<dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-core</artifactId>
            <version>1.2.3</version>
        </dependency>
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-web</artifactId>
            <version>1.2.3</version>
        </dependency>
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-spring</artifactId>
            <version>1.2.3</version>
        </dependency>
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-ehcache</artifactId>
            <version>1.2.3</version>
        </dependency>
        <dependency>
            <groupId>org.apache.shiro</groupId>
            <artifactId>shiro-quartz</artifactId>
            <version>1.2.3</version>
        </dependency>

//用户登陆和退出
@Testpublic voidtestLoginAndLogout() {//创建securityManager工厂，通过ini配置文件创建securityManager工厂
        Factory<SecurityManager> factory = newIniSecurityManagerFactory("classpath:shiro-first.ini");//创建SecurityManager
        SecurityManager securityManager =factory.getInstance();//将securityManager设置当前的运行环境中
SecurityUtils.setSecurityManager(securityManager);//从SecurityUtils里边创建一个subject
        Subject subject =SecurityUtils.getSubject();//在认证提交前准备token（令牌）
        UsernamePasswordToken token = new UsernamePasswordToken("zhangsan", "666666666666");try{//执行认证提交
subject.login(token);

        }catch(AuthenticationException e) {//TODO Auto-generated catch block
e.printStackTrace();

        }//是否认证通过
        boolean isAuthenticated =subject.isAuthenticated();

        

        System.out.println("是否认证通过：" +isAuthenticated);//退出操作
subject.logout();//是否认证通过
        isAuthenticated =subject.isAuthenticated();

        

        System.out.println("是否认证通过：" +isAuthenticated);

        

        



    }

packagecn.itcast.shiro.realm;importjava.util.ArrayList;importjava.util.List;importorg.apache.shiro.authc.AuthenticationException;importorg.apache.shiro.authc.AuthenticationInfo;importorg.apache.shiro.authc.AuthenticationToken;importorg.apache.shiro.authc.SimpleAuthenticationInfo;importorg.apache.shiro.authz.AuthorizationInfo;importorg.apache.shiro.authz.SimpleAuthorizationInfo;importorg.apache.shiro.realm.AuthorizingRealm;importorg.apache.shiro.subject.PrincipalCollection;/*** 

 * <p>

 * Title: CustomRealm

 * </p>

 * <p>

 * Description:自定义realm

 * </p>

 * <p>

 * Company: www.itcast.com

 * </p>

 * 

 *@author传智.燕青

 * @date 2015-3-23下午4:54:47

 *@version1.0*/
public class CustomRealm extendsAuthorizingRealm {//设置realm的名称
@Overridepublic voidsetName(String name) {super.setName("customRealm");

    }//用于认证
@OverrideprotectedAuthenticationInfo doGetAuthenticationInfo(

            AuthenticationToken token)throwsAuthenticationException {//token是用户输入的//第一步从token中取出身份信息
        String userCode =(String) token.getPrincipal();//第二步：根据用户输入的userCode从数据库查询//....//如果查询不到返回null//数据库中用户账号是zhangsansan
        /*if(!userCode.equals("zhangsansan")){//

            return null;

        }*/
        
        
        //模拟从数据库查询到密码
        String password = "666666666666";//如果查询到返回认证信息AuthenticationInfo
SimpleAuthenticationInfo simpleAuthenticationInfo= newSimpleAuthenticationInfo(

                userCode, password,this.getName());returnsimpleAuthenticationInfo;

    }//用于授权
@OverrideprotectedAuthorizationInfo doGetAuthorizationInfo(

            PrincipalCollection principals) {//从 principals获取主身份信息//将getPrimaryPrincipal方法返回值转为真实身份类型（在上边的doGetAuthenticationInfo认证通过填充到SimpleAuthenticationInfo中身份类型），
        String userCode =(String) principals.getPrimaryPrincipal();//根据身份信息获取权限信息//连接数据库...//模拟从数据库获取到数据
        List<String> permissions = new ArrayList<String>();

        permissions.add("user:create");//用户的创建
        permissions.add("items:add");//商品添加权限//....//查到权限数据，返回授权信息(要包括 上边的permissions)
        SimpleAuthorizationInfo simpleAuthorizationInfo = newSimpleAuthorizationInfo();//将上边查询到授权信息填充到simpleAuthorizationInfo对象中
simpleAuthorizationInfo.addStringPermissions(permissions);returnsimpleAuthorizationInfo;

    }



}