當前位置：首頁 > 前端技术 > javascript >内容正文

javascript

SpringMVC整合Shiro

發布時間：2023/12/4 javascript 27 豆豆

生活随笔收集整理的這篇文章主要介紹了 SpringMVC整合Shiro 小編覺得挺不錯的,現在分享給大家,幫大家做個參考.

這里用的是SpringMVC-3.2.4和Shiro-1.2.2，示例代碼如下

首先是web.xml

<?xml version="1.0" encoding="UTF-8"?> <web-app version="2.5"xmlns="http://java.sun.com/xml/ns/javaee"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="http://java.sun.com/xml/ns/javaeehttp://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"><context-param><param-name>contextConfigLocation</param-name><param-value>classpath:applicationContext.xml</param-value></context-param><listener><listener-class>org.springframework.web.util.IntrospectorCleanupListener</listener-class></listener><listener><listener-class>org.springframework.web.context.ContextLoaderListener</listener-class></listener><filter><filter-name>SpringEncodingFilter</filter-name><filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class><init-param><param-name>encoding</param-name><param-value>UTF-8</param-value></init-param><init-param><param-name>forceEncoding</param-name><param-value>true</param-value></init-param></filter><filter-mapping><filter-name>SpringEncodingFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping><filter><filter-name>shiroFilter</filter-name><filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class><init-param><param-name>targetFilterLifecycle</param-name><param-value>true</param-value></init-param></filter><filter-mapping><filter-name>shiroFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping><servlet><servlet-name>SpringMVC</servlet-name><servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class><init-param><param-name>contextConfigLocation</param-name><param-value>classpath:applicationContext.xml</param-value></init-param></servlet><servlet-mapping><servlet-name>SpringMVC</servlet-name><url-pattern>/</url-pattern></servlet-mapping><error-page><error-code>405</error-code><location>/WEB-INF/405.html</location></error-page><error-page><error-code>404</error-code><location>/WEB-INF/404.jsp</location></error-page><error-page><error-code>500</error-code><location>/WEB-INF/500.jsp</location></error-page><error-page><exception-type>java.lang.Throwable</exception-type><location>/WEB-INF/500.jsp</location></error-page> </web-app>

下面是用于顯示Request method 'GET' not supported的//WebRoot//WEB-INF//405.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html><head><title>405.html</title><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><font color="blue">Request method 'GET' not supported<br/><br/>The specified HTTP method is not allowed for the requested resource.</font></body> </html> 下面是允許匿名用戶訪問的//WebRoot//login.jsp

<%@ page language="java" pageEncoding="UTF-8"%><script type="text/javascript">  </script><div style="color:red; font-size:22px;">${message_login}</div><form action="<%=request.getContextPath()%>/mydemo/login" method="POST">姓名：<input type="text" name="username"/><br/>密碼：<input type="text" name="password"/><br/>驗證：<input type="text" name="verifyCode"/><img id="verifyCodeImage" οnclick="reloadVerifyCode()" src="<%=request.getContextPath()%>/mydemo/getVerifyCodeImage"/><br/><input type="submit" value="確認"/> </form>

下面是用戶登錄后顯示的//WebRoot//main.jsp

<%@ page language="java" pageEncoding="UTF-8"%> 普通用戶可訪問<a href="<%=request.getContextPath()%>/mydemo/getUserInfo" target="_blank">用戶信息頁面</a> <br/> <br/> 管理員可訪問<a href="<%=request.getContextPath()%>/admin/listUser.jsp" target="_blank">用戶列表頁面</a> <br/> <br/> <a href="<%=request.getContextPath()%>/mydemo/logout" target="_blank">Logout</a> 下面是只有管理員才允許訪問的//WebRoot//admin//listUser.jsp
<%@ page language="java" pageEncoding="UTF-8"%> This is listUser.jsp <br/> <br/> <a href="<%=request.getContextPath()%>/mydemo/logout" target="_blank">Logout</a>

