org.apache.shiro.web.filter.authc.FormAuthenticationFilter Java Exaples

Source File: ShiroConfiguration.java From easyweb with Apache License 2.0

6 votes

@Bean(name = "shiroFilter")
    public ShiroFilterFactoryBean getShiroFilterFactoryBean(
            DefaultWebSecurityManager securityManager,
            FormAuthenticationFilter formAuthenticationFilter) {

        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
        // 必须设置 SecurityManager
        shiroFilterFactoryBean.setSecurityManager(securityManager);
        // 如果不设置默认会自动寻找Web工程根目录下的"/login.jsp"页面
        shiroFilterFactoryBean.setLoginUrl("/oss/login");
        // 登录成功后要跳转的连接
        shiroFilterFactoryBean.setSuccessUrl("/admin/index");
        shiroFilterFactoryBean.setUnauthorizedUrl("/403");
        Map map = new HashMap<>();
//        map.put("authc",formAuthenticationFilter);
        shiroFilterFactoryBean.setFilters(map);
        loadShiroFilterChain(shiroFilterFactoryBean);
        return shiroFilterFactoryBean;
    }

Source File: CaptchaFormAuthenticationFilter.java From MultimediaDesktop with Apache License 2.0

6 votes

private void logLoginStatus(ServletRequest request, LoginType loginType) {
	Subject subject = SecurityUtils.getSubject();
	if (subject == null) {
		return;
	}
	ShiroUser shiroUser = (ShiroUser) subject.getPrincipal();
	String userId = null;
	if (shiroUser == null && LoginType.登录失败.equals(loginType)) {
		userId = request
				.getParameter(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM);
	} else {
		userId = shiroUser.loginName;
	}
	if (StringUtils.isBlank(userId)) {
		return;
	}
	LoginIpDto loginIpDto = new LoginIpDto(userId,
			AddressUtil.getIpAddr((HttpServletRequest) request), loginType);
	loginIpService.addLoginIp(loginIpDto);
}

Source File: ShiroController.java From niubi-job with Apache License 2.0

5 votes

@RequestMapping(value = "/login", method = RequestMethod.POST)
@ExceptionForward("/shiro/login")
public String login(HttpServletRequest request) {
    String exception = (String) request.getAttribute(FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME);
    if (UnknownAccountException.class.getName().equals(exception)) {
        failed("Unknown account.");
    } else if (IncorrectCredentialsException.class.getName().equals(exception)) {
        failed("Incorrect password.");
    } else {
        LoggerHelper.error("unknown error : " + exception);
        failed("Unknown error.");
    }
    return "shiro_login";
}

Source File: ShiroConfiguration.java From jee-universal-bms with Apache License 2.0

5 votes

@Bean(name = "shiroFilter")
public ShiroFilterFactoryBean getShiroFilterFactoryBean() {
    ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
    shiroFilterFactoryBean.setSecurityManager(getDefaultWebSecurityManager());
    shiroFilterFactoryBean.setLoginUrl("/login.html");
    shiroFilterFactoryBean.setSuccessUrl("/home.html");
    shiroFilterFactoryBean.setUnauthorizedUrl("/403.html");

    filterChainDefinitionMap.put("/login.html", "anon");
    filterChainDefinitionMap.put("/v1/api0/image/captcha", "anon"); // 匿名用户可访问
    filterChainDefinitionMap.put("/view/**", "perms");                  // Url权限过滤
    filterChainDefinitionMap.put("/v1/api0/security/login", "anon");    // 登陆用户
    filterChainDefinitionMap.put("/v1/api0/security/logout", "anon");    // 登陆用户
    filterChainDefinitionMap.put("/v1/api0/user*//*", "user");       // 登陆用户
    //>>>>>>
    filterChainDefinitionMap.put("/v1/api0/orgcate*//**//**//**//*", "user");       // 登陆用户
    filterChainDefinitionMap.put("/v1/api0/resource*//**//**//**//*", "user");       // 登陆用户
    filterChainDefinitionMap.put("/v1/api0/role*//**//**//**//*", "user");
    //<<<<<<
    //filterChainDefinitionMap.put("/v1/api0/**/**", "user,perms");       // 登陆用户
    filterChainDefinitionMap.put("/v1/api0/**/**", "user");       // 登陆用户
    filterChainDefinitionMap.put("/home.html", "authc");                // 登陆用户
    shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);

    Map<String, Filter> filters = new HashMap<>();
    filters.put("anon", new AnonymousFilter());
    filters.put("user", new UserFilter());
    filters.put("authc", new FormAuthenticationFilter());
    filters.put("perms", new ShiroPermissionsFilter()); // 自定义权限过滤
    shiroFilterFactoryBean.setFilters(filters);

    return shiroFilterFactoryBean;
}

Source File: LoginController.java From MultimediaDesktop with Apache License 2.0

5 votes

@RequestMapping(value = "/user/login", method = RequestMethod.GET)
public String login(
		@RequestParam(value = Constant.USER_STATUS_KEY, defaultValue = Constant.USER_NORMAL_STATUS) String userStatus,
		Model model) {

