ShiroConfig.java 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307
  1. package org.jeecg.config;
  2. import org.apache.shiro.mgt.DefaultSessionStorageEvaluator;
  3. import org.apache.shiro.mgt.DefaultSubjectDAO;
  4. import org.apache.shiro.mgt.SecurityManager;
  5. import org.apache.shiro.spring.LifecycleBeanPostProcessor;
  6. import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
  7. import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
  8. import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
  9. import org.crazycake.shiro.RedisCacheManager;
  10. import org.crazycake.shiro.RedisManager;
  11. import org.jeecg.common.util.oConvertUtils;
  12. import org.jeecg.modules.shiro.authc.ShiroRealm;
  13. import org.jeecg.modules.shiro.authc.aop.JwtFilter;
  14. import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
  15. import org.springframework.beans.factory.annotation.Value;
  16. import org.springframework.context.annotation.Bean;
  17. import org.springframework.context.annotation.Configuration;
  18. import org.springframework.context.annotation.DependsOn;
  19. import org.springframework.util.StringUtils;
  20. import javax.servlet.Filter;
  21. import java.util.HashMap;
  22. import java.util.LinkedHashMap;
  23. import java.util.Map;
  24. /**
  25. * @author: Scott
  26. * @date: 2018/2/7
  27. * @description: shiro 配置类
  28. */
  29. @Configuration
  30. public class ShiroConfig {
  31. @Value("${spring.redis.port}")
  32. private String port;
  33. @Value("${spring.redis.host}")
  34. private String host;
  35. @Value("${spring.redis.password}")
  36. private String redisPassword;
  37. /**
  38. * Filter Chain定义说明
  39. * <p>
  40. * 1、一个URL可以配置多个Filter,使用逗号分隔
  41. * 2、当设置多个过滤器时,全部验证通过,才视为通过
  42. * 3、部分过滤器可指定参数,如perms,roles
  43. */
  44. @Bean("shiroFilter")
  45. public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {
  46. ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
  47. shiroFilterFactoryBean.setSecurityManager(securityManager);
  48. // 拦截器
  49. Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
  50. // 配置不会被拦截的链接 顺序判断
  51. //登录接口排除
  52. filterChainDefinitionMap.put("/sys/mLogin", "anon");
  53. filterChainDefinitionMap.put("/sys/login", "anon");
  54. filterChainDefinitionMap.put("/sys/wxlogin", "anon");
  55. filterChainDefinitionMap.put("/ctop/rule/**", "anon");
  56. //第三方登录
  57. filterChainDefinitionMap.put("/thirdLogin/**", "anon");
  58. //获取加密串
  59. filterChainDefinitionMap.put("/sys/getEncryptedString", "anon");
  60. //短信验证码
  61. filterChainDefinitionMap.put("/sys/sms", "anon");
  62. //手机登录
  63. filterChainDefinitionMap.put("/sys/phoneLogin", "anon");
  64. //校验用户是否存在
  65. filterChainDefinitionMap.put("/sys/user/checkOnlyUser", "anon");
  66. //用户注册
  67. filterChainDefinitionMap.put("/sys/user/register", "anon");
  68. //根据手机号获取用户信息
  69. filterChainDefinitionMap.put("/sys/user/querySysUser", "anon");
  70. //用户忘记密码验证手机号
  71. filterChainDefinitionMap.put("/sys/user/phoneVerification", "anon");
  72. //用户更改密码
  73. filterChainDefinitionMap.put("/sys/user/passwordChange", "anon");
  74. //登录验证码
  75. filterChainDefinitionMap.put("/auth/2step-code", "anon");
  76. //图片预览不限制token
  77. filterChainDefinitionMap.put("/sys/common/view/**", "anon");
  78. //文件下载不限制token
  79. filterChainDefinitionMap.put("/sys/common/download/**", "anon");
  80. //pdf预览
  81. filterChainDefinitionMap.put("/sys/common/pdf/**", "anon");
