com.mxep.web.shiro.ShiroDbRealm.java Source code

Introduction

Here is the source code for com.mxep.web.shiro.ShiroDbRealm.java

Source

/*******************************************************************************
 * Copyright (c) 2005, 2014 springside.github.io
 * <p>
 * Licensed under the Apache License, Version 2.0 (the "License");
 *******************************************************************************/
package com.mxep.web.shiro;

import com.mxep.core.utils.EncodeUtils;
import com.mxep.model.sys.Permission;
import com.mxep.model.sys.Role;
import com.mxep.model.sys.User;
import com.mxep.web.common.bo.Constant;
import com.mxep.web.context.ParameterCache;
import com.mxep.web.service.AccountService;
import com.google.common.base.Objects;
import com.google.common.collect.Lists;
import org.apache.shiro.authc.*;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.util.ByteSource;

import javax.annotation.PostConstruct;
import java.io.Serializable;
import java.util.List;

public class ShiroDbRealm extends AuthorizingRealm {

    protected AccountService accountService;

    /**
     * ?,.
     */
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken)
            throws AuthenticationException {
        UsernamePasswordToken token = (UsernamePasswordToken) authcToken;
        User user = accountService.findUserByAccount(token.getUsername());
        if (user != null) {
            if (Constant.Status.DISABLE.value == user.getStatus()) {
                throw new DisabledAccountException();
            }

            if (user.getDeleted() == true) {
                throw new UnknownAccountException();
            }

            byte[] salt = EncodeUtils.decodeHex(user.getSalt());
            return new SimpleAuthenticationInfo(new ShiroUser(user.getId(), user.getAccount(), user.getNickname()),
                    user.getPassword(), ByteSource.Util.bytes(salt), getName());
        } else {
            //??
            if (accountService.isSupervisor(token.getUsername())) {
                String salt = ParameterCache.getSystemProp("system.admin.salt");
                String password = ParameterCache.getSystemProp("system.admin.password");
                String name = ParameterCache.getSystemProp("system.admin.name");
                user = new User(token.getUsername(), password, salt);
                user.setId(0);
                user.setNickname(name);

                byte[] decodeSalt = EncodeUtils.decodeHex(salt);
                return new SimpleAuthenticationInfo(
                        new ShiroUser(user.getId(), user.getAccount(), user.getNickname()), user.getPassword(),
                        ByteSource.Util.bytes(decodeSalt), getName());
            }
            return null;
        }
    }

    /**
     * ?, ???.
     */
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
        ShiroUser shiroUser = (ShiroUser) principals.getPrimaryPrincipal();
        User user = accountService.findUserByAccount(shiroUser.account);

        SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
        if (user != null) {
            for (Role role : user.getRoleList()) {
                // Role???
                info.addRole(role.getName());
                // Permission???
                info.addStringPermissions(role.getPermissionList());
            }
        } else {
            if (accountService.isSupervisor(shiroUser.getAccount())) {
                for (Role role : getAdminRole()) {
                    // Role???
                    info.addRole(role.getName());
                    // Permission???
                    info.addStringPermissions(role.getPermissionList());
                }
            }
        }
        return info;
    }

    /**
     * PasswordHash.
     */
    @PostConstruct
    public void initCredentialsMatcher() {
        HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(AccountService.HASH_ALGORITHM);
        matcher.setHashIterations(AccountService.HASH_INTERATIONS);

        setCredentialsMatcher(matcher);
    }

    public void setAccountService(AccountService accountService) {
        this.accountService = accountService;
    }

    /**
     * AuthenticationSubject??????.
     */
    public static class ShiroUser implements Serializable {
        private static final long serialVersionUID = -1373760761780840081L;
        public Integer uid;
        public String account;
        public String nickname;

        public ShiroUser(Integer uid, String account, String nickname) {
            this.uid = uid;
            this.account = account;
            this.nickname = nickname;
        }

        public String getName() {
            return nickname;
        }

        public String getAccount() {
            return account;
        }

        /**
         * <shiro:principal/>.
         */
        @Override
        public String toString() {
            return account;
        }

        /**
         * ?hashCode,?loginName;
         */
        @Override
        public int hashCode() {
            return Objects.hashCode(account);
        }

        /**
         * ?equals,?loginName;
         */
        @Override
        public boolean equals(Object obj) {
            if (this == obj) {
                return true;
            }
            if (obj == null) {
                return false;
            }
            if (getClass() != obj.getClass()) {
                return false;
            }
            ShiroUser other = (ShiroUser) obj;
            if (account == null) {
                if (other.account != null) {
                    return false;
                }
            } else if (!account.equals(other.account)) {
                return false;
            }
            return true;
        }
    }

    /**
     * ???
     *
     * @return
     */
    private List<Role> getAdminRole() {
        List<Role> roles = Lists.newArrayList();
        List<Permission> permissions = Lists.newArrayList();
        permissions.add(new Permission("???", "menu:view"));
        permissions.add(new Permission("??", "menu:delete"));
        permissions.add(new Permission("??", "menu:update"));
        roles.add(new Role("?", permissions));

        permissions = Lists.newArrayList();
        permissions.add(new Permission("?", "role:view"));
        permissions.add(new Permission("", "role:delete"));
        permissions.add(new Permission("", "role:update"));
        roles.add(new Role("?", permissions));

        return roles;
    }
}