org.apache.shiro.authc.UsernamePasswordToken#setRememberMe

Source File: LoginController.java From yyblog with MIT License

6 votes

@Log("登陆验证")
@PostMapping("/login")
@ResponseBody
public YYBlogResult login(String username, String password, Boolean rememberMe) {
    if (rememberMe == null) {
        rememberMe = false;
    }
    UsernamePasswordToken token = new UsernamePasswordToken(username, password);
    Subject subject = SecurityUtils.getSubject();
    try {
        token.setRememberMe(rememberMe);
        subject.login(token);
    } catch (Exception e) {
        return YYBlogResult.build(ResultEnum.UNKONW_ERROR.getCode(), e.getMessage());
    }
    return YYBlogResult.ok();
}

Source File: UserController.java From MyBlog with Apache License 2.0

6 votes

@PostMapping("login")
@ResponseBody
public MyResponse login(@NotBlank String username, @NotBlank String password, boolean rememberMe) {
    try {
        //shiro通过SecurityUtils.getSubject()获得主体，主体可以理解为客户端实例，原理在后面讲
        Subject subject = SecurityUtils.getSubject();
        //已经认证过，也就是该客户端已经登陆过
        if (subject.isAuthenticated()) {
            return MyResponse.createResponse(ResponseEnum.ALREADY_LOGIN);
        }
        //一般都使用UsernamePasswordToken，shiro的token中有Principal和Credentials的概念
        //Principal代表当前客户端要登录的用户，Credentials代表证明该用户身份的凭证
        //UsernamePasswordToken将username作为Principal，password作为Credentials
        UsernamePasswordToken token = new UsernamePasswordToken(username, password);
        //rememberMe功能后面讲
        token.setRememberMe(rememberMe);
        subject.login(token);
        return MyResponse.createResponse(ResponseEnum.SUCC);
    } catch (AuthenticationException e) {
        // 用户名或密码错误，不应该明确返回到底是用户不存在还是密码错误
        return MyResponse.createResponse(ResponseEnum.ILLEGAL_PARAM);
    }
}

Source File: SecurityManagerAssociatingFilter.java From aries-jax-rs-whiteboard with Apache License 2.0

6 votes

private Response authenticate(UriInfo info, String user, String password) {
    
    _LOG.debug("Received a login request for user {}", user);
    
    Subject currentUser = SecurityUtils.getSubject();
    
    ResponseBuilder rb;
    
    if (!currentUser.isAuthenticated()) {
        _LOG.debug("Authenticating user {}", user);
        UsernamePasswordToken token = new UsernamePasswordToken(user, password);
        token.setRememberMe(true);
        currentUser.login(token);
        
        rb = Response.ok()
                .cookie(new NewCookie(SESSION_COOKIE_NAME, currentUser.getSession().getId().toString(), 
                        info.getBaseUri().getPath(), null, -1, null, -1, null, false, true));
    } else {
        _LOG.debug("The login request for user {} was already authenticated as user {}", user, currentUser.getPrincipal());
        rb = Response.status(Status.CONFLICT);
    }
    return rb.build();
}

Source File: ApiServiceImpl.java From wangmarket with Apache License 2.0

6 votes

public UserVO identityVerifyAndSession(String key) {
	UserVO vo = identityVerify(key);
	if(vo.getResult() - UserVO.FAILURE == 0){
		return vo;
	}
	
	UsernamePasswordToken token = new UsernamePasswordToken(vo.getUser().getUsername(), vo.getUser().getUsername());
       token.setRememberMe(false);
	Subject currentUser = SecurityUtils.getSubject();  
	
	try {  
		currentUser.login(token);  
	} catch ( UnknownAccountException uae ) {
		uae.printStackTrace();
	} catch ( IncorrectCredentialsException ice ) {
		ice.printStackTrace();
	} catch ( LockedAccountException lae ) {
		lae.printStackTrace();
	} catch ( ExcessiveAttemptsException eae ) {
		eae.printStackTrace();
	} catch ( org.apache.shiro.authc.AuthenticationException ae ) { 
		ae.printStackTrace();
	}
	
	return vo;
}

Source File: LoginController.java From WebStack-Guns with MIT License

5 votes

/**
 * 点击登录执行的动作
 */
@RequestMapping(value = "/login", method = RequestMethod.POST)
public String loginVali() {

