Example usage for org.apache.shiro SecurityUtils getSubject

Introduction

In this page you can find the example usage for org.apache.shiro SecurityUtils getSubject.

Prototype

public static Subject getSubject()

Source Link

Document

Returns the currently accessible Subject available to the calling code depending on runtime environment.

Usage

From source file:Homework4ShiroCommandLineClient.java

/**
 * @param args//from   ww  w. j ava 2 s  .co  m
 */
public static void main(String[] args) {
    log.info("My First Apache Shiro Application");

    Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
    SecurityManager securityManager = factory.getInstance();
    SecurityUtils.setSecurityManager(securityManager);

    Subject currentUser = SecurityUtils.getSubject();

    Session session = currentUser.getSession();
    session.setAttribute("someKey", "aValue");
    String value = (String) session.getAttribute("someKey");
    if (value.equals("aValue")) {
        log.info("Retrieved the correct value! [" + value + "]");
    }

    // let's login the current user so we can check against roles and permissions:
    if (!currentUser.isAuthenticated()) {
        UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");
        token.setRememberMe(true);
        try {
            currentUser.login(token);
        } catch (UnknownAccountException uae) {
            log.info("There is no user with username of " + token.getPrincipal());
        } catch (IncorrectCredentialsException ice) {
            log.info("Password for account " + token.getPrincipal() + " was incorrect!");
        } catch (LockedAccountException lae) {
            log.info("The account for username " + token.getPrincipal() + " is locked.  "
                    + "Please contact your administrator to unlock it.");
        }
        // ... catch more exceptions here (maybe custom ones specific to your application?
        catch (AuthenticationException ae) {
            //unexpected condition?  error?
        }
    }

    log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");

    if (currentUser.hasRole("schwartz")) {
        log.info("May the Schwartz be with you!");
    } else {
        log.info("Hello, mere mortal.");
    }

    if (currentUser.isPermitted("lightsaber:weild")) {
        log.info("You may use a lightsaber ring.  Use it wisely.");
    } else {
        log.info("Sorry, lightsaber rings are for schwartz masters only.");
    }

    if (currentUser.isPermitted("winnebago:drive:eagle5")) {
        log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  "
                + "Here are the keys - have fun!");
    } else {
        log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");
    }

    currentUser.logout();

    System.exit(0);
}

From source file:Tutorial.java

public static void main(String[] args) {
    log.info(/*from w  w  w .jav  a 2 s. com*/
            "\n\n\n\t\t\t**************************************************\n\t\t\t\tMy First Apache Shiro Application\n\t\t\t**************************************************\n");

    Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
    //Factory<SecurityManager> factory = new IniSecurityManagerFactory("file:src/main/webapp/WEB-INF/shiro.ini");
    SecurityManager securityManager = factory.getInstance();
    SecurityUtils.setSecurityManager(securityManager);

    // get the currently executing user:
    Subject currentUser = SecurityUtils.getSubject();

    // Do some stuff with a Session (no need for a web or EJB container!!!)
    Session session = currentUser.getSession();
    session.setAttribute("someKey", "aValue");
    String value = (String) session.getAttribute("someKey");
    if (value.equals("aValue")) {
        log.info("Retrieved the correct value! [" + value + "]");
    }

    // let's login the current user so we can check against roles and permissions:
    if (!currentUser.isAuthenticated()) {
        UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");
        token.setRememberMe(true);
        try {
            currentUser.login(token);
        } catch (UnknownAccountException uae) {
            log.info("There is no user with username of " + token.getPrincipal());
        } catch (IncorrectCredentialsException ice) {
            log.info("Password for account " + token.getPrincipal() + " was incorrect!");
        } catch (LockedAccountException lae) {
            log.info("The account for username " + token.getPrincipal() + " is locked.  "
                    + "Please contact your administrator to unlock it.");
        }
        // ... catch more exceptions here (maybe custom ones specific to your application?
        catch (AuthenticationException ae) {
            //unexpected condition?  error?
        }
    }

    //say who they are:
    //print their identifying principal (in this case, a username):
    log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");

