springboot-shiro-cas-redis集成session共享，权限共享

1.准备jar依赖：

		
        
            org.apache.shiro
            shiro-core
            ${shiro.version}
            
                
                    commons-collections
                    commons-collections
                
            
        
		
        
            org.apache.shiro
            shiro-spring
            1.4.0
        
		
            redis.clients
            jedis
            3.0.1
        
        
            org.springframework.data
            spring-data-redis
            2.1.3.RELEASE
        
        
        
            org.crazycake
            shiro-redis
            2.4.2.1-RELEASE
            
                
                    shiro-core
                    org.apache.shiro
                
            
        

2.重写realm，通过继承CasRealm ，MyShiroCasRealm.java

import com.alibaba.fastjson.JSONObject;
import com.dongao.support.utils.Properties2YmlUtils;
import com.ruoyi.common.constant.Constants;
import com.ruoyi.common.utils.MessageUtils;
import com.ruoyi.common.utils.StringUtils;
import com.ruoyi.common.utils.http.HttpUtils;
import com.ruoyi.common.utils.security.RedisUtils;
import com.ruoyi.common.utils.security.ShiroCasUtils;
import com.ruoyi.framework.config.properties.CasProperties;
import com.ruoyi.framework.manager.AsyncManager;
import com.ruoyi.framework.manager.factory.AsyncFactory;
import com.ruoyi.project.system.menu.service.IMenuService;
import com.ruoyi.project.system.role.service.IRoleService;
import com.ruoyi.project.system.user.domain.User;
import com.ruoyi.project.system.user.service.IUserService;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.*;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.cas.CasRealm;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.subject.SimplePrincipalCollection;
import org.apache.shiro.util.CollectionUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;

import javax.annotation.PostConstruct;
import java.util.HashSet;
import java.util.List;
import java.util.Set;

/**
 * 直接继承CasRealm类，然后CasRealm已经完成了数据的认证工作，我们直接调用父类的功能即可
 * @ClassName MyShiroCasRealm
 * @Author zhangcongming
 * @Version 1.0
 **/

public class MyShiroCasRealm extends CasRealm {

    private static final Logger logger = LoggerFactory.getLogger(MyShiroCasRealm.class);
    private final String projectName = Properties2YmlUtils.getCommonYml("project.name");
    @Autowired
    private IMenuService menuService;
    @Autowired
    private IRoleService roleService;

    @Autowired
    private IUserService userService;

    @Autowired
    private CasProperties casProperties;

    @PostConstruct
    public void initProperty(){
        // cas server地址
        setCasServerUrlPrefix(casProperties.getCasServerUrl());
        // 客户端回调地址,表示当你认证中心认证完成之后需要访问的service地址
        setCasService(casProperties.getCasServiceProject() + casProperties.getCasFilterUrlPattern());
    }

    /**
     * 权限认证，为当前登录的Subject授予角色和权限
     * 本例中该方法的调用时机为需授权资源被访问时
     * 并且每次访问需授权资源时都会执行该方法中的逻辑，这表明本例中默认并未启用AuthorizationCache
     * 如果连续访问同一个URL（比如刷新），该方法不会被重复调用，Shiro有一个时间间隔（也就是cache时间，在ehcache-shiro.xml中配置），超过这个时间间隔再刷新页面，该方法会被执行
     */
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
        logger.info("##################Shiro--权限认证##################");
        User user = ShiroCasUtils.getSysUser();
        if(user==null){
            logger.info("ShiroCasUtils获取用户为空！");
            throw new AuthenticationException("登录用户为空！");
        }
        SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();

        // 角色列表
        Set roles = new HashSet();
        // 功能列表
        Set menus = new HashSet();
        // 管理员拥有所有权限
        if (user.isAdmin()){
            info.addRole("admin");
            info.addStringPermission("*:*:*");
        }else {
            roles = roleService.selectRoleKeys(user.getUserId());
            menus = menuService.selectPermsByUserId(user.getUserId());
            // 角色加入 AuthorizationInfo认证对象
            info.setRoles(roles);
            // 权限加入 AuthorizationInfo认证对象
            info.setStringPermissions(menus);
        }

        return info;
    }

    /**
     * 1、CAS认证 ,验证用户身份
     * 2、将用户基本信息设置到会话中(不用了，随时可以获取的)
     */
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) {
        logger.info("##################Shiro--登录认证##################");
        // 调用父类的认证，父类认证已经完成了
        AuthenticationInfo authenticationInfo = super.doGetAuthenticationInfo(token);
        if (authenticationInfo == null) {
            logger.warn("authenticationInfo为空，可能是退出了！");
            return null;
        }
        String account = (String) authenticationInfo.getPrincipals().getPrimaryPrincipal();
        logger.info("认证 account："+account);
        User user;

        user = userService.selectUserByLoginName(account);
        if (user == null){
            throw new UnknownAccountException();
        }

        //重写了权限返回值
        List