	Subject subject = SecurityUtils.getSubject();

	if (subject != null && subject.isAuthenticated()) {
		return "redirect:/index";
	}

	// 暂时没有业务逻辑进行处理
	if (!Constant.USER_NORMAL_STATUS.equals(userStatus)) {
		model.addAttribute(Constant.USER_STATUS_KEY, userStatus);
		// return "redirect:/user/onlineStatus";
		return "onlineStatus";
	}

	// 获取记住账号的用户信息
	if (subject != null && !subject.isAuthenticated()
			&& subject.isRemembered()) {
		ShiroUser shiroUser = (ShiroUser) subject.getPrincipal();
		if (shiroUser != null) {
			// 用户名
			model.addAttribute(
					FormAuthenticationFilter.DEFAULT_USERNAME_PARAM,
					shiroUser.loginName);
		}
	}

	return "login";
}

Source File: LoginController.java From MultimediaDesktop with Apache License 2.0

5 votes

@RequestMapping(value = "/user/login", method = RequestMethod.POST)
public String fail(
		@RequestParam(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM) String userName,
		HttpServletRequest request, Model model) {
	// 用户名
	model.addAttribute(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM,
			userName);
	// 登录失败异常
	model.addAttribute(
			FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME,
			request.getAttribute(FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME));
	return "login";
}

Source File: LoginController.java From MultimediaDesktop with Apache License 2.0

5 votes

@RequestMapping(value = "/user/findPassword", method = RequestMethod.POST)
public ModelAndView findPassword(String email, String captcha,
		HttpSession session, ModelAndView model) {

	try {
		model.setViewName("onlineStatus");
		if (StringUtils.isBlank(captcha)) {
			throw new VerificationException("验证码不允许为空");
		}
		String code = (String) session
				.getAttribute(com.google.code.kaptcha.Constants.KAPTCHA_SESSION_KEY);
		if (StringUtils.isBlank(code) || !code.equalsIgnoreCase(captcha)) {
			throw new VerificationException("验证码错误");
		}

		if (!StringUtils.checkEmail(email)) {
			throw new VerificationException("邮箱错误");
		}

		CommonResponseDto response = userService.findPassword(email);

		if (response.getResult() == UserConstant.SUCCESS) {
			model.addObject(Constant.USER_STATUS_KEY,
					Constant.USER_FIND_PASSWORD_SUCCESS);
		} else {
			throw new VerificationException(response.getErrorMessage());
		}

	} catch (VerificationException e) {
		// 注册失败异常
		model.addObject(
				FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME,
				e.getMessage());
		model.addObject(Constant.USER_STATUS_KEY,
				Constant.USER_FIND_PASSWORD_FAIL);
	}
	return model;
}

Source File: LoginController.java From spring-boot-quickstart with Apache License 2.0

4 votes

@RequestMapping(value = "/login", method = RequestMethod.POST)
public String fail(@RequestParam(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM) String userName, Model model) {
    System.out.println("fail again..");
    model.addAttribute(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM, userName);
    return "account/login";
}

Source File: UserController.java From MultimediaDesktop with Apache License 2.0

4 votes

@RequestMapping(value = "/user/register", method = RequestMethod.POST)
public ModelAndView register(ModelAndView model, UserDto user,
		String passwordAgain, String captcha, HttpSession session,
		HttpServletRequest request) {

	try {
		model.addObject("user", user);
		if (StringUtils.isBlank(captcha)) {
			throw new VerificationException("验证码不允许为空");
		}
		String code = (String) session
				.getAttribute(com.google.code.kaptcha.Constants.KAPTCHA_SESSION_KEY);
		if (StringUtils.isBlank(code) || !code.equalsIgnoreCase(captcha)) {
			throw new VerificationException("验证码错误");
		}

		if (StringUtils.isBlank(passwordAgain)
				|| StringUtils.isBlank(user.getPassword())
				|| !passwordAgain.equals(user.getPassword())) {
			throw new VerificationException("密码不允许为空或者两次密码输入不匹配");
		}
		user.setRegisterAddress(AddressUtil.getIpAddr(request));
		CommonResponseDto dto = userService.registerUser(user);

		if (UserConstant.SUCCESS != dto.getResult()) {
			throw new VerificationException(dto.getErrorMessage());
		}
		model.addObject(Constant.USER_STATUS_KEY,
				Constant.USER_REGISTER_STATUS);
		model.setViewName("onlineStatus");

	} catch (VerificationException e) {
		// 注册失败异常
		model.addObject(
				FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME,
				e.getMessage());
		model.addObject("tab", "2");
		model.setViewName("login");
	}
	return model;
}