    //test a role:
    if (currentUser.hasRole("schwartz")) {
        log.info("May the Schwartz be with you!");
    } else {
        log.info("Hello, mere mortal.");
    }

    //test a typed permission (not instance-level)
    if (currentUser.isPermitted("lightsaber:weild")) {
        log.info("You may use a lightsaber ring.  Use it wisely.");
    } else {
        log.info("Sorry, lightsaber rings are for schwartz masters only.");
    }

    //a (very powerful) Instance Level permission:
    if (currentUser.isPermitted("winnebago:drive:eagle5")) {
        log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  "
                + "Here are the keys - have fun!");
    } else {
        log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");
    }

    //all done - log out!
    currentUser.logout();
    log.info("User Logged out successfully!!");

    System.exit(0);
}

From source file:QuickstartGuice.java

License:Apache License

public static void main(String[] args) {

    // We will utilize standard Guice bootstrapping to create a Shiro SecurityManager.
    Injector injector = Guice.createInjector(new QuickstartShiroModule());
    SecurityManager securityManager = injector.getInstance(SecurityManager.class);

    // for this simple example quickstart, make the SecurityManager
    // accessible as a JVM singleton.  Most applications wouldn't do this
    // and instead rely on their container configuration or web.xml for
    // webapps.  That is outside the scope of this simple quickstart, so
    // we'll just do the bare minimum so you can continue to get a feel
    // for things.
    SecurityUtils.setSecurityManager(securityManager);

    // Now that a simple Shiro environment is set up, let's see what you can do:

    // get the currently executing user:
    Subject currentUser = SecurityUtils.getSubject();

    // Do some stuff with a Session (no need for a web or EJB container!!!)
    Session session = currentUser.getSession();
    session.setAttribute("someKey", "aValue");
    String value = (String) session.getAttribute("someKey");
    if (value.equals("aValue")) {
        log.info("Retrieved the correct value! [" + value + "]");
    }/* www  .j a v a 2 s .  c  o m*/

    // let's login the current user so we can check against roles and permissions:
    if (!currentUser.isAuthenticated()) {
        UsernamePasswordToken token = new UsernamePasswordToken("lonestarr", "vespa");
        token.setRememberMe(true);
        try {
            currentUser.login(token);
        } catch (UnknownAccountException uae) {
            log.info("There is no user with username of " + token.getPrincipal());
        } catch (IncorrectCredentialsException ice) {
            log.info("Password for account " + token.getPrincipal() + " was incorrect!");
        } catch (LockedAccountException lae) {
            log.info("The account for username " + token.getPrincipal() + " is locked.  "
                    + "Please contact your administrator to unlock it.");
        }
        // ... catch more exceptions here (maybe custom ones specific to your application?
        catch (AuthenticationException ae) {
            //unexpected condition?  error?
        }
    }

    //say who they are:
    //print their identifying principal (in this case, a username):
    log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");

    //test a role:
    if (currentUser.hasRole("schwartz")) {
        log.info("May the Schwartz be with you!");
    } else {
        log.info("Hello, mere mortal.");
    }

    //test a typed permission (not instance-level)
    if (currentUser.isPermitted("lightsaber:weild")) {
        log.info("You may use a lightsaber ring.  Use it wisely.");
    } else {
        log.info("Sorry, lightsaber rings are for schwartz masters only.");
    }

    //a (very powerful) Instance Level permission:
    if (currentUser.isPermitted("winnebago:drive:eagle5")) {
        log.info("You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  "
                + "Here are the keys - have fun!");
    } else {
        log.info("Sorry, you aren't allowed to drive the 'eagle5' winnebago!");
    }

    //all done - log out!
    currentUser.logout();

    System.exit(0);
}

From source file:ShiroGriffonAddon.java

License:Apache License

private void initialize() {
    String className = getConfigValueAsString(getApp().getConfig(), KEY_SECURITY_MANAGER_FACTORY,
            DEFAULT_SECURITY_MANAGER_FACTORY);
    if (getLog().isDebugEnabled()) {
        getLog().debug("Using " + className + " as SecurityManagerFactory");
    }/*from   w w w . j a  va 2s  .com*/
    Class factoryClass = safeLoadClass(className);
    SecurityManagerFactory factory = (SecurityManagerFactory) getApp().newInstance(factoryClass, "");
    SecurityUtils.setSecurityManager(factory.createSecurityManager(getApp()));
    SubjectHolder.setSubject(SecurityUtils.getSubject());
}

