springboot中如何去整合shrio实例分享

@Configuration
public class ShiroConfig {
    // 配置安全管理器
    @Bean
    public DefaultWebSecurityManager securityManager() {
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        securityManager.setRealm(myRealm());
        return securityManager;
    }
    // 配置自定义Realm
    @Bean
    public MyRealm myRealm() {
        return new MyRealm();
    }
    // 配置Shiro过滤器
    @Bean
    public ShiroFilterFactoryBean shiroFilterFactoryBean() {
        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
        shiroFilterFactoryBean.setSecurityManager(securityManager());
        shiroFilterFactoryBean.setLoginUrl("/login"); // 设置登录页面
        shiroFilterFactoryBean.setUnauthorizedUrl("/unauthorized"); // 设置未授权页面
        Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>();
        // 允许匿名访问的路径
        filterChainDefinitionMap.put("/login", "anon");
        filterChainDefinitionMap.put("/static/**", "anon");
        // 需要认证才能访问的路径
        filterChainDefinitionMap.put("/**", "authc");
        shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
        return shiroFilterFactoryBean;
    }
}

public class MyRealm extends AuthorizingRealm {
    // 处理认证逻辑
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
        // 从token中获取用户名
        String username = (String) authenticationToken.getPrincipal();
        // 模拟从数据库或其他存储中获取用户信息
        // 例如，从数据库中查询用户信息并返回
        String dbPassword = "123456"; // 假设从数据库中查询的密码是123456
        // 返回认证信息，包括用户名和密码
        return new SimpleAuthenticationInfo(username, dbPassword, getName());
    }
    // 处理授权逻辑
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
        // 从PrincipalCollection中获取用户名
        String username = (String) principalCollection.getPrimaryPrincipal();
        // 模拟从数据库或其他存储中获取用户角色和权限信息
        // 例如，从数据库中查询用户对应的角色和权限并返回
        Set<String> roles = new HashSet<>();
        roles.add("admin"); // 假设用户拥有admin角色
        Set<String> permissions = new HashSet<>();
        permissions.add("user:read"); // 假设用户拥有user:read权限
        // 创建授权信息
        SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
        authorizationInfo.setRoles(roles);
        authorizationInfo.setStringPermissions(permissions);
        return authorizationInfo;
    }
}

@Controller
public class LoginController {
    @GetMapping("/login")
    public String login() {
        return "login";
    }
    @PostMapping("/login")
    public String doLogin(String username, String password) {
        // 执行登录逻辑
        Subject currentUser = SecurityUtils.getSubject();
        UsernamePasswordToken token = new UsernamePasswordToken(username, password);
        try {
            currentUser.login(token); // 执行登录
            return "redirect:/home"; // 登录成功后跳转到首页
        } catch (AuthenticationException e) {
            return "redirect:/login-error"; // 登录失败后跳转到错误页面
        }
    }
}