org.apache.shiro.authc.AuthenticationException#printStackTrace

Source File: FormAuthenticationFilter.java From easyweb with Apache License 2.0

6 votes

/**
 * 登录失败调用事件
 */
@Override
protected boolean onLoginFailure(AuthenticationToken token,
                                    AuthenticationException e, ServletRequest request, ServletResponse response) {
	String className = e.getClass().getName(), message = "";
	if (IncorrectCredentialsException.class.getName().equals(className)
			|| UnknownAccountException.class.getName().equals(className)){
		message = "用户或密码错误, 请重试.";
	}
	else if (e.getMessage() != null && StringUtils.startsWith(e.getMessage(), "msg:")){
		message = StringUtils.replace(e.getMessage(), "msg:", "");
	}
	else{
		message = "系统出现点问题，请稍后再试！";
		e.printStackTrace(); // 输出到控制台
	}
       request.setAttribute(getFailureKeyAttribute(), className);
       request.setAttribute(getMessageParam(), message);
       return true;
}

Source File: ShiroSpringController.java From tutorials with MIT License

6 votes

@RequestMapping( value = "/login", method = {RequestMethod.GET, RequestMethod.POST})
public String login(HttpServletRequest req, UserCredentials cred, RedirectAttributes attr) {

  if(req.getMethod().equals(RequestMethod.GET.toString())) {
    return "login";
  } else {
    Subject subject = SecurityUtils.getSubject();

    if(!subject.isAuthenticated()) {
      UsernamePasswordToken token = new UsernamePasswordToken(
        cred.getUsername(), cred.getPassword(), cred.isRememberMe());
      try {
        subject.login(token);
      } catch (AuthenticationException ae) {
          ae.printStackTrace();
          attr.addFlashAttribute("error", "Invalid Credentials");
          return "redirect:/login";
      }
    }

    return "redirect:/secure";
  }
}

Source File: LoginController.java From learnjavabug with MIT License

5 votes

@RequestMapping(value = "/login", method = RequestMethod.POST)
public String login(String username, String password) {
    Subject subject = SecurityUtils.getSubject();
    try {
        subject.login(new UsernamePasswordToken(username, password));
        return "登录成功!";
    } catch (AuthenticationException e) {
        e.printStackTrace();
        return "登录失败!";
    }

}

Source File: LoginController.java From learnjavabug with MIT License

5 votes

@RequestMapping(value = "/login", method = RequestMethod.POST)
public String login(String username, String password) {
    Subject subject = SecurityUtils.getSubject();
    try {
        subject.login(new UsernamePasswordToken(username, password));
        return "登录成功!";
    } catch (AuthenticationException e) {
        e.printStackTrace();
        return "登录失败!";
    }

}

Source File: ShiroExceptionHandler.java From dts-shop with GNU Lesser General Public License v3.0

4 votes

@ExceptionHandler(AuthenticationException.class)
@ResponseBody
public Object unauthenticatedHandler(AuthenticationException e) {
	e.printStackTrace();
	return ResponseUtil.unlogin();
}

Source File: EmployeeController.java From ZTuoExchange_framework with MIT License

4 votes

/**
 * 提交登录信息
 *
 * @param request
 * @return
 */


@RequestMapping(value = "sign/in")
@ResponseBody
@AccessLog(module = AdminModule.SYSTEM, operation = "提交登录信息Admin")
public MessageResult doLogin(@SessionAttribute("username")String username,
                             @SessionAttribute("password")String password,
                             @SessionAttribute("phone")String phone,String code,
                             @RequestParam(value="rememberMe",defaultValue = "true")boolean rememberMe,
                             HttpServletRequest request) {
    Assert.notNull(code,"请输入验证码");
    Assert.isTrue(StringUtils.isNotEmpty(username)&&StringUtils.isNotEmpty(password)&&StringUtils.isNotEmpty(phone),"会话已过期");
    ValueOperations valueOperations = redisTemplate.opsForValue() ;
    Object cacheCode = valueOperations.get(SysConstant.ADMIN_LOGIN_PHONE_PREFIX+phone);
    Assert.notNull(cacheCode,"验证码已经被清除，请重新发送");
    if (!code.equals(cacheCode.toString())) {
        return error("手机验证码错误，请重新输入");
    }
    try {
        log.info("md5Key {}", md5Key);

        //password = Encrypt.MD5(password + md5Key);
        UsernamePasswordToken token = new UsernamePasswordToken(username, password,true);
        token.setHost(getRemoteIp(request));
        SecurityUtils.getSubject().login(token);
        valueOperations.getOperations().delete(SysConstant.ADMIN_LOGIN_PHONE_PREFIX+phone);
        Admin admin = (Admin) request.getSession().getAttribute(SysConstant.SESSION_ADMIN);
        //token.setRememberMe(true);

