org.apache.shiro.authc.credential.HashedCredentialsMatcher Java Examples

/**
 * realm
 *
 * @return
 */
@Bean(name = "authRealm")
public MyAuthorizingRealm myAuthRealm(
        @Qualifier("hashedCredentialsMatcher") HashedCredentialsMatcher matcher
        // CacheManager cacheManager
) {
    log.info("myShiroRealm()");
    MyAuthorizingRealm myAuthorizingRealm = new MyAuthorizingRealm();

    // 设置密码凭证匹配器
    myAuthorizingRealm.setCredentialsMatcher(matcher);

    // 设置缓存管理器
    // myAuthorizingRealm.setCacheManager(cacheManager);

    return myAuthorizingRealm;
}
 

/**
 * 设定密码校验的Hash算法与迭代次数
 */
@PostConstruct
public void initCredentialsMatcher() {
	HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(MD5Util.HASH_ALGORITHM);
	matcher.setHashIterations(MD5Util.HASH_INTERATIONS);
	setCredentialsMatcher(matcher);
}
 

/**
 * 设定Password校验的Hash算法与迭代次数.
 */
@PostConstruct
public void initCredentialsMatcher() {
	HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(UserService.HASH_ALGORITHM);
	matcher.setHashIterations(UserService.HASH_INTERATIONS);

	setCredentialsMatcher(matcher);
}
 

/**
 * 设定Password校验的Hash算法与迭代次数.
 */
@PostConstruct
public void initCredentialsMatcher() {
    HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(
            AccountService.HASH_ALGORITHM);
    matcher.setHashIterations(AccountService.HASH_INTERATIONS);

    setCredentialsMatcher(matcher);
}
 

@Bean(name = "jdbcRealm")
@DependsOn("lifecycleBeanPostProcessor")
public JdbcRealm jdbcRealm() {
    JdbcRealm realm = new JdbcRealm();
    HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
    credentialsMatcher.setHashAlgorithmName(Sha256Hash.ALGORITHM_NAME);
    realm.setCredentialsMatcher(credentialsMatcher);
    realm.setDataSource(dataSource);
    realm.init();
    return realm;
}
 

/**
 * 设定Password校验的Hash算法与迭代次数.
 */
@PostConstruct
public void initCredentialsMatcher() {
	HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(
			UserConstant.HASH_ALGORITHM);
	matcher.setHashIterations(UserConstant.HASH_INTERATIONS);
	setCredentialsMatcher(matcher);
}
 

@Inject
public AuthorizingRealmImpl(final RealmSecurityManager realmSecurityManager,
                            final UserManager userManager,
                            final Map<String, UserManager> userManagerMap)
{
  this.realmSecurityManager = realmSecurityManager;
  this.userManager = userManager;
  this.userManagerMap = userManagerMap;
  HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
  credentialsMatcher.setHashAlgorithmName(Sha1Hash.ALGORITHM_NAME);
  setCredentialsMatcher(credentialsMatcher);
  setName(NAME);
  setAuthenticationCachingEnabled(false); // we authz only, no authc done by this realm
  setAuthorizationCachingEnabled(true);
}
 

/**
 * 设定Password校验的Hash算法与迭代次数.
 */
@PostConstruct
public void initCredentialsMatcher() {
	HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(AccountService.HASH_ALGORITHM);
	matcher.setHashIterations(AccountService.HASH_INTERATIONS);

	setCredentialsMatcher(matcher);
}
 

/**
 * 设定密码校验的Hash算法与迭代次数
 */
@PostConstruct
public void initCredentialsMatcher() {
	HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(SystemService.HASH_ALGORITHM);
	matcher.setHashIterations(SystemService.HASH_INTERATIONS);
	setCredentialsMatcher(matcher);
}
 

