<!-- springboot 與 shiro 的集成-->
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.4.1</version>
</dependency>

<!-- thymeleaf 與 shiro 集成-->
<dependency>
  <groupId>com.github.theborakompanioni</groupId>
  <artifactId>thymeleaf-extras-shiro</artifactId>
  <version>2.0.0</version>
</dependency>

<dependency>
  <groupId>org.springframework.boot</groupId>
  <artifactId>spring-boot-starter-thymeleaf</artifactId>
</dependency>

<dependency>
  <groupId>org.springframework.boot</groupId>
  <artifactId>spring-boot-configuration-processor</artifactId>
  <optional>true</optional>
</dependency>

<dependency>
  <groupId>org.projectlombok</groupId>
  <artifactId>lombok</artifactId>
  <optional>true</optional>
</dependency>

@Configuration
@ConfigurationProperties(prefix = "shiro")
@Data
public class ShiroConfig {

  private String loginUrl;
  private String unauthorizedUrl;
  private String successUrl;
  private String logoutUrl;

  private String[] anons;
  private String[] authcs;

  /**
   * 配置securityManager
   * @param userRealm
   * @return
   */
  @Bean
  public SecurityManager securityManager(UserRealm userRealm){
    DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();

    securityManager.setRealm(userRealm);

    return securityManager;
  }

  /**
   * 配置shiroFilter
   * @param securityManager
   * @return
   */
  @Bean
  public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager){
    ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();

    shiroFilterFactoryBean.setSecurityManager(securityManager);
    shiroFilterFactoryBean.setLoginUrl(loginUrl);
    shiroFilterFactoryBean.setUnauthorizedUrl(unauthorizedUrl);
    shiroFilterFactoryBean.setSuccessUrl(successUrl);

    Map<String,String> filterMap = new HashMap<>();

    if(null != logoutUrl){
      filterMap.put(loginUrl,"logout");
    }
    if(anons!=null && anons.length>0){
      for(String anon:anons){
        filterMap.put(anon,"anon");
      }
    }
    if(authcs!=null && authcs.length>0){
      for(String authc:authcs){
        filterMap.put(authc,"authc");
      }
    }

    shiroFilterFactoryBean.setFilterChainDefinitionMap(filterMap);
    return shiroFilterFactoryBean;
  }

  /**
   * 配置自定義Realm
   * @return
   */
  @Bean
  public UserRealm userRealm(CredentialsMatcher credentialsMatcher){
    UserRealm userRealm = new UserRealm();

    userRealm.setCredentialsMatcher(credentialsMatcher);

    return userRealm;
  }

  /**
   * 配置憑證匹配器
   * @return
   */
  @Bean
  public HashedCredentialsMatcher hashedCredentialsMatcher(){
    HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();

    hashedCredentialsMatcher.setHashAlgorithmName("MD5");
    hashedCredentialsMatcher.setHashIterations(10);

    return hashedCredentialsMatcher;
  }

  /**
   * 配置ShiroDialect,用于Thymeleaf和shiro標簽的使用
   * @return
   */
  @Bean
  public ShiroDialect shiroDialect(){

    return new ShiroDialect();
  }

}

# shiro
shiro:
 login-url: /login.html
 anons:
  - /login.html
  - /index.html
  - doLogin
 authcs:
  - /**