ShiroConfig.java 9.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210
  1. package org.jeecg.config;
  2. import org.apache.shiro.mgt.DefaultSessionStorageEvaluator;
  3. import org.apache.shiro.mgt.DefaultSubjectDAO;
  4. import org.apache.shiro.mgt.SecurityManager;
  5. import org.apache.shiro.spring.LifecycleBeanPostProcessor;
  6. import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
  7. import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
  8. import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
  9. import org.jeecg.modules.shiro.authc.ShiroRealm;
  10. import org.jeecg.modules.shiro.authc.aop.JwtFilter;
  11. import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
  12. import org.springframework.context.annotation.Bean;
  13. import org.springframework.context.annotation.Configuration;
  14. import org.springframework.context.annotation.DependsOn;
  15. import javax.servlet.Filter;
  16. import java.util.HashMap;
  17. import java.util.LinkedHashMap;
  18. import java.util.Map;
  19. /**
  20. * @author: Scott
  21. * @date: 2018/2/7
  22. * @description: shiro 配置类
  23. */
  24. @Configuration
  25. public class ShiroConfig {
  26. /**
  27. * Filter Chain定义说明
  28. *
  29. * 1、一个URL可以配置多个Filter,使用逗号分隔
  30. * 2、当设置多个过滤器时,全部验证通过,才视为通过
  31. * 3、部分过滤器可指定参数,如perms,roles
  32. */
  33. @Bean("shiroFilter")
  34. public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {
  35. ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
  36. shiroFilterFactoryBean.setSecurityManager(securityManager);
  37. // 拦截器
  38. Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>();
  39. // 配置不会被拦截的链接 顺序判断
  40. //登录接口排除
  41. filterChainDefinitionMap.put("/sys/login", "anon");
  42. filterChainDefinitionMap.put("/sys/wxlogin", "anon");
  43. //获取加密串
  44. filterChainDefinitionMap.put("/sys/getEncryptedString", "anon");
  45. //短信验证码
  46. filterChainDefinitionMap.put("/sys/sms", "anon");
  47. //手机登录
  48. filterChainDefinitionMap.put("/sys/phoneLogin", "anon");
  49. //校验用户是否存在
  50. filterChainDefinitionMap.put("/sys/user/checkOnlyUser", "anon");
  51. //用户注册
  52. filterChainDefinitionMap.put("/sys/user/register", "anon");
  53. //根据手机号获取用户信息
  54. filterChainDefinitionMap.put("/sys/user/querySysUser", "anon");
  55. //用户忘记密码验证手机号
  56. filterChainDefinitionMap.put("/sys/user/phoneVerification", "anon");
  57. //用户更改密码
  58. filterChainDefinitionMap.put("/sys/user/passwordChange", "anon");
  59. //登录验证码
  60. filterChainDefinitionMap.put("/auth/2step-code", "anon");
  61. //图片预览不限制token
  62. filterChainDefinitionMap.put("/sys/common/view/**", "anon");
  63. //文件下载不限制token
  64. filterChainDefinitionMap.put("/sys/common/download/**", "anon");
  65. //pdf预览
  66. filterChainDefinitionMap.put("/sys/common/pdf/**", "anon");
  67. filterChainDefinitionMap.put("/ctop/bytedanceAreaInfo/**", "anon");
  68. filterChainDefinitionMap.put("/ctop/bytedanceInterestCategory/**", "anon");
  69. filterChainDefinitionMap.put("/template/creative/words/get", "anon");
  70. filterChainDefinitionMap.put("/appium/crawler/*", "anon");
  71. filterChainDefinitionMap.put("/ctop/kuaishouChannelRegInfo/*", "anon");
  72. //优化师相关
  73. //filterChainDefinitionMap.put("/ctop/performanceOptimizer/detail", "anon");
  74. //filterChainDefinitionMap.put("/ctop/performanceOptimizer/ranking/list", "anon");
  75. //filterChainDefinitionMap.put("/ctop/performance/project/list", "anon");
  76. //filterChainDefinitionMap.put("/ctop/performance/account/list", "anon");
  77. //filterChainDefinitionMap.put("/ctop/optimizerRoleInfo/manager/detail", "anon");
  78. filterChainDefinitionMap.put("/generic/**", "anon");
  79. filterChainDefinitionMap.put("/", "anon");
  80. filterChainDefinitionMap.put("/doc.html", "anon");
  81. filterChainDefinitionMap.put("/**/*.js", "anon");
  82. filterChainDefinitionMap.put("/**/*.css", "anon");
  83. filterChainDefinitionMap.put("/**/*.html", "anon");
  84. filterChainDefinitionMap.put("/**/*.svg", "anon");
  85. filterChainDefinitionMap.put("/**/*.jpg", "anon");
  86. filterChainDefinitionMap.put("/**/*.png", "anon");
  87. filterChainDefinitionMap.put("/**/*.ico", "anon");
  88. filterChainDefinitionMap.put("/druid/**", "anon");
  89. filterChainDefinitionMap.put("/swagger-ui.html", "anon");
  90. filterChainDefinitionMap.put("/swagger**/**", "anon");
  91. filterChainDefinitionMap.put("/webjars/**", "anon");
  92. filterChainDefinitionMap.put("/v2/**", "anon");
  93. filterChainDefinitionMap.put("/kuaishou", "anon");