        //获取当前用户的菜单权限
        List<Menu> list;
        if ("root".equalsIgnoreCase(admin.getUsername())) {
            list = sysRoleService.toMenus(sysPermissionService.findAll(), 0L);
        } else {
            list = sysRoleService.toMenus(sysRoleService.getPermissions(admin.getRoleId()), 0L);
        }
        Map<String, Object> map = new HashMap<>();
        map.put("permissions", list);
        map.put("admin", admin);
        return success("登录成功", map);
    } catch (AuthenticationException e) {
        e.printStackTrace();
        return error(e.getMessage());
    }
}

Source File: EmployeeController.java From ZTuoExchange_framework with MIT License

4 votes

/**
 * 提交登录信息
 *
 * @param request
 * @return
 */


@RequestMapping(value = "sign/in")
@ResponseBody
@AccessLog(module = AdminModule.SYSTEM, operation = "提交登录信息Admin")
public MessageResult doLogin(@SessionAttribute("username")String username,
                             @SessionAttribute("password")String password,
                             @SessionAttribute("phone")String phone,String code,
                             @RequestParam(value="rememberMe",defaultValue = "true")boolean rememberMe,
                             HttpServletRequest request) {
    Assert.notNull(code,"请输入验证码");
    Assert.isTrue(StringUtils.isNotEmpty(username)&&StringUtils.isNotEmpty(password)&&StringUtils.isNotEmpty(phone),"会话已过期");
    ValueOperations valueOperations = redisTemplate.opsForValue() ;
    Object cacheCode = valueOperations.get(SysConstant.ADMIN_LOGIN_PHONE_PREFIX+phone);
    Assert.notNull(cacheCode,"验证码已经被清除，请重新发送");
    if (!code.equals(cacheCode.toString())) {
        return error("手机验证码错误，请重新输入");
    }
    try {
        log.info("md5Key {}", md5Key);

        //password = Encrypt.MD5(password + md5Key);
        UsernamePasswordToken token = new UsernamePasswordToken(username, password,true);
        token.setHost(getRemoteIp(request));
        SecurityUtils.getSubject().login(token);
        valueOperations.getOperations().delete(SysConstant.ADMIN_LOGIN_PHONE_PREFIX+phone);
        Admin admin = (Admin) request.getSession().getAttribute(SysConstant.SESSION_ADMIN);
        //token.setRememberMe(true);

        //获取当前用户的菜单权限
        List<Menu> list;
        if ("root".equalsIgnoreCase(admin.getUsername())) {
            list = sysRoleService.toMenus(sysPermissionService.findAll(), 0L);
        } else {
            list = sysRoleService.toMenus(sysRoleService.getPermissions(admin.getRoleId()), 0L);
        }
        Map<String, Object> map = new HashMap<>();
        map.put("permissions", list);
        map.put("admin", admin);
        return success("登录成功", map);
    } catch (AuthenticationException e) {
        e.printStackTrace();
        return error(e.getMessage());
    }
}

Source File: ShiroExceptionHandler.java From mall with MIT License

4 votes

@ExceptionHandler(AuthenticationException.class)
@ResponseBody
public Object unauthenticatedHandler(AuthenticationException e) {
    e.printStackTrace();
    return ResponseUtil.unlogin();
}

Source File: RestController.java From springboot-shiro-cas-mybatis with MIT License

4 votes

/**
	 * 前后端分离的情况之下rest风格登录获取TGT ST
	 * @Description:TODO
	 * @author:hsj qq:2356899074
	 * @time:2017年12月1日 下午2:49:40
	 * @param req
	 * @param respon
	 * @return
	 * @throws Exception
	 */
	@RequestMapping("/restlogin")
	public String restlogin(HttpServletRequest req,HttpServletResponse respon)throws Exception{
//		return RestFulLogin.validateFromCAS("hsjhsj", "hsjhsj");
		        //校验有没有username和password
                String username = "hsjhsj";
		        UsernamePasswordToken token = new UsernamePasswordToken("hsjhsj","hsjhsj");
		        //获取当前的Subject  
		        Subject currentUser = SecurityUtils.getSubject();  
		        try {  
		            //在调用了login方法后,SecurityManager会收到AuthenticationToken,并将其发送给已配置的Realm执行必须的认证检查  
		            //每个Realm都能在必要时对提交的AuthenticationTokens作出反应  
		            //所以这一步在调用login(token)方法时,它会走到MyRealm.doGetAuthenticationInfo()方法中,具体验证方式详见此方法  
		            logger.info("对用户[" + username + "]进行登录验证..验证开始");  
		            currentUser.login(token);  
		            logger.info("对用户[" + username + "]进行登录验证..验证通过");  
		        }catch(UnknownAccountException uae){  
		            logger.info("对用户[" + username + "]进行登录验证..验证未通过,未知账户");  
		            return "403";
		        }catch(IncorrectCredentialsException ice){  
		            logger.info("对用户[" + username + "]进行登录验证..验证未通过,错误的凭证");  
		            return "403";
		        }catch(LockedAccountException lae){  
		            logger.info("对用户[" + username + "]进行登录验证..验证未通过,账户已锁定");  
		            return "403";
		        }catch(ExcessiveAttemptsException eae){  
		            logger.info("对用户[" + username + "]进行登录验证..验证未通过,错误次数过多"); 
		            return "403";
		        }catch(AuthenticationException ae){  
		            //通过处理Shiro的运行时AuthenticationException就可以控制用户登录失败或密码错误时的情景  
		            logger.info("对用户[" + username + "]进行登录验证..验证未通过,堆栈轨迹如下");  
		            ae.printStackTrace();  
		            return "403";
		        }  
		        //验证是否登录成功  
		        if(currentUser.isAuthenticated()){  
		            logger.info("用户[" + username + "]登录认证通过(这里可以进行一些认证通过后的一些系统参数初始化操作)");  
		            return "inde";
		        }else{  
		            token.clear();  
		            return "403";
		        }  
	}