    String username = super.getPara("username").trim();
    String password = super.getPara("password").trim();
    String remember = super.getPara("remember");

    //验证验证码是否正确
    if (KaptchaUtil.getKaptchaOnOff()) {
        String kaptcha = super.getPara("kaptcha").trim();
        String code = (String) super.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY);
        if (ToolUtil.isEmpty(kaptcha) || !kaptcha.equalsIgnoreCase(code)) {
            throw new InvalidKaptchaException();
        }
    }

    Subject currentUser = ShiroKit.getSubject();
    UsernamePasswordToken token = new UsernamePasswordToken(username, password.toCharArray());

    if ("on".equals(remember)) {
        token.setRememberMe(true);
    } else {
        token.setRememberMe(false);
    }

    currentUser.login(token);

    ShiroUser shiroUser = ShiroKit.getUser();
    super.getSession().setAttribute("shiroUser", shiroUser);
    super.getSession().setAttribute("username", shiroUser.getAccount());

    LogManager.me().executeLog(LogTaskFactory.loginLog(shiroUser.getId(), getIp()));

    ShiroKit.getSession().setAttribute("sessionFlag", true);

    return REDIRECT + "/admin";
}

Source File: ShiroAuthenticator.java From arcusplatform with Apache License 2.0

5 votes

@Override
public FullHttpResponse authenticateRequest(Channel channel, String username, String password, String isPublic, ByteBuf responseContentIfSuccess) {
   UsernamePasswordToken token = new UsernamePasswordToken(username, password);
   token.setHost(((InetSocketAddress) channel.remoteAddress()).getHostString());
   token.setRememberMe(!"true".equalsIgnoreCase(isPublic));
   return authenticateRequest(channel, token, responseContentIfSuccess);
}

Source File: UserServiceImpl.java From biliob_backend with MIT License

5 votes

@Override
public ResponseEntity login(String name, String passwd) {
    User user =
            mongoTemplate.findOne(
                    Query.query(
                            new Criteria()
                                    .orOperator(Criteria.where("name").is(name), Criteria.where("mail").is(name))),
                    User.class,
                    "user");
    if (user == null) {
        return new ResponseEntity<>(new Result<String>(ResultEnum.LOGIN_FAILED), HttpStatus.UNAUTHORIZED);
    }
    String inputName = user.getName();
    String encodedPassword = new Md5Hash(passwd, inputName).toHex();
    Subject subject = SecurityUtils.getSubject();

    User tempUser = userRepository.findByName(inputName);
    if (tempUser == null) {
        return new ResponseEntity<>(new Result(ResultEnum.LOGIN_FAILED), HttpStatus.UNAUTHORIZED);
    }

    if (tempUser.getPassword() == null) {
        tempUser.setPassword(encodedPassword);
        userRepository.save(tempUser);
    }

    UsernamePasswordToken token = new UsernamePasswordToken(inputName, encodedPassword);
    token.setRememberMe(true);
    subject.login(token);
    String role = getRole(inputName);
    UserServiceImpl.logger.info("{}：{} 登录成功", role, inputName);
    return new ResponseEntity<>(new Result(ResultEnum.LOGIN_SUCCEED, getUserInfo()), HttpStatus.OK);
}

Source File: LoginController.java From MeetingFilm with Apache License 2.0

5 votes

/**
 * 点击登录执行的动作
 */
@RequestMapping(value = "/login", method = RequestMethod.POST)
public String loginVali() {

    String username = super.getPara("username").trim();
    String password = super.getPara("password").trim();
    String remember = super.getPara("remember");