Source File: UserController.java From MultimediaDesktop with Apache License 2.0

4 votes

@RequestMapping(value = "/user/findPassword/{userId}", method = RequestMethod.POST)
public void findPassword(String userIdDigests,
		@PathVariable("userId") String userId, String password,
		String rpassword, String captcha, HttpSession session,
		ModelAndView model) {

	try {

		StringUtils.isValidString(userId, "账号不允许为空");
		StringUtils.isValidString(userIdDigests, "参数错误");
		StringUtils.isValidString(password, "新密码不允许为空");
		StringUtils.isValidString(rpassword, "新密码不允许为空");
		StringUtils.isValidString(captcha, "验证码不允许为空");

		String code = (String) session
				.getAttribute(com.google.code.kaptcha.Constants.KAPTCHA_SESSION_KEY);
		if (StringUtils.isBlank(code) || !code.equalsIgnoreCase(captcha)) {
			throw new VerificationException("验证码错误");
		}

		if (!password.equals(rpassword)) {
			throw new VerificationException("两次密码输入不一致");
		}

		String digests = Encodes.encodeHex(Digests.sha1(userId.getBytes()));

		if (!userIdDigests.equals(digests)) {
			// 这儿跳转到错误页面
			model.setViewName("onlineStatus");
			model.addObject(Constant.USER_STATUS_KEY,
					Constant.USER_FIND_PASSWORD_ERROR);
			return;
		}

		CommonResponseDto responseDto = userService.findPassword(userId,
				rpassword);

		if (UserConstant.SUCCESS != responseDto.getResult()) {
			throw new VerificationException(responseDto.getErrorMessage());
		}

		model.setViewName("redirect:/user/login");

	} catch (VerificationException e) {
		model.addObject(
				FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME,
				e.getMessage());
		model.setViewName("findPassword");
		if(userId!=null){
			model.addObject("userId", userId);
			model.addObject("userIdDigests",
					Encodes.encodeHex(Digests.sha1(userId.getBytes())));
		}
	}

}

Source File: LoginController.java From Mario with Apache License 2.0

4 votes

@RequestMapping(value = "/login", method = RequestMethod.POST)
public String fail(@RequestParam(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM) String userName, Model model) {
	model.addAttribute(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM, userName);
	return "account/login";
}

Source File: LoginController.java From dubai with MIT License

4 votes

@RequestMapping(method = RequestMethod.POST)
public String fail(@RequestParam(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM) String userName, Model model) {
	model.addAttribute(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM, userName);
	return "passport/loginForm";
}

Source File: LoginFormController.java From es with Apache License 2.0

4 votes

@RequestMapping(value = {"/{login:login;?.*}"}) //spring3.2.2 bug see  http://jinnianshilongnian.iteye.com/blog/1831408
public String loginForm(HttpServletRequest request, ModelMap model) {

    //表示退出
    if (!StringUtils.isEmpty(request.getParameter("logout"))) {
        model.addAttribute(Constants.MESSAGE, messageSource.getMessage("user.logout.success", null, null));
    }

    //表示用户删除了 @see org.apache.shiro.web.filter.user.SysUserFilter
    if (!StringUtils.isEmpty(request.getParameter("notfound"))) {
        model.addAttribute(Constants.ERROR, messageSource.getMessage("user.notfound", null, null));
    }

    //表示用户被管理员强制退出
    if (!StringUtils.isEmpty(request.getParameter("forcelogout"))) {
        model.addAttribute(Constants.ERROR, messageSource.getMessage("user.forcelogout", null, null));
    }

    //表示用户输入的验证码错误
    if (!StringUtils.isEmpty(request.getParameter("jcaptchaError"))) {
        model.addAttribute(Constants.ERROR, messageSource.getMessage("jcaptcha.validate.error", null, null));
    }


    //表示用户锁定了 @see org.apache.shiro.web.filter.user.SysUserFilter
    if (!StringUtils.isEmpty(request.getParameter("blocked"))) {
        User user = (User) request.getAttribute(Constants.CURRENT_USER);
        String reason = userStatusHistoryService.getLastReason(user);
        model.addAttribute(Constants.ERROR, messageSource.getMessage("user.blocked", new Object[]{reason}, null));
    }

    if (!StringUtils.isEmpty(request.getParameter("unknown"))) {
        model.addAttribute(Constants.ERROR, messageSource.getMessage("user.unknown.error", null, null));
    }

    //登录失败了 提取错误消息
    Exception shiroLoginFailureEx =
            (Exception) request.getAttribute(FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME);
    if (shiroLoginFailureEx != null) {
        model.addAttribute(Constants.ERROR, shiroLoginFailureEx.getMessage());
    }

    //如果用户直接到登录页面 先退出一下
    //原因：isAccessAllowed实现是subject.isAuthenticated()---->即如果用户验证通过 就允许访问
    // 这样会导致登录一直死循环
    Subject subject = SecurityUtils.getSubject();
    if (subject != null && subject.isAuthenticated()) {
        subject.logout();
    }


    //如果同时存在错误消息 和 普通消息  只保留错误消息
    if (model.containsAttribute(Constants.ERROR)) {
        model.remove(Constants.MESSAGE);
    }

    return "front/login";
}

org.apache.shiro.web.filter.authc.FormAuthenticationFilter Java Examples