  82. filterChainDefinitionMap.put("/ctop/bytedanceAreaInfo/**", "anon");
  83. filterChainDefinitionMap.put("/ctop/bytedanceInterestCategory/**", "anon");
  84. filterChainDefinitionMap.put("/template/creative/words/get", "anon");
  85. filterChainDefinitionMap.put("template/bytedance/industry/list", "anon");
  86. //积木报表排除
  87. filterChainDefinitionMap.put("/jmreport/**", "anon");
  88. filterChainDefinitionMap.put("/**/*.js.map", "anon");
  89. filterChainDefinitionMap.put("/**/*.css.map", "anon");
  90. filterChainDefinitionMap.put("/bytedance/batch/creative/words/get", "anon");
  91. filterChainDefinitionMap.put("/bytedance/batch/action/text", "anon");
  92. filterChainDefinitionMap.put("/bytedance/batch/industry/list", "anon");
  93. filterChainDefinitionMap.put("/appium/crawler/*", "anon");
  94. filterChainDefinitionMap.put("/ctop/kuaishouChannelRegInfo/*", "anon");
  95. filterChainDefinitionMap.put("/ctop/byteDance/homePage/report/*", "anon");
  96. filterChainDefinitionMap.put("/ctop/material/top/cost", "anon");
  97. filterChainDefinitionMap.put("/dimension/report/*", "anon");
  98. filterChainDefinitionMap.put("/userAllocation/updateAuthName", "anon");
  99. filterChainDefinitionMap.put("/v1/**", "anon");
  100. filterChainDefinitionMap.put("/generic/**", "anon");
  101. filterChainDefinitionMap.put("/", "anon");
  102. filterChainDefinitionMap.put("/doc.html", "anon");
  103. filterChainDefinitionMap.put("/**/*.js", "anon");
  104. filterChainDefinitionMap.put("/**/*.css", "anon");
  105. filterChainDefinitionMap.put("/**/*.html", "anon");
  106. filterChainDefinitionMap.put("/**/*.svg", "anon");
  107. filterChainDefinitionMap.put("/**/*.jpg", "anon");
  108. filterChainDefinitionMap.put("/**/*.png", "anon");
  109. filterChainDefinitionMap.put("/**/*.ico", "anon");
  110. filterChainDefinitionMap.put("/druid/**", "anon");
  111. filterChainDefinitionMap.put("/swagger-ui.html", "anon");
  112. filterChainDefinitionMap.put("/swagger**/**", "anon");
  113. filterChainDefinitionMap.put("/webjars/**", "anon");
  114. filterChainDefinitionMap.put("/v2/**", "anon");
  115. filterChainDefinitionMap.put("/kuaishou", "anon");
  116. filterChainDefinitionMap.put("/kuaishou/report", "anon");
  117. filterChainDefinitionMap.put("/ctop/bindAccount/**", "anon");
  118. filterChainDefinitionMap.put("/**/*.mp4", "anon");
  119. //activiti
  120. filterChainDefinitionMap.put("/activiti/**", "anon");
  121. filterChainDefinitionMap.put("/diagram-viewer/**", "anon");
  122. filterChainDefinitionMap.put("/editor-app/**", "anon");
  123. //大屏设计器排除
  124. filterChainDefinitionMap.put("/big/screen/**", "anon");
  125. //性能监控
  126. filterChainDefinitionMap.put("/actuator/metrics/**", "anon");
  127. filterChainDefinitionMap.put("/actuator/httptrace/**", "anon");
  128. filterChainDefinitionMap.put("/actuator/redis/**", "anon");
  129. //消息队列
  130. filterChainDefinitionMap.put("/mq/**", "anon");
  131. //模板测试
  132. filterChainDefinitionMap.put("/test/**", "anon");
  133. //oauth接口
  134. filterChainDefinitionMap.put("/auth/**", "anon");
  135. filterChainDefinitionMap.put("/ctop/syncdata/**", "anon");
  136. filterChainDefinitionMap.put("/sys/dictItem/list", "anon");
  137. //头条接口
  138. filterChainDefinitionMap.put("/bytedance", "anon");
  139. filterChainDefinitionMap.put("/toutiao/loadAllData", "anon");
  140. filterChainDefinitionMap.put("/toutiao/loadSingleData", "anon");