下面是普通的登錄用戶所允許訪問的//WebRoot//user//info.jsp

<%@ page language="java" pageEncoding="UTF-8"%> 當前登錄的用戶為${currUser} <br/> <br/> <a href="<%=request.getContextPath()%>/mydemo/logout" target="_blank">Logout</a>
下面是//src//log4j.properties
#use Root for GobalConfig log4j.rootLogger=DEBUG,CONSOLElog4j.logger.java.sql=DEBUG log4j.logger.org.apache.shiro=DEBUG log4j.logger.org.apache.commons=DEBUG log4j.logger.org.springframework=DEBUG#use ConsoleAppender for ConsoleOut log4j.appender.CONSOLE=org.apache.log4j.ConsoleAppender log4j.appender.CONSOLE.Threshold=DEBUG log4j.appender.CONSOLE.Target=System.out log4j.appender.CONSOLE.layout=org.apache.log4j.PatternLayout log4j.appender.CONSOLE.layout.ConversionPattern=[%d{yyyyMMdd HH:mm:ss}][%t][%C{1}.%M]%m%n
下面是//src//applicationContext.xml
<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xmlns:mvc="http://www.springframework.org/schema/mvc"xmlns:context="http://www.springframework.org/schema/context"xsi:schemaLocation="http://www.springframework.org/schema/beanshttp://www.springframework.org/schema/beans/spring-beans-3.2.xsdhttp://www.springframework.org/schema/mvchttp://www.springframework.org/schema/mvc/spring-mvc-3.2.xsdhttp://www.springframework.org/schema/contexthttp://www.springframework.org/schema/context/spring-context-3.2.xsd"><context:component-scan base-package="com.jadyer"/><mvc:annotation-driven/><bean class="org.springframework.web.servlet.view.InternalResourceViewResolver"><property name="prefix" value="/"/><property name="suffix" value=".jsp"/></bean><mvc:view-controller path="/" view-name="forward:/login.jsp"/><mvc:resources mapping="/js/**" location="/resources/js/"/><mvc:resources mapping="/css/**" location="/resources/css/"/><mvc:resources mapping="/WEB-INF/**" location="/WEB-INF/"/><bean class="org.springframework.web.servlet.handler.SimpleMappingExceptionResolver"><property name="exceptionMappings"><props><prop key="org.springframework.web.multipart.MaxUploadSizeExceededException">WEB-INF/error_fileupload</prop><prop key="java.lang.Throwable">WEB-INF/500</prop></props></property></bean><bean id="myRealm" class="com.jadyer.realm.MyRealm"/><bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager"><property name="realm" ref="myRealm"/></bean><bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean"><property name="securityManager" ref="securityManager"/><property name="loginUrl" value="/"/><property name="unauthorizedUrl" value="/"/><property name="filterChainDefinitions"><value>/mydemo/login=anon/mydemo/getVerifyCodeImage=anon/main**=authc/user/info**=authc/admin/listUser**=authc,perms[admin:manage]</value></property></bean><bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor"/> </beans>