    //验证验证码是否正确
    if (KaptchaUtil.getKaptchaOnOff()) {
        String kaptcha = super.getPara("kaptcha").trim();
        String code = (String) super.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY);
        if (ToolUtil.isEmpty(kaptcha) || !kaptcha.equalsIgnoreCase(code)) {
            throw new InvalidKaptchaException();
        }
    }

    Subject currentUser = ShiroKit.getSubject();
    UsernamePasswordToken token = new UsernamePasswordToken(username, password.toCharArray());

    if ("on".equals(remember)) {
        token.setRememberMe(true);
    } else {
        token.setRememberMe(false);
    }

    currentUser.login(token);

    ShiroUser shiroUser = ShiroKit.getUser();
    super.getSession().setAttribute("shiroUser", shiroUser);
    super.getSession().setAttribute("username", shiroUser.getAccount());

    LogManager.me().executeLog(LogTaskFactory.loginLog(shiroUser.getId(), getIp()));

    ShiroKit.getSession().setAttribute("sessionFlag", true);

    return REDIRECT + "/";
}

Source File: AccountServiceImpl.java From VideoMeeting with Apache License 2.0

5 votes

@Transactional
@Override
public User login(String username, String password) throws IncorrectCredentialsException{
	UsernamePasswordToken token = new UsernamePasswordToken();
	token.setUsername(username);
	token.setPassword(password.toCharArray());
	token.setRememberMe(true);
	SecurityUtils.getSubject().login(token);
	if (SecurityUtils.getSubject().isAuthenticated()) {
		SecurityUtils.getSubject().getSession().setAttribute("username", username);
		return userDao.get("from User u where u.username = ?",
				new String[] { username });
	}
	return null;
}

Source File: Main.java From tutorials with MIT License

4 votes

public static void main(String[] args) {

        IniRealm realm = new IniRealm();
        Ini ini = Ini.fromResourcePath(Main.class.getResource("/com/baeldung/shiro/permissions/custom/shiro.ini").getPath());
        realm.setIni(ini);
        realm.setPermissionResolver(new PathPermissionResolver());
        realm.init();
        SecurityManager securityManager = new DefaultSecurityManager(realm);

        SecurityUtils.setSecurityManager(securityManager);
        Subject currentUser = SecurityUtils.getSubject();

        if (!currentUser.isAuthenticated()) {
          UsernamePasswordToken token = new UsernamePasswordToken("paul.reader", "password4");
          token.setRememberMe(true);
          try {
              currentUser.login(token);
          } catch (UnknownAccountException uae) {
              log.error("Username Not Found!", uae);
          } catch (IncorrectCredentialsException ice) {
              log.error("Invalid Credentials!", ice);
          } catch (LockedAccountException lae) {
              log.error("Your Account is Locked!", lae);
          } catch (AuthenticationException ae) {
              log.error("Unexpected Error!", ae);
          }
        }

        log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");

        if (currentUser.hasRole("admin")) {
            log.info("Welcome Admin");
        } else if(currentUser.hasRole("editor")) {
            log.info("Welcome, Editor!");
        } else if(currentUser.hasRole("author")) {
            log.info("Welcome, Author");
        } else {
            log.info("Welcome, Guest");
        }

        if(currentUser.isPermitted("/articles/drafts/new-article")) {
            log.info("You can access articles");
        } else {
            log.info("You cannot access articles!");
        }
        currentUser.logout();
    }

Source File: Main.java From tutorials with MIT License

4 votes

public static void main(String[] args) {

        Realm realm = new MyCustomRealm();
        SecurityManager securityManager = new DefaultSecurityManager(realm);

