Springboot+Shiro记录用户登录信息并获取当前登录用户信息的实现代码

<!-- Shiro -->
<dependency>
 <groupId>org.apache.shiro</groupId>
 <artifactId>shiro-spring</artifactId>
 <version>1.4.0</version>
</dependency>

import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;


/**
 * 自定义Realm
 */
public class UserRealm extends AuthorizingRealm {

 @Autowired(required = false)
 private UserService userService;

 private final Logger logger = LoggerFactory.getLogger(UserRealm.class);

 /**
  * 执行授权逻辑
  *
  * @param arg0
  * @return
  */
 @Override
 protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection arg0) {
  System.out.println("执行授权逻辑");
  //给资源进行授权
  SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
  //不授权先不写
  return info;
 }
 
 /**
  * 执行认证逻辑
  *
  * @param arg0
  * @return
  * @throws AuthenticationException
  */
 @Override
 protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken arg0) throws AuthenticationException {
  System.out.println("执行认证逻辑"); // 编写shiro判断逻辑，判断用户名和密码
  UsernamePasswordToken token = (UsernamePasswordToken) arg0; // 判断用户名
  User user = userService.findUserByPhone(token.getUsername());
  if (user == null) { // 该用户不存在
   return null; // shiro底层会抛出UnKnowAccountException
  }
  return new SimpleAuthenticationInfo(user, user.getPassword(), ""); // 判断密码
 }

}

filterMap.put("/*", "anon");

import java.util.LinkedHashMap;
import java.util.Map;

import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;


/**
 * Shiro的配置类
 */
@Configuration
public class ShiroConfig {

 /**
  * 创建ShiroFilterFactoryBean
  *
  * @param securityManager
  * @return
  */
 @Bean
 public ShiroFilterFactoryBean getShiroFilterFactoryBean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager) {
  ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
  //设置安全管理器
  shiroFilterFactoryBean.setSecurityManager(securityManager);

  //添加Shiro内置过滤器
  /**
   * Shiro内置过滤器，可以实现权限相关的拦截器
   * 常用的过滤器：
   *  anon: 无需认证（登录）可以访问
   *  authc: 必须认证才可以访问
   *  user: 如果使用rememberMe的功能可以直接访问
   *  perms： 该资源必须得到资源权限才可以访问
   *  role: 该资源必须得到角色权限才可以访问
   */

  Map<String, String> filterMap = new LinkedHashMap<String, String>();
  // 放行login.html页面
  filterMap.put("/login", "anon"); // 要将登陆的接口放出来，不然没权限访问登陆的接口
  // 授权过滤器
  // 注意：当前授权拦截后，shiro会自动跳转到未授权页面
  filterMap.put("/*", "anon");
  // TODO 此处我做过修改

  shiroFilterFactoryBean.setLoginUrl("/login"); // 修改调整的登录页面
  shiroFilterFactoryBean.setUnauthorizedUrl("/403"); // 设置未授权提示页面
  shiroFilterFactoryBean.setFilterChainDefinitionMap(filterMap);
  return shiroFilterFactoryBean;
 }

 /**
  * 创建DefaultWebSecurityManager
  *
  * @param userRealm
  * @return
  */
 @Bean(name = "securityManager")
 public DefaultWebSecurityManager getDefaultWebSecurityManager(@Qualifier("userRealm") UserRealm userRealm) {
  DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
  securityManager.setRealm(userRealm); // 关联realm
  return securityManager;
 }

 /**
  * 创建Realm
  *
  * @return
  */
 @Bean(name = "userRealm")
 public UserRealm getRealm() {
  return new UserRealm();
 }

}

/**
 * 用户登录
 *
 * @param request
 * @return
 */
@PostMapping("/userLogin")
@ResponseBody
public String userLogin(HttpServletRequest request) {
 String phone = request.getParameter("phone");
 String password = request.getParameter("password");
 String result = "";
 Subject subject = SecurityUtils.getSubject();
 UsernamePasswordToken token = new UsernamePasswordToken(phone, password);
 try {
  subject.login(token);
  result = "登陆成功";
 } catch (UnknownAccountException e) {
  result = "用户名不存在";
 } catch (IncorrectCredentialsException e) {
  result = "密码错误";
 }
 return result;
}

User user = (User) SecurityUtils.getSubject().getPrincipal(); // 获取当前登录用户