下面是自定義的Realm類----MyRealm.java

package com.jadyer.realm;import org.apache.commons.lang3.builder.ReflectionToStringBuilder; import org.apache.commons.lang3.builder.ToStringStyle; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.AuthenticationInfo; import org.apache.shiro.authc.AuthenticationToken; import org.apache.shiro.authc.SimpleAuthenticationInfo; import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.authz.AuthorizationInfo; import org.apache.shiro.authz.SimpleAuthorizationInfo; import org.apache.shiro.realm.AuthorizingRealm; import org.apache.shiro.session.Session; import org.apache.shiro.subject.PrincipalCollection; import org.apache.shiro.subject.Subject;/*** 自定義的指定Shiro驗證用戶登錄的類* @see 在本例中定義了2個用戶:jadyer和玄玉,jadyer具有admin角色和admin:manage權限,玄玉不具有任何角色和權限* @create Sep 29, 2013 3:15:31 PM* @author 玄玉<http://blog.csdn.net/jadyer>*/ public class MyRealm extends AuthorizingRealm {/*** 為當前登錄的Subject授予角色和權限* @see 經測試:本例中該方法的調用時機為需授權資源被訪問時* @see 經測試:并且每次訪問需授權資源時都會執行該方法中的邏輯,這表明本例中默認并未啟用AuthorizationCache* @see 個人感覺若使用了Spring3.1開始提供的ConcurrentMapCache支持,則可靈活決定是否啟用AuthorizationCache* @see 比如說這里從數據庫獲取權限信息時,先去訪問Spring3.1提供的緩存,而不使用Shior提供的AuthorizationCache*/@Overrideprotected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals){//獲取當前登錄的用戶名,等價于(String)principals.fromRealm(this.getName()).iterator().next()String currentUsername = (String)super.getAvailablePrincipal(principals); // List<String> roleList = new ArrayList<String>(); // List<String> permissionList = new ArrayList<String>(); // //從數據庫中獲取當前登錄用戶的詳細信息 // User user = userService.getByUsername(currentUsername); // if(null != user){ // //實體類User中包含有用戶角色的實體類信息 // if(null!=user.getRoles() && user.getRoles().size()>0){ // //獲取當前登錄用戶的角色 // for(Role role : user.getRoles()){ // roleList.add(role.getName()); // //實體類Role中包含有角色權限的實體類信息 // if(null!=role.getPermissions() && role.getPermissions().size()>0){ // //獲取權限 // for(Permission pmss : role.getPermissions()){ // if(!StringUtils.isEmpty(pmss.getPermission())){ // permissionList.add(pmss.getPermission()); // } // } // } // } // } // }else{ // throw new AuthorizationException(); // } // //為當前用戶設置角色和權限 // SimpleAuthorizationInfo simpleAuthorInfo = new SimpleAuthorizationInfo(); // simpleAuthorInfo.addRoles(roleList); // simpleAuthorInfo.addStringPermissions(permissionList);SimpleAuthorizationInfo simpleAuthorInfo = new SimpleAuthorizationInfo();//實際中可能會像上面注釋的那樣從數據庫取得if(null!=currentUsername && "jadyer".equals(currentUsername)){//添加一個角色,不是配置意義上的添加,而是證明該用戶擁有admin角色 simpleAuthorInfo.addRole("admin");//添加權限simpleAuthorInfo.addStringPermission("admin:manage");System.out.println("已為用戶[jadyer]賦予了[admin]角色和[admin:manage]權限");return simpleAuthorInfo;}else if(null!=currentUsername && "玄玉".equals(currentUsername)){System.out.println("當前用戶[玄玉]無授權");return simpleAuthorInfo;}//若該方法什么都不做直接返回null的話,就會導致任何用戶訪問/admin/listUser.jsp時都會自動跳轉到unauthorizedUrl指定的地址//詳見applicationContext.xml中的<bean id="shiroFilter">的配置return null;}/*** 驗證當前登錄的Subject* @see 經測試:本例中該方法的調用時機為LoginController.login()方法中執行Subject.login()時*/@Overrideprotected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException {//獲取基于用戶名和密碼的令牌//實際上這個authcToken是從LoginController里面currentUser.login(token)傳過來的//兩個token的引用都是一樣的,本例中是org.apache.shiro.authc.UsernamePasswordToken@33799a1eUsernamePasswordToken token = (UsernamePasswordToken)authcToken;System.out.println("驗證當前Subject時獲取到token為" + ReflectionToStringBuilder.toString(token, ToStringStyle.MULTI_LINE_STYLE)); // User user = userService.getByUsername(token.getUsername()); // if(null != user){ // AuthenticationInfo authcInfo = new SimpleAuthenticationInfo(user.getUsername(), user.getPassword(), user.getNickname()); // this.setSession("currentUser", user); // return authcInfo; // }else{ // return null; // }//此處無需比對,比對的邏輯Shiro會做,我們只需返回一個和令牌相關的正確的驗證信息//說白了就是第一個參數填登錄用戶名,第二個參數填合法的登錄密碼(可以是從數據庫中取到的,本例中為了演示就硬編碼了)//這樣一來,在隨后的登錄頁面上就只有這里指定的用戶和密碼才能通過驗證if("jadyer".equals(token.getUsername())){AuthenticationInfo authcInfo = new SimpleAuthenticationInfo("jadyer", "jadyer", this.getName());this.setSession("currentUser", "jadyer");return authcInfo;}else if("玄玉".equals(token.getUsername())){AuthenticationInfo authcInfo = new SimpleAuthenticationInfo("玄玉", "xuanyu", this.getName());this.setSession("currentUser", "玄玉");return authcInfo;}//沒有返回登錄用戶名對應的SimpleAuthenticationInfo對象時,就會在LoginController中拋出UnknownAccountException異常return null;}/*** 將一些數據放到ShiroSession中,以便于其它地方使用* @see 比如Controller,使用時直接用HttpSession.getAttribute(key)就可以取到*/private void setSession(Object key, Object value){Subject currentUser = SecurityUtils.getSubject();if(null != currentUser){Session session = currentUser.getSession();System.out.println("Session默認超時時間為[" + session.getTimeout() + "]毫秒");if(null != session){session.setAttribute(key, value);}}} } 下面是處理用戶登錄的LoginController.java
package com.jadyer.controller;import java.awt.Color; import java.awt.image.BufferedImage; import java.io.IOException;import javax.imageio.ImageIO; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse;import org.apache.commons.lang3.StringUtils; import org.apache.commons.lang3.builder.ReflectionToStringBuilder; import org.apache.commons.lang3.builder.ToStringStyle; import org.apache.shiro.SecurityUtils; import org.apache.shiro.authc.AuthenticationException; import org.apache.shiro.authc.ExcessiveAttemptsException; import org.apache.shiro.authc.IncorrectCredentialsException; import org.apache.shiro.authc.LockedAccountException; import org.apache.shiro.authc.UnknownAccountException; import org.apache.shiro.authc.UsernamePasswordToken; import org.apache.shiro.subject.Subject; import org.apache.shiro.web.util.WebUtils; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.servlet.view.InternalResourceViewResolver;import com.jadyer.util.VerifyCodeUtil;/*** 本例中用到的jar文件如下* @see aopalliance.jar* @see commons-lang3-3.1.jar* @see commons-logging-1.1.2.jar* @see log4j-1.2.17.jar* @see shiro-all-1.2.2.jar* @see slf4j-api-1.7.5.jar* @see slf4j-log4j12-1.7.5.jar* @see spring-aop-3.2.4.RELEASE.jar* @see spring-beans-3.2.4.RELEASE.jar* @see spring-context-3.2.4.RELEASE.jar* @see spring-core-3.2.4.RELEASE.jar* @see spring-expression-3.2.4.RELEASE.jar* @see spring-jdbc-3.2.4.RELEASE.jar* @see spring-oxm-3.2.4.RELEASE.jar* @see spring-tx-3.2.4.RELEASE.jar* @see spring-web-3.2.4.RELEASE.jar* @see spring-webmvc-3.2.4.RELEASE.jar* @create Sep 30, 2013 11:10:06 PM* @author 玄玉<http://blog.csdn.net/jadyer>*/ @Controller @RequestMapping("mydemo") public class LoginController {/*** 獲取驗證碼圖片和文本(驗證碼文本會保存在HttpSession中)*/@RequestMapping("/getVerifyCodeImage")public void getVerifyCodeImage(HttpServletRequest request, HttpServletResponse response) throws IOException {//設置頁面不緩存response.setHeader("Pragma", "no-cache");response.setHeader("Cache-Control", "no-cache");response.setDateHeader("Expires", 0);String verifyCode = VerifyCodeUtil.generateTextCode(VerifyCodeUtil.TYPE_NUM_ONLY, 4, null);//將驗證碼放到HttpSession里面request.getSession().setAttribute("verifyCode", verifyCode);System.out.println("本次生成的驗證碼為[" + verifyCode + "],已存放到HttpSession中");//設置輸出的內容的類型為JPEG圖像response.setContentType("image/jpeg");BufferedImage bufferedImage = VerifyCodeUtil.generateImageCode(verifyCode, 90, 30, 3, true, Color.WHITE, Color.BLACK, null);//寫給瀏覽器ImageIO.write(bufferedImage, "JPEG", response.getOutputStream());}/*** 用戶登錄*/@RequestMapping(value="/login", method=RequestMethod.POST)public String login(HttpServletRequest request){String resultPageURL = InternalResourceViewResolver.FORWARD_URL_PREFIX + "/";String username = request.getParameter("username");String password = request.getParameter("password");//獲取HttpSession中的驗證碼String verifyCode = (String)request.getSession().getAttribute("verifyCode");//獲取用戶請求表單中輸入的驗證碼String submitCode = WebUtils.getCleanParam(request, "verifyCode");System.out.println("用戶[" + username + "]登錄時輸入的驗證碼為[" + submitCode + "],HttpSession中的驗證碼為[" + verifyCode + "]");if (StringUtils.isEmpty(submitCode) || !StringUtils.equals(verifyCode, submitCode.toLowerCase())){request.setAttribute("message_login", "驗證碼不正確");return resultPageURL;}UsernamePasswordToken token = new UsernamePasswordToken(username, password);token.setRememberMe(true);System.out.println("為了驗證登錄用戶而封裝的token為" + ReflectionToStringBuilder.toString(token, ToStringStyle.MULTI_LINE_STYLE));//獲取當前的SubjectSubject currentUser = SecurityUtils.getSubject();try {//在調用了login方法后,SecurityManager會收到AuthenticationToken,并將其發送給已配置的Realm執行必須的認證檢查//每個Realm都能在必要時對提交的AuthenticationTokens作出反應//所以這一步在調用login(token)方法時,它會走到MyRealm.doGetAuthenticationInfo()方法中,具體驗證方式詳見此方法System.out.println("對用戶[" + username + "]進行登錄驗證..驗證開始");currentUser.login(token);System.out.println("對用戶[" + username + "]進行登錄驗證..驗證通過");resultPageURL = "main";}catch(UnknownAccountException uae){System.out.println("對用戶[" + username + "]進行登錄驗證..驗證未通過,未知賬戶");request.setAttribute("message_login", "未知賬戶");}catch(IncorrectCredentialsException ice){System.out.println("對用戶[" + username + "]進行登錄驗證..驗證未通過,錯誤的憑證");request.setAttribute("message_login", "密碼不正確");}catch(LockedAccountException lae){System.out.println("對用戶[" + username + "]進行登錄驗證..驗證未通過,賬戶已鎖定");request.setAttribute("message_login", "賬戶已鎖定");}catch(ExcessiveAttemptsException eae){System.out.println("對用戶[" + username + "]進行登錄驗證..驗證未通過,錯誤次數過多");request.setAttribute("message_login", "用戶名或密碼錯誤次數過多");}catch(AuthenticationException ae){//通過處理Shiro的運行時AuthenticationException就可以控制用戶登錄失敗或密碼錯誤時的情景System.out.println("對用戶[" + username + "]進行登錄驗證..驗證未通過,堆棧軌跡如下");ae.printStackTrace();request.setAttribute("message_login", "用戶名或密碼不正確");}//驗證是否登錄成功if(currentUser.isAuthenticated()){System.out.println("用戶[" + username + "]登錄認證通過(這里可以進行一些認證通過后的一些系統參數初始化操作)");}else{token.clear();}return resultPageURL;}/*** 用戶登出*/@RequestMapping("/logout")public String logout(HttpServletRequest request){SecurityUtils.getSubject().logout();return InternalResourceViewResolver.REDIRECT_URL_PREFIX + "/";} } 下面是處理普通用戶訪問的UserController.java