Source File: UserController.java From demo-springmvc-shiro with Apache License 2.0

4 votes

@RequestMapping(value="/login", method=RequestMethod.POST)
public String login(String username, String password, HttpServletRequest request){
    System.out.println("-------------------------------------------------------");
    String rand = (String)request.getSession().getAttribute("rand");
    String captcha = WebUtils.getCleanParam(request, "captcha");
    System.out.println("用户["+username+"]登录时输入的验证码为["+captcha+"]，HttpSession中的验证码为["+rand+"]");
    if(!StringUtils.equals(rand, captcha)){
        request.setAttribute("message_login", "验证码不正确");
        return InternalResourceViewResolver.FORWARD_URL_PREFIX + "/";
    }
    UsernamePasswordToken token = new UsernamePasswordToken(username, password);
    token.setRememberMe(true);
    System.out.print("为验证登录用户而封装的Token：");
    System.out.println(ReflectionToStringBuilder.toString(token, ToStringStyle.MULTI_LINE_STYLE));
    //获取当前的Subject
    Subject currentUser = SecurityUtils.getSubject();
    try {
        //在调用了login方法后，SecurityManager会收到AuthenticationToken，并将其发送给已配置的Realm执行必须的认证检查
        //每个Realm都能在必要时对提交的AuthenticationTokens作出反应
        //所以这一步在调用login(token)方法时，它会走到MyRealm.doGetAuthenticationInfo()方法中，具体验证方式详见此方法
        System.out.println("对用户[" + username + "]进行登录验证...验证开始");
        currentUser.login(token);
        System.out.println("对用户[" + username + "]进行登录验证...验证通过");
    }catch(UnknownAccountException uae){
        System.out.println("对用户[" + username + "]进行登录验证...验证未通过，未知账户");
        request.setAttribute("message_login", "未知账户");
    }catch(IncorrectCredentialsException ice){
        System.out.println("对用户[" + username + "]进行登录验证...验证未通过，错误的凭证");
        request.setAttribute("message_login", "密码不正确");
    }catch(LockedAccountException lae){
        System.out.println("对用户[" + username + "]进行登录验证...验证未通过，账户已锁定");
        request.setAttribute("message_login", "账户已锁定");
    }catch(ExcessiveAttemptsException eae){
        System.out.println("对用户[" + username + "]进行登录验证...验证未通过，错误次数过多");
        request.setAttribute("message_login", "用户名或密码错误次数过多");
    }catch(AuthenticationException ae){
        //通过处理Shiro的运行时AuthenticationException就可以控制用户登录失败或密码错误时的情景
        System.out.println("对用户[" + username + "]进行登录验证...验证未通过，堆栈轨迹如下");
        ae.printStackTrace();
        request.setAttribute("message_login", "用户名或密码不正确");
    }
    //验证是否登录成功
    if(currentUser.isAuthenticated()){
        System.out.println("用户[" + username + "]登录认证通过（这里可进行一些认证通过后的系统参数初始化操作）");
        return "main";
    }else{
        token.clear();
        return InternalResourceViewResolver.FORWARD_URL_PREFIX + "/";
    }
}