  141. filterChainDefinitionMap.put("/kuaishou/getReport/historyData", "anon");
  142. filterChainDefinitionMap.put("/toutiao/advertiser/**", "anon");
  143. filterChainDefinitionMap.put("/template/convert/**", "anon");
  144. filterChainDefinitionMap.put("/upload/**", "anon");
  145. filterChainDefinitionMap.put("/appium/appiumTask/run", "anon");
  146. filterChainDefinitionMap.put("/system/userCompany/**", "anon");
  147. filterChainDefinitionMap.put("/qywexin", "anon");
  148. filterChainDefinitionMap.put("/sys/feishu/**", "anon");
  149. filterChainDefinitionMap.put("/test/getGroupData/**", "anon");
  150. filterChainDefinitionMap.put("/test/getVideoAndImage/**", "anon");
  151. filterChainDefinitionMap.put("/test/gerCreative/**", "anon");
  152. filterChainDefinitionMap.put("/test/testdouyinmusic", "anon");
  153. filterChainDefinitionMap.put("/test/syncDouyinMusic", "anon");
  154. filterChainDefinitionMap.put("/test/parseDouyinMusic", "anon");
  155. filterChainDefinitionMap.put("/report/kuaishouReportDailyAgent/get", "anon");
  156. filterChainDefinitionMap.put("/appium/appiumTask/run/login", "anon");
  157. filterChainDefinitionMap.put("/zip/download", "anon");
  158. //WebSocket
  159. filterChainDefinitionMap.put("/websocket/*", "anon");
  160. //爬虫接口
  161. filterChainDefinitionMap.put("/graphql/video", "anon");
  162. filterChainDefinitionMap.put("/ks/web/test", "anon");
  163. filterChainDefinitionMap.put("/ureport/**", "anon");
  164. filterChainDefinitionMap.put("/job/test/*", "anon");
  165. filterChainDefinitionMap.put("/third/*", "anon");
  166. filterChainDefinitionMap.put("/ctop/kuaishou/dailyPage/**", "anon");
  167. filterChainDefinitionMap.put("/rest/script/*", "anon");
  168. filterChainDefinitionMap.put("/ctop/checkTaskList/*", "anon");
  169. filterChainDefinitionMap.put("/ctop/report/bytedance/*", "anon");
  170. filterChainDefinitionMap.put("/shiwan/shiwanFileUpload/*", "anon");
  171. filterChainDefinitionMap.put("/oa/wechatNoList/*", "anon");
  172. filterChainDefinitionMap.put("/ruleGroup/*", "anon");
  173. filterChainDefinitionMap.put("/kuaishou/material/*", "anon");
  174. filterChainDefinitionMap.put("/kuaishou/create/*", "anon");
  175. filterChainDefinitionMap.put("/template/kuaiShouBatchCreativeTemplate/*", "anon");
  176. filterChainDefinitionMap.put("/template/kuaiShouBatchGroupTemplate/*", "anon");
  177. filterChainDefinitionMap.put("/template/kuaiShouBatchCampaignTemplate/*", "anon");
  178. filterChainDefinitionMap.put("/template/**", "anon");
  179. filterChainDefinitionMap.put("/batch/kuaiShouGroupTemplate/*", "anon");
  180. filterChainDefinitionMap.put("/kuaishouBatch/**", "anon");
  181. filterChainDefinitionMap.put("/kuaishou/creative/*", "anon");
  182. filterChainDefinitionMap.put("/ai/aiKuaiShouAppInfo/*", "anon");
  183. filterChainDefinitionMap.put("/explore/*", "anon");
  184. filterChainDefinitionMap.put("/ai/batchUpdate/*", "anon");
  185. filterChainDefinitionMap.put("/ctop/kuaishou/videoReport/*", "anon");
  186. filterChainDefinitionMap.put("/ai/create/*", "anon");
  187. //filterChainDefinitionMap.put("/overView/*", "anon");
  188. filterChainDefinitionMap.put("/kuaishouCrowdPack/**", "anon");
  189. filterChainDefinitionMap.put("/kuaishou/batch/*", "anon");
  190. filterChainDefinitionMap.put("/dimension/kuaiShouDimensionAccount/*", "anon");
  191. filterChainDefinitionMap.put("/ai/projectCreate/*", "anon");
  192. //获取快手实时组数据信息