        SecurityUtils.setSecurityManager(securityManager);
        Subject currentUser = SecurityUtils.getSubject();

        if (!currentUser.isAuthenticated()) {
          UsernamePasswordToken token 
            = new UsernamePasswordToken("user", "password");
          token.setRememberMe(true);
          try {
              currentUser.login(token);
          } catch (UnknownAccountException uae) {
              log.error("Username Not Found!", uae);
          } catch (IncorrectCredentialsException ice) {
              log.error("Invalid Credentials!", ice);
          } catch (LockedAccountException lae) {
              log.error("Your Account is Locked!", lae);
          } catch (AuthenticationException ae) {
              log.error("Unexpected Error!", ae);
          }
        }

        log.info("User [" + currentUser.getPrincipal() + "] logged in successfully.");

        if (currentUser.hasRole("admin")) {
            log.info("Welcome Admin");
        } else if(currentUser.hasRole("editor")) {
            log.info("Welcome, Editor!");
        } else if(currentUser.hasRole("author")) {
            log.info("Welcome, Author");
        } else {
            log.info("Welcome, Guest");
        }

        if(currentUser.isPermitted("articles:compose")) {
            log.info("You can compose an article");
        } else {
            log.info("You are not permitted to compose an article!");
        }

        if(currentUser.isPermitted("articles:save")) {
            log.info("You can save articles");
        } else {
            log.info("You can not save articles");
        }

        if(currentUser.isPermitted("articles:publish")) {
            log.info("You can publish articles");
        } else {
            log.info("You can not publish articles");
        }

        Session session = currentUser.getSession();
        session.setAttribute("key", "value");
        String value = (String) session.getAttribute("key");
        if (value.equals("value")) {
            log.info("Retrieved the correct value! [" + value + "]");
        }

        currentUser.logout();

        System.exit(0);
    }

Source File: StandaloneShiroTest.java From attic-polygene-java with Apache License 2.0

4 votes

@Test
public void test()
{
    // get the currently executing user:
    Subject currentUser = SecurityUtils.getSubject();

    // Do some stuff with a Session (no need for a web or EJB container!!!)
    Session session = currentUser.getSession();
    session.setAttribute( "someKey", "aValue" );
    String value = ( String ) session.getAttribute( "someKey" );
    assertEquals( "aValue", value );
    LOG.info( "Retrieved the correct value! [" + value + "]" );

    // let's login the current user so we can check against roles and permissions:
    if ( !currentUser.isAuthenticated() ) {
        UsernamePasswordToken token = new UsernamePasswordToken( "lonestarr", "vespa" );
        token.setRememberMe( true );
        try {
            currentUser.login( token );
        } catch ( UnknownAccountException uae ) {
            fail( "There is no user with username of " + token.getPrincipal() );
        } catch ( IncorrectCredentialsException ice ) {
            fail( "Password for account " + token.getPrincipal() + " was incorrect!" );
        } catch ( LockedAccountException lae ) {
            fail( "The account for username " + token.getPrincipal() + " is locked.  "
                  + "Please contact your administrator to unlock it." );
        } // ... catch more exceptions here (maybe custom ones specific to your application?
        catch ( AuthenticationException ae ) {
            //unexpected condition?  error?
            throw ae;
        }
    }

    //say who they are:
    //print their identifying principal (in this case, a username):
    assertNotNull( currentUser.getPrincipal() );
    LOG.info( "User [" + currentUser.getPrincipal() + "] logged in successfully." );

    //test a role:
    if ( currentUser.hasRole( "schwartz" ) ) {
        LOG.info( "May the Schwartz be with you!" );
    } else {
        fail( "Hello, mere mortal." );
    }

    //test a typed permission (not instance-level)
    if ( currentUser.isPermitted( "lightsaber:weild" ) ) {
        LOG.info( "You may use a lightsaber ring.  Use it wisely." );
    } else {
        fail( "Sorry, lightsaber rings are for schwartz masters only." );
    }

    //a (very powerful) Instance Level permission:
    if ( currentUser.isPermitted( "winnebago:drive:eagle5" ) ) {
        LOG.info( "You are permitted to 'drive' the winnebago with license plate (id) 'eagle5'.  "
                  + "Here are the keys - have fun!" );
    } else {
        fail( "Sorry, you aren't allowed to drive the 'eagle5' winnebago!" );
    }

    //all done - log out!
    currentUser.logout();
}