package com.jadyer.controller;import javax.servlet.http.HttpServletRequest;import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping;@Controller @RequestMapping("mydemo") public class UserController {@RequestMapping(value="/getUserInfo")public String getUserInfo(HttpServletRequest request){String currentUser = (String)request.getSession().getAttribute("currentUser");System.out.println("當前登錄的用戶為[" + currentUser + "]");request.setAttribute("currUser", currentUser);return "/user/info";} } 最后是用于生成登錄驗證碼的VerifyCodeUtil.java
package com.jadyer.util;import java.awt.Color; import java.awt.Font; import java.awt.Graphics; import java.awt.image.BufferedImage; import java.util.Random;/*** 驗證碼生成器* @see --------------------------------------------------------------------------------------------------------------* @see 可生成數字、大寫、小寫字母及三者混合類型的驗證碼* @see 支持自定義驗證碼字符數量,支持自定義驗證碼圖片的大小,支持自定義需排除的特殊字符,支持自定義干擾線的數量,支持自定義驗證碼圖文顏色* @see --------------------------------------------------------------------------------------------------------------* @see 另外,給Shiro加入驗證碼有多種方式,也可以通過繼承修改FormAuthenticationFilter類,通過Shiro去驗證驗證碼* @see 而這里既然使用了SpringMVC,也為了簡化操作,就使用此工具生成驗證碼,并在Controller中處理驗證碼的校驗* @see --------------------------------------------------------------------------------------------------------------* @create Sep 29, 2013 4:23:13 PM* @author 玄玉<http://blog.csdn.net/jadyer>*/ public class VerifyCodeUtil {/*** 驗證碼類型為僅數字,即0~9*/public static final int TYPE_NUM_ONLY = 0;/*** 驗證碼類型為僅字母,即大小寫字母混合*/public static final int TYPE_LETTER_ONLY = 1;/*** 驗證碼類型為數字和大小寫字母混合*/public static final int TYPE_ALL_MIXED = 2;/*** 驗證碼類型為數字和大寫字母混合*/public static final int TYPE_NUM_UPPER = 3;/*** 驗證碼類型為數字和小寫字母混合*/public static final int TYPE_NUM_LOWER = 4;/*** 驗證碼類型為僅大寫字母*/public static final int TYPE_UPPER_ONLY = 5;/*** 驗證碼類型為僅小寫字母*/public static final int TYPE_LOWER_ONLY = 6;private VerifyCodeUtil(){}/*** 生成隨機顏色*/private static Color generateRandomColor() {Random random = new Random();return new Color(random.nextInt(255), random.nextInt(255), random.nextInt(255));}/*** 生成圖片驗證碼* @param type 驗證碼類型,參見本類的靜態屬性* @param length 驗證碼字符長度,要求大于0的整數* @param excludeString 需排除的特殊字符* @param width 圖片寬度(注意此寬度若過小,容易造成驗證碼文本顯示不全,如4個字符的文本可使用85到90的寬度)* @param height 圖片高度* @param interLine 圖片中干擾線的條數* @param randomLocation 每個字符的高低位置是否隨機* @param backColor 圖片顏色,若為null則表示采用隨機顏色* @param foreColor 字體顏色,若為null則表示采用隨機顏色* @param lineColor 干擾線顏色,若為null則表示采用隨機顏色* @return 圖片緩存對象*/public static BufferedImage generateImageCode(int type, int length, String excludeString, int width, int height, int interLine, boolean randomLocation, Color backColor, Color foreColor, Color lineColor){String textCode = generateTextCode(type, length, excludeString);return generateImageCode(textCode, width, height, interLine, randomLocation, backColor, foreColor, lineColor);}/*** 生成驗證碼字符串* @param type 驗證碼類型,參見本類的靜態屬性* @param length 驗證碼長度,要求大于0的整數* @param excludeString 需排除的特殊字符（無需排除則為null）* @return 