  94. filterChainDefinitionMap.put("/kuaishou/report", "anon");
  95. filterChainDefinitionMap.put("/ctop/bindAccount/**", "anon");
  96. filterChainDefinitionMap.put("/**/*.mp4", "anon");
  97. //性能监控
  98. filterChainDefinitionMap.put("/actuator/metrics/**", "anon");
  99. filterChainDefinitionMap.put("/actuator/httptrace/**", "anon");
  100. filterChainDefinitionMap.put("/actuator/redis/**", "anon");
  101. //消息队列
  102. filterChainDefinitionMap.put("/mq/**", "anon");
  103. //模板测试
  104. filterChainDefinitionMap.put("/test/**", "anon");
  105. //oauth接口
  106. filterChainDefinitionMap.put("/auth/**", "anon");
  107. filterChainDefinitionMap.put("/ctop/syncdata/**", "anon");
  108. //头条接口
  109. filterChainDefinitionMap.put("/bytedance", "anon");
  110. filterChainDefinitionMap.put("/toutiao/dictitem/list", "anon");
  111. filterChainDefinitionMap.put("/toutiao/loadAllData", "anon");
  112. filterChainDefinitionMap.put("/toutiao/loadSingleData", "anon");
  113. filterChainDefinitionMap.put("/kuaishou/getReport/historyData", "anon");
  114. filterChainDefinitionMap.put("/toutiao/advertiser/**", "anon");
  115. filterChainDefinitionMap.put("/toutiao/industry/list", "anon");
  116. filterChainDefinitionMap.put("/template/bytedance/industry/list", "anon");
  117. filterChainDefinitionMap.put("/template/convert/list", "anon");
  118. filterChainDefinitionMap.put("/template/convert/list/url", "anon");
  119. //文件上传接口
  120. filterChainDefinitionMap.put("/upload/**", "anon");
  121. filterChainDefinitionMap.put("/appium/appiumTask/run", "anon");
  122. filterChainDefinitionMap.put("/system/userCompany/**", "anon");
  123. filterChainDefinitionMap.put("/qywexin", "anon");
  124. filterChainDefinitionMap.put("/test/getGroupData/**", "anon");
  125. filterChainDefinitionMap.put("/test/getVideoAndImage/**", "anon");
  126. filterChainDefinitionMap.put("/test/gerCreative/**", "anon");
  127. filterChainDefinitionMap.put("/report/kuaishouReportDailyAgent/get","anon");
  128. filterChainDefinitionMap.put("/appium/appiumTask/run/login", "anon");
  129. filterChainDefinitionMap.put("/zip/download", "anon");
  130. //爬虫接口
  131. filterChainDefinitionMap.put("/graphql/video", "anon");
  132. filterChainDefinitionMap.put("/ks/web/test", "anon");
  133. filterChainDefinitionMap.put("/ureport/**", "anon");
  134. filterChainDefinitionMap.put("/ctop/advertiser/**", "anon");
  135. filterChainDefinitionMap.put("/pangolin/**", "anon");
  136. // 添加自己的过滤器并且取名为jwt
  137. Map<String, Filter> filterMap = new HashMap<String, Filter>(1);
  138. filterMap.put("jwt", new JwtFilter());
  139. shiroFilterFactoryBean.setFilters(filterMap);
  140. // <!-- 过滤链定义,从上向下顺序执行,一般将/**放在最为下边
  141. filterChainDefinitionMap.put("/**", "jwt");
  142. // 未授权界面返回JSON
  143. shiroFilterFactoryBean.setUnauthorizedUrl("/sys/common/403");
  144. shiroFilterFactoryBean.setLoginUrl("/sys/common/403");
  145. shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
  146. return shiroFilterFactoryBean;
  147. }
  148. @Bean("securityManager")
  149. public DefaultWebSecurityManager securityManager(ShiroRealm myRealm) {
  150. DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
  151. securityManager.setRealm(myRealm);
  152. /*
  153. * 关闭shiro自带的session,详情见文档
  154. * http://shiro.apache.org/session-management.html#SessionManagement-
  155. * StatelessApplications%28Sessionless%29
  156. */
  157. DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO();
  158. DefaultSessionStorageEvaluator defaultSessionStorageEvaluator = new DefaultSessionStorageEvaluator();
  159. defaultSessionStorageEvaluator.setSessionStorageEnabled(false);
  160. subjectDAO.setSessionStorageEvaluator(defaultSessionStorageEvaluator);
  161. securityManager.setSubjectDAO(subjectDAO);
  162. return securityManager;
  163. }
  164. /**
  165. * 下面的代码是添加注解支持
  166. * @return
  167. */
  168. @Bean
  169. @DependsOn("lifecycleBeanPostProcessor")
  170. public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
  171. DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
  172. defaultAdvisorAutoProxyCreator.setProxyTargetClass(true);
  173. return defaultAdvisorAutoProxyCreator;
  174. }
  175. @Bean
  176. public LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
  177. return new LifecycleBeanPostProcessor();
  178. }
  179. @Bean
  180. public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager) {
  181. AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
  182. advisor.setSecurityManager(securityManager);
  183. return advisor;
  184. }
  185. }