3、Shiro授权

Shiro授权过程和认证过程相似：

项目结构：

package com.shiro.shiroframe;

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.mgt.DefaultSecurityManager;
import org.apache.shiro.realm.SimpleAccountRealm;
import org.apache.shiro.subject.Subject;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.api.Test;

public class ShiroAuthorizerTest {
    //realm，暂时用来存储我们假造的用户信息
    SimpleAccountRealm simpleAccountRealm=new SimpleAccountRealm);
    @BeforeEach
    public void setUserMsg){
        //添加一个用户信息并设置角色为admin
        simpleAccountRealm.addAccount"houru","miyue","admin","user");//设置该用户既是管理员又是普通用户
    }
    @Test
    public void ShiroAuthorizerTest) {
        //构建SecurityManager环境
        DefaultSecurityManager defaultSecurityManager = new DefaultSecurityManager);
        //SecurityManager环境下设置realm
        defaultSecurityManager.setRealmsimpleAccountRealm);
        //SecurityUtils先获取SecurityManager环境
        SecurityUtils.setSecurityManagerdefaultSecurityManager);
      //获取subject
        Subject subject= SecurityUtils.getSubject);
        //通过UsernamePasswordToken组织提交认证所要传递的参数
        UsernamePasswordToken usernamePasswordToken=new UsernamePasswordToken"houru","miyue");
        //登录认证
        subject.loginusernamePasswordToken);
        //打印是否认证通过：subject.isAuthenticated)
        System.err.printlnsubject.isAuthenticated));
        //权限认证
        //检查当前用户是否具有admin角色权限
        subject.checkRole"admin");
        //检查当前用户是否具有admin，user等角色权限
        subject.checkRoles"admin","user");
    }
}