Source File: LoginController.java From dpCms with Apache License 2.0

4 votes

/**
 * 
 * @Title: loginDo 
 * @Description: 平台登录
 * @param @param username
 * @param @param password
 * @return Response 返回类型,如果成功返回跳转的URL
 * @throws
 */
@RequestMapping(value = "/login")
@ResponseBody
public Response login(String username, String password, String logincode , Response response ) {
	String msg = "";
	Subject currentUser = SecurityUtils.getSubject();
	Session session = currentUser.getSession();
	String codeSession = (String) session.getAttribute(Constants.KAPTCHA_SESSION_KEY);
	if (StringUtils.isBlank(logincode) || StringUtils.isBlank(codeSession)
			|| !logincode.equals(codeSession)) {
		response.setStateCode(StateCode.LOGIN_FAIL);
		msg = "验证码不正确,朋友！";
	} else {
		AuthenticationToken token = new UsernamePasswordToken(username,password);
		Account account = accountService.findByLoginName(username);
		try {
			currentUser.login(token);
			account.setPassword("");
			// 获取当前登录用户的岗位信息。
			CurrentInfo currentInfo = currentUserInfoService.findCurrentUserInfo(account);
			Employee emplpyee = currentInfo.getEmployee();
			if (emplpyee == null || emplpyee.getDefaultPostId() == null) {
				throw new AccountNoActiceException();
			}
			long defaultPostId = emplpyee.getDefaultPostId();

			// 遍历岗位信息,如果有一个岗位不需要过滤权限,那么这个人不需要过滤权限
			Set<Post> postSet = currentInfo.getPostList();
			Iterator<Post> it = postSet.iterator();
			if (it.hasNext()) {
				Post post = it.next();
				if (post.getNeedFilter() == null) {// 当前登录的员工不需要过滤任何权限
					currentInfo.setNeedFilter(false);
				}
				if (post.getId() == defaultPostId) {// 该人的默认岗位
					currentInfo.setDefaultPostId(defaultPostId);// 保存到SESSION里，快速获取
					currentInfo.setIndexPage(post.getIndexPage());// 保存到SESSION里，快速获取
					currentUser.getSession().setAttribute("currentInfo", currentInfo);
					response.setStateCode(StateCode.OK);
					response.setData("index.html");// 把该人应该跳转的页面返回到客户端
				}
			}

			msg = "登录成功";
		} catch (UnknownAccountException uae) {
			response.setStateCode(StateCode.LOGIN_FAIL);
			msg = "用户不存在！";
		} catch (IncorrectCredentialsException ice) {
			response.setStateCode(StateCode.LOGIN_FAIL);
			msg = "用户名或密码错误！";
		} catch (LockedAccountException lae) {
			response.setStateCode(StateCode.LOGIN_FAIL);
			msg = "用户为锁定状态！";
		} catch (AuthenticationException ae) {
			response.setStateCode(StateCode.LOGIN_FAIL);
			ae.printStackTrace();
			msg = "登录失败！";
		} catch (AccountNoActiceException ana) {
			response.setStateCode(StateCode.LOGIN_FAIL);
			msg = "该帐号未激活！";
		} catch (Exception e) {
			response.setStateCode(StateCode.LOGIN_FAIL);
			e.printStackTrace();
			msg = "平台繁忙！";
		}
	}
	response.setMessage(msg);
	currentUser.getSession().removeAttribute(Constants.KAPTCHA_SESSION_KEY);
	return response;
}

Source File: LoginController.java From jee-universal-bms with Apache License 2.0

4 votes

@RequestMapping(value = "v1/api0/security/login", method = RequestMethod.POST)
@ResponseBody
public JsonResult login(@RequestParam() String username,
                        @RequestParam() String password,
                        String verifyCode,
                        HttpServletRequest request) {

    JsonResult jsonResult = new JsonResult(ResultCode.SUCCESS_CODE, ResultCode.SUCCESS_MSG);
    try {
        if(StringUtils.isBlank(username)) {
            return new JsonResult(ResultCode.PARAM_ERROR_CODE, "请输入用户名");
        }
        if(StringUtils.isBlank(password)) {
            return new JsonResult(ResultCode.PARAM_ERROR_CODE, "请输入密码");
        }

        User user = userService.getByUsername(username);
        if(user == null) {
            return new JsonResult(ResultCode.PARAM_ERROR_CODE, "用户不存在");
        }
        if(user.getStatus() != 1) {
            return new JsonResult(ResultCode.PARAM_ERROR_CODE, "该用户已被禁用");
        }
        String salt = user.getSalt();
        password = Utils.encryptPassword(salt, password);
        if (!password.equals(user.getPassword())) {
            return new JsonResult(ResultCode.PARAM_ERROR_CODE, "用户名或密码错误");
        }
        Subject subject = SecurityUtils.getSubject();
        subject.login(new UsernamePasswordToken(username, password));
        if (subject.isAuthenticated()) {
            jsonResult.setMsg("登录成功");
        } else {
            return new JsonResult(ResultCode.PARAM_ERROR_CODE, "用户名或密码错误");
        }
    } catch (AuthenticationException e){
        jsonResult =  new JsonResult(ResultCode.PARAM_ERROR_CODE, "用户名或密码错误");
        e.printStackTrace();
    }
    return jsonResult;
}

Java Code Examples for org.apache.shiro.authc.AuthenticationException#printStackTrace()