iterator().next();
    realm.clearCachedAuthorizationInfo();
}
 

public static void clearCachedAuthorizationInfo()
{
    RealmSecurityManager rsm = (RealmSecurityManager) SecurityUtils.getSecurityManager();
    UserRealm realm = (UserRealm) rsm.getRealms().iterator().next();
    realm.clearCachedAuthorizationInfo();
}