@Bean(name = "hashedCredentialsMatcher")
public HashedCredentialsMatcher hashedCredentialsMatcher() {
	HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
	credentialsMatcher.setHashAlgorithmName("MD5");
	credentialsMatcher.setHashIterations(2);
	credentialsMatcher.setStoredCredentialsHexEncoded(true);
	return credentialsMatcher;
}
 

/**
 * 重写shiro的密码验证，让shiro用我自己的验证.
 */
@PostConstruct
public void initCredentialsMatcher() {
    HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(Constants.HASH_ALGORITHM);
    matcher.setHashIterations(Constants.HASH_INTERATIONS);
    setCredentialsMatcher(matcher);
}
 

/**
 * HashCredentialsMatcher,对密码进行编码
 */
@Bean(name = "hashCredentialsMatcher")
public HashedCredentialsMatcher hashedCredentialsMatcher(){
    HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher();
    credentialsMatcher.setHashAlgorithmName("MD5");
    credentialsMatcher.setHashIterations(2); //散列两次
    credentialsMatcher.setStoredCredentialsHexEncoded(true);
    return credentialsMatcher;
}
 

/**
 * realm
 * 
 * @return
 */
@Bean(name = "shiroRealm")
public ShiroRealm myAuthRealm(
        @Qualifier("hashedCredentialsMatcher") HashedCredentialsMatcher matcher
       ) {
	ShiroRealm shiroRealm = new ShiroRealm();
    // 设置密码凭证匹配器
	shiroRealm.setCredentialsMatcher(matcher); // myShiroRealm.setCredentialsMatcher(hashedCredentialsMatcher());

    return shiroRealm;
}
 

/**
 * 设定Password校验的Hash算法与迭代次数.
 */
@PostConstruct
public void initCredentialsMatcher() {
    HashedCredentialsMatcher matcher = new HashedCredentialsMatcher(Constants.HASH_ALGORITHM);
    matcher.setHashIterations(Constants.HASH_INTERATIONS);
    setCredentialsMatcher(matcher);
}
 

@Override
public void setCredentialsMatcher(CredentialsMatcher credentialsMatcher) {
	HashedCredentialsMatcher shaCredentialsMatcher = new HashedCredentialsMatcher();
	shaCredentialsMatcher.setHashAlgorithmName(ShiroUtils.hashAlgorithmName);
	shaCredentialsMatcher.setHashIterations(ShiroUtils.hashIterations);
	super.setCredentialsMatcher(shaCredentialsMatcher);
}
 

/**
 * 设置认证加密方式
 */
@Override
public void setCredentialsMatcher(CredentialsMatcher credentialsMatcher) {
    HashedCredentialsMatcher md5CredentialsMatcher = new HashedCredentialsMatcher();
    md5CredentialsMatcher.setHashAlgorithmName(ShiroKit.HASH_ALGORITHM_NAME);
    md5CredentialsMatcher.setHashIterations(ShiroKit.HASH_ITERATIONS);
    super.setCredentialsMatcher(md5CredentialsMatcher);
}
 

public Sha256CredentialsHashingStrategy() {
   HashedCredentialsMatcher hashMatcher = new HashedCredentialsMatcher();
   hashMatcher.setHashAlgorithmName(Sha256Hash.ALGORITHM_NAME);
   hashMatcher.setHashIterations(ITERATIONS);
   hashMatcher.setStoredCredentialsHexEncoded(false);
   credentialsMatcher = hashMatcher;
}
 

@Override
public void setCredentialsMatcher(CredentialsMatcher credentialsMatcher) {
    HashedCredentialsMatcher shaCredentialsMatcher = new HashedCredentialsMatcher();
    shaCredentialsMatcher.setHashAlgorithmName(ShiroKit.HASH_ALGORITHM_NAME);
    shaCredentialsMatcher.setHashIterations(ShiroKit.HASH_ITERATIONS);
    super.setCredentialsMatcher(shaCredentialsMatcher);
}
 