  193. filterChainDefinitionMap.put("/kuaishou/realTime/*", "anon");
  194. filterChainDefinitionMap.put("/agent/*", "anon");
  195. // 添加自己的过滤器并且取名为jwt
  196. Map<String, Filter> filterMap = new HashMap<>(1);
  197. filterMap.put("jwt", new JwtFilter());
  198. shiroFilterFactoryBean.setFilters(filterMap);
  199. // <!-- 过滤链定义,从上向下顺序执行,一般将/**放在最为下边
  200. filterChainDefinitionMap.put("/**", "jwt");
  201. // 未授权界面返回JSON
  202. shiroFilterFactoryBean.setUnauthorizedUrl("/sys/common/403");
  203. shiroFilterFactoryBean.setLoginUrl("/sys/common/403");
  204. shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
  205. return shiroFilterFactoryBean;
  206. }
  207. @Bean("securityManager")
  208. public DefaultWebSecurityManager securityManager(ShiroRealm myRealm) {
  209. DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
  210. securityManager.setRealm(myRealm);
  211. /*
  212. * 关闭shiro自带的session,详情见文档
  213. * http://shiro.apache.org/session-management.html#SessionManagement-
  214. * StatelessApplications%28Sessionless%29
  215. */
  216. DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO();
  217. DefaultSessionStorageEvaluator defaultSessionStorageEvaluator = new DefaultSessionStorageEvaluator();
  218. defaultSessionStorageEvaluator.setSessionStorageEnabled(false);
  219. subjectDAO.setSessionStorageEvaluator(defaultSessionStorageEvaluator);
  220. securityManager.setSubjectDAO(subjectDAO);
  221. return securityManager;
  222. }
  223. /**
  224. * 下面的代码是添加注解支持
  225. *
  226. * @return
  227. */
  228. @Bean
  229. @DependsOn("lifecycleBeanPostProcessor")
  230. public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
  231. DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
  232. defaultAdvisorAutoProxyCreator.setProxyTargetClass(true);
  233. /**
  234. * 解决重复代理问题 github#994
  235. * 添加前缀判断 不匹配 任何Advisor
  236. */
  237. defaultAdvisorAutoProxyCreator.setUsePrefix(true);
  238. defaultAdvisorAutoProxyCreator.setAdvisorBeanNamePrefix("_no_advisor");
  239. return defaultAdvisorAutoProxyCreator;
  240. }
  241. @Bean
  242. public static LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
  243. return new LifecycleBeanPostProcessor();
  244. }
  245. @Bean
  246. public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager) {
  247. AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
  248. advisor.setSecurityManager(securityManager);
  249. return advisor;
  250. }
  251. /**
  252. * cacheManager 缓存 redis实现
  253. * 使用的是shiro-redis开源插件
  254. *
  255. * @return
  256. */
  257. public RedisCacheManager redisCacheManager() {
  258. RedisCacheManager redisCacheManager = new RedisCacheManager();
  259. redisCacheManager.setRedisManager(redisManager());
  260. //redis中针对不同用户缓存(此处的id需要对应user实体中的id字段,用于唯一标识)
  261. redisCacheManager.setPrincipalIdFieldName("id");
  262. //用户权限信息缓存时间
  263. redisCacheManager.setExpire(200000);
  264. return redisCacheManager;
  265. }
  266. /**
  267. * 配置shiro redisManager
  268. * 使用的是shiro-redis开源插件
  269. *
  270. * @return
  271. */
  272. @Bean
  273. public RedisManager redisManager() {
  274. RedisManager redisManager = new RedisManager();
  275. redisManager.setHost(host);
  276. redisManager.setPort(oConvertUtils.getInt(port));
  277. redisManager.setTimeout(0);
  278. if (!StringUtils.isEmpty(redisPassword)) {
  279. redisManager.setPassword(redisPassword);
  280. }
  281. return redisManager;
  282. }
  283. }