Shiro系列 | 《Shiro开发详细教程》第二章：Shiro身份认证

<dependencies>
    <!--Shiro核心包-->
  <dependency>
    <groupId>org.apache.shiro</groupId>
    <artifactId>shiro-core</artifactId>
    <version>1.4.0</version>
  </dependency>
    <!--junit测试包-->
  <dependency>
    <groupId>junit</groupId>
    <artifactId>junit</artifactId>
    <version>4.12</version>
    <scope>test</scope>
  </dependency>
  <!--日志管理包-->
  <dependency>
    <groupId>commons-logging</groupId>
    <artifactId>commons-logging</artifactId>
    <version>1.2</version>
  </dependency>
  <dependency>
    <groupId>log4j</groupId>
    <artifactId>log4j</artifactId>
    <version>1.2.12</version>
  </dependency>
  <dependency>
    <groupId>org.slf4j</groupId>
    <artifactId>slf4j-api</artifactId>
    <version>1.7.25</version>
  </dependency>
  <dependency>
    <groupId>org.slf4j</groupId>
    <artifactId>slf4j-log4j12</artifactId>
    <version>1.7.25</version>
  </dependency>
</dependencies>

[users]
zhangsan=mima
sunwukong=mima

log4j.rootLogger=INFO, stdout
log4j.appender.stdout=org.apache.log4j.ConsoleAppender
log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
log4j.appender.stdout.layout.ConversionPattern=%d %p [%c] - %m %n
# General Apache libraries
log4j.logger.org.apache=WARN
# Spring
log4j.logger.org.springframework=WARN
# Default Shiro logging
log4j.logger.org.apache.shiro=TRACE
# Disable verbose logging
log4j.logger.org.apache.shiro.util.ThreadContext=WARN
log4j.logger.org.apache.shiro.cache.ehcache.EhCache=WARN

/**
 * @Auther: likang
 * @Description: shiro登录、退出功能演示
 */
public class ShiroTest {

    public static final Logger logger = LoggerFactory.getLogger(ShiroTest.class);

    public static void main(String[] args) {
        //1:获取SecurityManager工厂，此处使用Ini配置文件初始化SecurityManager
        Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
        //2:得到SecurityManager实例 并绑定给SecurityUtils
        SecurityManager securityManager = factory.getInstance();
        SecurityUtils.setSecurityManager(securityManager);
        //3:得到Subject及创建用户名/密码身份验证Token（即用户身份/凭证）
        Subject subject = SecurityUtils.getSubject();
        //4:登录，即身份验证
        if (!subject.isAuthenticated()){
            UsernamePasswordToken token = new UsernamePasswordToken("zhangsan", "mima2");
           try {
                subject.login(token);
                logger.info("登录成功");
            } catch (UnknownAccountException e) {
            //5:身份验证失败
                logger.info("用户名错误或者不存在");
            } catch (IncorrectCredentialsException e){
                logger.info("密码不匹配");
            } catch (LockedAccountException e){
                logger.info("用户已被锁定，请联系管理员");
            } catch (DisabledAccountException e){
                logger.info("用户已被禁用，请联系管理员");
            } catch (ExcessiveAttemptsException e){
                logger.info("用户登录次数过多");
            } catch (AuthenticationException  e){
                logger.info("用户登录失败，请联系管理员");
            }
        }
        subject.logout();//6:退出
    }
}