驗證碼字符串*/public static String generateTextCode(int type, int length, String excludeString){if(length <= 0){return "";}StringBuffer verifyCode = new StringBuffer();int i = 0;Random random = new Random();switch(type){case TYPE_NUM_ONLY:while(i < length){int t = random.nextInt(10);//排除特殊字符if(null==excludeString || excludeString.indexOf(t+"")<0) {verifyCode.append(t);i++;}}break;case TYPE_LETTER_ONLY:while(i < length){int t = random.nextInt(123);if((t>=97 || (t>=65&&t<=90)) && (null==excludeString||excludeString.indexOf((char)t)<0)){verifyCode.append((char)t);i++;}}break;case TYPE_ALL_MIXED:while(i < length){int t = random.nextInt(123);if((t>=97 || (t>=65&&t<=90) || (t>=48&&t<=57)) && (null==excludeString||excludeString.indexOf((char)t)<0)){verifyCode.append((char)t);i++;}}break;case TYPE_NUM_UPPER:while(i < length){int t = random.nextInt(91);if((t>=65 || (t>=48&&t<=57)) && (null==excludeString || excludeString.indexOf((char)t)<0)){verifyCode.append((char)t);i++;}}break;case TYPE_NUM_LOWER:while(i < length){int t = random.nextInt(123);if((t>=97 || (t>=48&&t<=57)) && (null==excludeString || excludeString.indexOf((char)t)<0)){verifyCode.append((char)t);i++;}}break;case TYPE_UPPER_ONLY:while(i < length){int t = random.nextInt(91);if((t >= 65) && (null==excludeString||excludeString.indexOf((char)t)<0)){verifyCode.append((char)t);i++;}}break;case TYPE_LOWER_ONLY:while(i < length){int t = random.nextInt(123);if((t>=97) && (null==excludeString||excludeString.indexOf((char)t)<0)){verifyCode.append((char)t);i++;}}break;}return verifyCode.toString();}/*** 已有驗證碼,生成驗證碼圖片* @param textCode 文本驗證碼* @param width 圖片寬度(注意此寬度若過小,容易造成驗證碼文本顯示不全,如4個字符的文本可使用85到90的寬度)* @param height 圖片高度* @param interLine 圖片中干擾線的條數* @param randomLocation 每個字符的高低位置是否隨機* @param backColor 圖片顏色,若為null則表示采用隨機顏色* @param foreColor 字體顏色,若為null則表示采用隨機顏色* @param lineColor 干擾線顏色,若為null則表示采用隨機顏色* @return 圖片緩存對象*/public static BufferedImage generateImageCode(String textCode, int width, int height, int interLine, boolean randomLocation, Color backColor, Color foreColor, Color lineColor){//創建內存圖像BufferedImage bufferedImage = new BufferedImage(width, height, BufferedImage.TYPE_INT_RGB);//獲取圖形上下文Graphics graphics = bufferedImage.getGraphics();//畫背景圖graphics.setColor(null==backColor ? generateRandomColor() : backColor);graphics.fillRect(0, 0, width, height);//畫干擾線Random random = new Random();if(interLine > 0){int x = 0, y = 0, x1 = width, y1 = 0;for(int i=0; i<interLine; i++){graphics.setColor(null==lineColor ? generateRandomColor() : lineColor);y = random.nextInt(height);y1 = random.nextInt(height);graphics.drawLine(x, y, x1, y1);}}//字體大小為圖片高度的80%int fsize = (int)(height * 0.8);int fx = height - fsize;int fy = fsize;//設定字體graphics.setFont(new Font("Default", Font.PLAIN, fsize));//寫驗證碼字符for(int i=0; i<textCode.length(); i++){fy = randomLocation ? (int)((Math.random()*0.3+0.6)*height) : fy;graphics.setColor(null==foreColor ? generateRandomColor() : foreColor);//將驗證碼字符顯示到圖象中graphics.drawString(textCode.charAt(i)+"", fx, fy);fx += fsize * 0.9;}graphics.dispose();return bufferedImage;} }

總結

以上是生活随笔為你收集整理的SpringMVC整合Shiro的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。

上一篇： Sql 存储过程加游标结合的使用
下一篇： Spring MVC 中 Handler