spring boot 集成shiro的配置

  spring boot提供了一个自带的认证框架，同时也提供自定义的javaconfig配置扩展，spring-sercurity同样也是优秀的框架，但是习惯了用apache shiro框架，而且原项目就是集成的shiro框架，到网上找了一下配置方式，没找到完全配置的方法，因此决定自己动手，丰衣足食！

        要在spring boot上集成其他框架，首先要会spring javaconfig方法，利用此方法同样可以配置其他模块，废话少说，开始。。。

        开始前需要导入maven依赖（shiro-web可选）：

               <dependency>
     <groupId>org.apache.shirogroupId>
     <artifactId>shiro-coreartifactId>
     <version>${shiro.version}version>
 dependency>
 <dependency>
     <groupId>org.apache.shirogroupId>
     <artifactId>shiro-webartifactId>
     <version>${shiro.version}version>
 dependency>
 <dependency>
     <groupId>org.apache.shirogroupId>
     <artifactId>shiro-springartifactId>
     <version>${shiro.version}version>
 dependency>
 <dependency>
     <groupId>org.apache.shirogroupId>
     <artifactId>shiro-ehcacheartifactId>
     <version>${shiro.version}version>
 dependency>

        原shiro集成spring的配置拿出来，如下：

 xml version="1.0" encoding="UTF-8"?>
 <beans xmlns="http://www.springframework.org/schema/beans"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd"
 default-lazy-init="true">
 <description>Shiro安全配置 来源于： http://shiro.apache.org/spring.html
 description>
 <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">

 <property name="successUrl" value="/sa/index" />
 <property name="filterChainDefinitions">

 <value>

 <bean id="shiroEhcacheManager" class="org.apache.shiro.cache.ehcache.EhCacheManager">
 <property name="cacheManagerConfigFile" value="classpath:ehcache-shiro.xml" />
 bean>

 <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />



 <bean
 class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"
 depends-on="lifecycleBeanPostProcessor">
 <property name="proxyTargetClass" value="true" />
 bean>
 <bean
 class="org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor">
 <property name="securityManager" ref="securityManager" />
 bean>
 beans>

好多类啊，没办法一个一个配置，javaconfig文件如下：

 import java.util.LinkedHashMap;
 import java.util.Map;

 import org.apache.shiro.cache.ehcache.EhCacheManager;
 import org.apache.shiro.spring.LifecycleBeanPostProcessor;
 import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
 import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
 import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
 import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;


 @Configuration
 public class ShiroConfiguration {

     private static Map filterChainDefinitionMap = new LinkedHashMap();

     @Bean(name = "ShiroRealmImpl")
     public ShiroRealmImpl getShiroRealm() {
         return new ShiroRealmImpl();
     }

     @Bean(name = "shiroEhcacheManager")
     public EhCacheManager getEhCacheManager() {
         EhCacheManager em = new EhCacheManager();
         em.setCacheManagerConfigFile("classpath:ehcache-shiro.xml");
         return em;
     }

     @Bean(name = "lifecycleBeanPostProcessor")
     public LifecycleBeanPostProcessor getLifecycleBeanPostProcessor() {
         return new LifecycleBeanPostProcessor();
     }

     @Bean
     public DefaultAdvisorAutoProxyCreator getDefaultAdvisorAutoProxyCreator() {
         DefaultAdvisorAutoProxyCreator daap = new DefaultAdvisorAutoProxyCreator();
         daap.setProxyTargetClass(true);
         return daap;
     }

     @Bean(name = "securityManager")
     public DefaultWebSecurityManager getDefaultWebSecurityManager() {
         DefaultWebSecurityManager dwsm = new DefaultWebSecurityManager();
         dwsm.setRealm(getShiroRealm());
         dwsm.setCacheManager(getEhCacheManager());
         return dwsm;
     }

     @Bean
     public AuthorizationAttributeSourceAdvisor getAuthorizationAttributeSourceAdvisor() {
         AuthorizationAttributeSourceAdvisor aasa = new AuthorizationAttributeSourceAdvisor();
         aasa.setSecurityManager(getDefaultWebSecurityManager());
         return new AuthorizationAttributeSourceAdvisor();
     }

     @Bean(name = "shiroFilter")
     public ShiroFilterFactoryBean getShiroFilterFactoryBean() {
         ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
         shiroFilterFactoryBean
                 .setSecurityManager(getDefaultWebSecurityManager());
         shiroFilterFactoryBean.setLoginUrl("/login");
         shiroFilterFactoryBean.setSuccessUrl("/sa/index");
         filterChainDefinitionMap.put("/sa/**", "authc");
         filterChainDefinitionMap.put("/**", "anon");
         shiroFilterFactoryBean
                 .setFilterChainDefinitionMap(filterChainDefinitionMap);
         return shiroFilterFactoryBean;
     }

 }

注意点：最后一个是filterChainDefinitionMap的初始化，Map用的是LinkedHashMap来初始化的，各位应用的时候将其配置成properties文件，然后初始化就ok了，改写好后直接启动Ok，搬运到spring boot应该是OK的。

别忘了在ehcache-shiro.xml

 <ehcache updateCheck="false" name="shiroCache">

     <defaultCache
             maxElementsInMemory="10000"
             eternal="false"
             timeToIdleSeconds="120"
             timeToLiveSeconds="120"
             overflowToDisk="false"
             diskPersistent="false"
             diskExpiryThreadIntervalSeconds="120"
             />
 ehcache>

 备注：ShiroRealmImpl类请参考官方文档