com.sinosoftgz.starter.shiro.jwt.config

类 ShiroJwtConfiguration

java.lang.Object

com.sinosoftgz.starter.shiro.jwt.config.ShiroJwtConfiguration

@Configuration
 @EnableConfigurationProperties(value={com.sinosoftgz.starter.shiro.properties.ShiroProperties.class,com.sinosoftgz.starter.jwt.properties.JwtProperties.class})
 @ConditionalOnProperty(prefix="spring.jwt",
                       name="enabled",
                       havingValue="true",
                       matchIfMissing=true)
public class ShiroJwtConfiguration
extends Object

Created by Roney on 2021/1/5 16:15.

嵌套类概要

嵌套类

限定符和类型	类和说明
static class	ShiroJwtConfiguration.ShiroJwtWebMvcConfigurer

构造器概要

构造器

构造器和说明
ShiroJwtConfiguration(JwtProperties jwtProperties, ShiroProperties shiroProperties)

方法概要

限定符和类型	方法和说明
org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator	advisorAutoProxyCreator() * 开启Shiro的注解(如@RequiresRoles,@RequiresPermissions), 需借助SpringAOP扫描使用Shiro注解的类,并在必要时进行安全逻辑验证 * 配置以下两个bean(DefaultAdvisorAutoProxyCreator(可选) 和AuthorizationAttributeSourceAdvisor)即可实现此功能 *
org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor	authorizationAttributeSourceAdvisor(org.apache.shiro.mgt.SecurityManager securityManager)
org.springframework.boot.web.servlet.FilterRegistrationBean	delegatingFilterProxy() 拦截器注册
org.springframework.boot.web.servlet.FilterRegistrationBean	registration(ShiroJwtAccessControlFilter shiroJwtAccessControlFilter)
org.apache.shiro.mgt.SecurityManager	securityManager(ShiroJwtRealm shiroJwtRealm, org.apache.shiro.mgt.SessionStorageEvaluator sessionStorageEvaluator, org.apache.shiro.mgt.SubjectFactory subjectFactory, org.apache.shiro.session.mgt.SessionManager sessionManager) 安全管理配置
org.apache.shiro.session.mgt.SessionManager	sessionManager() sessionManager通过sessionValidationSchedulerEnabled禁用掉会话调度器， 因为我们禁用掉了会话，所以没必要再定期过期会话了。
org.apache.shiro.mgt.SessionStorageEvaluator	sessionStorageEvaluator() 注入SessionStorageEvaluator,关闭Session存储
org.apache.shiro.spring.web.ShiroFilterFactoryBean	shiroFilterFactoryBean(org.apache.shiro.mgt.SecurityManager securityManager, ShiroJwtAccessControlFilter shiroJwtAccessControlFilter) 拦截器配置
ShiroJwtAccessControlFilter	shiroJwtAccessControlFilter() Add.
ShiroJwtRealm	shiroJwtRealm() 注入无状态的realm
CustomDefaultSubjectFactory	subjectFactory() 自定义的无状态（不创建session）Subject工厂
TokenRefreshInterceptor	tokenRefreshInterceptor(JwtProperties jwtProperties, UserAuthBiz userAuthBiz, JwtUtils jwtUtils)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

ShiroJwtConfiguration

public ShiroJwtConfiguration(JwtProperties jwtProperties,
                             ShiroProperties shiroProperties)

方法详细资料

shiroJwtRealm

@Bean
public ShiroJwtRealm shiroJwtRealm()

注入无状态的realm

返回:

subjectFactory

@Bean
public CustomDefaultSubjectFactory subjectFactory()

自定义的无状态（不创建session）Subject工厂

返回:

sessionManager

@Bean
public org.apache.shiro.session.mgt.SessionManager sessionManager()

sessionManager通过sessionValidationSchedulerEnabled禁用掉会话调度器， 因为我们禁用掉了会话，所以没必要再定期过期会话了。

返回:

sessionStorageEvaluator

@Bean
public org.apache.shiro.mgt.SessionStorageEvaluator sessionStorageEvaluator()

注入SessionStorageEvaluator,关闭Session存储

securityManager

@Bean
public org.apache.shiro.mgt.SecurityManager securityManager(ShiroJwtRealm shiroJwtRealm,
                                                                   org.apache.shiro.mgt.SessionStorageEvaluator sessionStorageEvaluator,
                                                                   org.apache.shiro.mgt.SubjectFactory subjectFactory,
                                                                   org.apache.shiro.session.mgt.SessionManager sessionManager)

安全管理配置

返回:

shiroJwtAccessControlFilter

@Bean
public ShiroJwtAccessControlFilter shiroJwtAccessControlFilter()

Add. 访问控制器.

返回:

registration

@Bean
public org.springframework.boot.web.servlet.FilterRegistrationBean registration(ShiroJwtAccessControlFilter shiroJwtAccessControlFilter)

shiroFilterFactoryBean

@Bean(name="shiroJwtFilterFactoryBean")
public org.apache.shiro.spring.web.ShiroFilterFactoryBean shiroFilterFactoryBean(org.apache.shiro.mgt.SecurityManager securityManager,
                                                                                                                          ShiroJwtAccessControlFilter shiroJwtAccessControlFilter)

拦截器配置

delegatingFilterProxy

@Bean
public org.springframework.boot.web.servlet.FilterRegistrationBean delegatingFilterProxy()

拦截器注册

advisorAutoProxyCreator

@Bean
public org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator()

* 开启Shiro的注解(如@RequiresRoles,@RequiresPermissions), 需借助SpringAOP扫描使用Shiro注解的类,并在必要时进行安全逻辑验证 * 配置以下两个bean(DefaultAdvisorAutoProxyCreator(可选) 和AuthorizationAttributeSourceAdvisor)即可实现此功能 *

authorizationAttributeSourceAdvisor

@Bean
public org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(org.apache.shiro.mgt.SecurityManager securityManager)

tokenRefreshInterceptor

@Bean
 @ConditionalOnProperty(prefix="spring.jwt",
                       name="enable-auto-refresh-token",
                       havingValue="true",
                       matchIfMissing=false)
public TokenRefreshInterceptor tokenRefreshInterceptor(JwtProperties jwtProperties,
                                                                                                                                                                                                                                                                UserAuthBiz userAuthBiz,
                                                                                                                                                                                                                                                                JwtUtils jwtUtils)