From source file:Standalone.java

License:Apache License

public static void main(String[] args) {

    IniConfiguration config = new IniConfiguration();
    //the following call will automatically use shiro.ini at the root of the classpath:
    config.init();// ww w.j  a  va  2s  .  com

    //This is for Standalone (single-VM) applications that don't use a configuration container (Spring, JBoss, etc)
    //See its JavaDoc for our feelings on this.
    SecurityUtils.setSecurityManager(config.getSecurityManager());

    //Now you are ready to access the Subject, as shown in the Quickstart:
    Subject currentUser = SecurityUtils.getSubject();

    //anything else you want to do with the Subject (see the Quickstart for examples).

    currentUser.logout();

    System.exit(0);
}

From source file:$.AccountService.java

License:Apache License

/**
     * ?Shiro?LoginName./*from  w w w .j  a va 2s  .co  m*/
     */
    private String getCurrentUserName() {
        ShiroUser user = (ShiroUser) SecurityUtils.getSubject().getPrincipal();
        return user.loginName;
    }

From source file:$.AuthRS.java

License:Open Source License

@GET
    @Path("/islogged")
    @Produces(MediaType.APPLICATION_JSON)
    public Map<String, Object> isLogguedIn() {
        System.out.println("======== Is Logged IN");
        Map<String, Object> root = new HashMap<String, Object>();
        Subject _subject = null;//from   w  w w. jav a2s.  c  o m

        boolean loggedIn = false;
        try {
            _subject = SecurityUtils.getSubject();
            loggedIn = _subject.isAuthenticated();

        } catch (Exception e) {
            loggedIn = false;
        }

        if (loggedIn) {
            PermissionManager pm = new PermissionManager(permisoBC.findAllKeys());
            root.put("success", true);
            root.put("username", _subject.getPrincipal());
            root.put("permissions", pm.getJsonPermissions(_subject));
        } else {
            root.put("success", false);
        }

        return root;
    }

From source file:$.AuthRS.java

License:Open Source License

@POST
    @Path("/login")
    @Consumes(MediaType.APPLICATION_JSON)
    @Produces(MediaType.APPLICATION_JSON)
    public Map<String, Object> login(Credential credential) {
        System.out.println("========  LOGIN");
        Map<String, Object> root = new HashMap<String, Object>();
        Subject _subject = null;/*from www.  ja  va  2  s  .  c  om*/

        boolean failure = false;
        try {
            _subject = SecurityUtils.getSubject();
            if (_subject != null) {
                System.out.println("========  User:" + credential.getUsername());
                System.out.println("========  Password:" + credential.getPassword());
                _subject.login(new UsernamePasswordToken(credential.getUsername(), credential.getPassword()));
            }
        } catch (Exception e) {
            failure = true;
        }

        if (failure) {
            root.put("success", false);
        } else {
            PermissionManager pm = new PermissionManager(permisoBC.findAllKeys());
            root.put("success", true);
            root.put("username", _subject.getPrincipal());
            root.put("permissions", pm.getJsonPermissions(_subject));
        }

        return root;
    }

From source file:$.AuthRS.java

License:Open Source License

@GET
    @Path("/logout")
    @Produces(MediaType.APPLICATION_JSON)
    public Response logout_dan() {
        System.out.println("============= Logout");

        Subject _subject = SecurityUtils.getSubject();
        if (_subject != null) {
            _subject.logout();//from  w w w.j  a v a  2  s . c o  m
        }

        return Response.ok(true).build();
    }

From source file:$.ProfileController.java

License:Apache License

/**
     * ?Shiro?Id.
     */
    private Long getCurrentUserId() {
        ShiroUser user = (ShiroUser) SecurityUtils.getSubject().getPrincipal();
        return user.id;
    }