/**
 * 设置认证加密方式
 */
@Override
public void setCredentialsMatcher(CredentialsMatcher credentialsMatcher) {
    HashedCredentialsMatcher md5CredentialsMatcher = new HashedCredentialsMatcher();
    md5CredentialsMatcher.setHashAlgorithmName(ShiroKit.hashAlgorithmName);
    md5CredentialsMatcher.setHashIterations(ShiroKit.hashIterations);
    super.setCredentialsMatcher(md5CredentialsMatcher);
}
 

/**
 * api登录接口，通过账号密码获取token
 */
@RequestMapping("/auth")
public Object auth(@RequestParam("username") String username,
                   @RequestParam("password") String password) {

    //封装请求账号密码为shiro可验证的token
    UsernamePasswordToken usernamePasswordToken = new UsernamePasswordToken(username, password.toCharArray());

    //获取数据库中的账号密码，准备比对
    User user = userMapper.getByAccount(username);

    String credentials = user.getPassword();
    String salt = user.getSalt();
    ByteSource credentialsSalt = new Md5Hash(salt);
    SimpleAuthenticationInfo simpleAuthenticationInfo = new SimpleAuthenticationInfo(
            new ShiroUser(), credentials, credentialsSalt, "");

    //校验用户账号密码
    HashedCredentialsMatcher md5CredentialsMatcher = new HashedCredentialsMatcher();
    md5CredentialsMatcher.setHashAlgorithmName(ShiroKit.hashAlgorithmName);
    md5CredentialsMatcher.setHashIterations(ShiroKit.hashIterations);
    boolean passwordTrueFlag = md5CredentialsMatcher.doCredentialsMatch(
            usernamePasswordToken, simpleAuthenticationInfo);

    if (passwordTrueFlag) {
        HashMap<String, Object> result = new HashMap<>();
        result.put("token", JwtTokenUtil.generateToken(String.valueOf(user.getId())));
        return result;
    } else {
        return new ErrorResponseData(500, "账号密码错误！");
    }
}
 

public SimpleAuthorizingRealm(CacheManager cacheManager, CredentialsMatcher matcher) {
	super(cacheManager, matcher);
	HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();
	hashedCredentialsMatcher.setHashAlgorithmName("SHA-256");
	hashedCredentialsMatcher.setHashIterations(1024);
	// 这一行决定hex还是base64
	hashedCredentialsMatcher.setStoredCredentialsHexEncoded(false);
	// 设置token类型是关键!!!
	setCredentialsMatcher(hashedCredentialsMatcher);
	setAuthenticationTokenClass(UsernamePasswordToken.class);
}
 

/**
 * 设置认证加密方式
 */
@Override
public void setCredentialsMatcher(CredentialsMatcher credentialsMatcher) {
    HashedCredentialsMatcher md5CredentialsMatcher = new HashedCredentialsMatcher();
    md5CredentialsMatcher.setHashAlgorithmName(ShiroKit.hashAlgorithmName);
    md5CredentialsMatcher.setHashIterations(ShiroKit.hashIterations);
    super.setCredentialsMatcher(md5CredentialsMatcher);
}
 

public ShiroDbRealm() {
	setCredentialsMatcher(new HashedCredentialsMatcher("SHA-1"));
}
 

/**
 * 用户名密码登录密码匹配器
 */
@Bean
public HashedCredentialsMatcher hashedCredentialsMatcher() {
    return new RetryLimitHashedCredentialsMatcher("md5");
}
 

public LdapRealm() {
  HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher(HASHING_ALGORITHM);
  setCredentialsMatcher(credentialsMatcher);
}
 

public KnoxLdapRealm() {
  HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher(HASHING_ALGORITHM);
  setCredentialsMatcher(credentialsMatcher);
}
 

public KnoxPamRealm() {
  HashedCredentialsMatcher credentialsMatcher = new HashedCredentialsMatcher(HASHING_ALGORITHM);
  setCredentialsMatcher(credentialsMatcher);
}