Java RequiresRoles类代码示例

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
/**
 * 编辑用户
 *
 * @param userVo
 * @return
 */
@RequiresRoles("admin")
@PostMapping("/edit")
@ResponseBody
public Object edit(@Valid UserVo userVo) {
    List<User> list = userService.selectByLoginName(userVo);
    if (list != null && !list.isEmpty()) {
        return renderError("登录名已存在!");
    }
    // 更新密码
    if (StringUtils.isNotBlank(userVo.getPassword())) {
        User user = userService.selectById(userVo.getId());
        String salt = user.getSalt();
        String pwd = passwordHash.toHex(userVo.getPassword(), salt);
        userVo.setPassword(pwd);
    }
    userService.updateByVo(userVo);
    return renderSuccess("修改成功！");
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
/**
 * Ensures that the calling <code>Subject</code> has the Annotation's specified roles, and if not, throws an
 * <code>AuthorizingException</code> indicating that access is denied.
 *
 * @param a the RequiresRoles annotation to use to check for one or more roles
 * @throws org.apache.shiro.authz.AuthorizationException
 *          if the calling <code>Subject</code> does not have the role(s) necessary to
 *          proceed.
 */
public void assertAuthorized(Annotation a) throws AuthorizationException {
    if (!(a instanceof RequiresRoles)) return;

    RequiresRoles rrAnnotation = (RequiresRoles) a;
    String[] roles = rrAnnotation.value();

    if (roles.length == 1) {
        getSubject().checkRole(roles[0]);
        return;
    }
    if (Logical.AND.equals(rrAnnotation.logical())) {
        getSubject().checkRoles(Arrays.asList(roles));
        return;
    }
    if (Logical.OR.equals(rrAnnotation.logical())) {
        // Avoid processing exceptions unnecessarily - "delay" throwing the exception by calling hasRole first
        boolean hasAtLeastOneRole = false;
        for (String role : roles) if (getSubject().hasRole(role)) hasAtLeastOneRole = true;
        // Cause the exception if none of the role match, note that the exception message will be a bit misleading
        if (!hasAtLeastOneRole) getSubject().checkRole(roles[0]);
    }
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@Override
public Object intercept(AnnotationInterceptChain chain, Response response, Request request, RequiresRoles requiresRoles) throws Throwable {
    String[] roles = requiresRoles.value();
    Subject subject = SecurityUtils.getSubject();
    if (roles.length == 1) {
        subject.checkRole(roles[0]);
        return chain.intercept();
    }
    if (Logical.AND.equals(requiresRoles.logical())) {
        subject.checkRoles(Arrays.asList(roles));
        return chain.intercept();
    }
    if (Logical.OR.equals(requiresRoles.logical())) {
        // Avoid processing exceptions unnecessarily - "delay" throwing the exception by calling hasRole first
        boolean hasAtLeastOneRole = false;
        for (String role : roles) if (subject.hasRole(role)) hasAtLeastOneRole = true;
        // Cause the exception if none of the role match, note that the exception message will be a bit misleading
        if (!hasAtLeastOneRole) subject.checkRole(roles[0]);
    }
    return chain.intercept();
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@Override
   public void assertAuthorized() throws AuthorizationException {
	//if (!(annotation instanceof RequiresRoles)) return;
       RequiresRoles rrAnnotation = (RequiresRoles) annotation;
       String[] roles = rrAnnotation.value();

       if (roles.length == 1) {
           getSubject().checkRole(roles[0]);
           return;
       }
       if (Logical.AND.equals(rrAnnotation.logical())) {
           getSubject().checkRoles(Arrays.asList(roles));
           return;
       }
       if (Logical.OR.equals(rrAnnotation.logical())) {
           // Avoid processing exceptions unnecessarily - "delay" throwing the exception by calling hasRole first
           boolean hasAtLeastOneRole = false;
           for (String role : roles) if (getSubject().hasRole(role)) hasAtLeastOneRole = true;
           // Cause the exception if none of the role match, note that the exception message will be a bit misleading
           if (!hasAtLeastOneRole) getSubject().checkRole(roles[0]);
       }
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
/**
 * 逐个扫描注解，若是相应的注解则在相应的位置赋值。
 * 注解的处理是有顺序的，依次为RequiresRoles，RequiresPermissions，
 * RequiresAuthentication，RequiresUser，RequiresGuest
 *
 * @param authzArray
 * @param annotations
 */
private void scanAnnotation(List<AuthzHandler> authzArray,
		List<Annotation> annotations) {
	if (null == annotations || 0 == annotations.size()) {
		return;
	}
	for (Annotation a : annotations) {
		if (a instanceof RequiresRoles) {
			authzArray.set(0, new RoleAuthzHandler(a));
		} else if (a instanceof RequiresPermissions) {
			authzArray.set(1, new PermissionAuthzHandler(a));
		} else if (a instanceof RequiresAuthentication) {
			authzArray.set(2, AuthenticatedAuthzHandler.me());
		} else if (a instanceof RequiresUser) {
			authzArray.set(3, UserAuthzHandler.me());
		} else if (a instanceof RequiresGuest) {
			authzArray.set(4, GuestAuthzHandler.me());
		}
	}
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@Override
public void assertAuthorized() throws AuthorizationException {
    //if (!(annotation instanceof RequiresRoles)) return;
    RequiresRoles rrAnnotation = (RequiresRoles) annotation;
    String[] roles = rrAnnotation.value();

    if (roles.length == 1) {
        getSubject().checkRole(roles[0]);
        return;
    }
    if (Logical.AND.equals(rrAnnotation.logical())) {
        getSubject().checkRoles(Arrays.asList(roles));
        return;
    }
    if (Logical.OR.equals(rrAnnotation.logical())) {
        // Avoid processing exceptions unnecessarily - "delay" throwing the exception by calling hasRole first
        boolean hasAtLeastOneRole = false;
        for (String role : roles) if (getSubject().hasRole(role)) hasAtLeastOneRole = true;
        // Cause the exception if none of the role match, note that the exception message will be a bit misleading
        if (!hasAtLeastOneRole) getSubject().checkRole(roles[0]);
    }
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
/**
 * 逐个扫描注解，若是相应的注解则在相应的位置赋值。 注解的处理是有顺序的，依次为RequiresRoles，RequiresPermissions，
 * RequiresAuthentication，RequiresUser，RequiresGuest
 */
private void scanAnnotation(List<AuthzHandler> authzArray,
                            List<Annotation> annotations) {
    if (null == annotations || 0 == annotations.size()) {
        return;
    }
    for (Annotation a : annotations) {
        if (a instanceof RequiresRoles) {
            authzArray.set(0, new RoleAuthzHandler(a));
        } else if (a instanceof RequiresPermissions) {
            authzArray.set(1, new PermissionAuthzHandler(a));
        } else if (a instanceof RequiresAuthentication) {
            authzArray.set(2, AuthenticatedAuthzHandler.me());
        } else if (a instanceof RequiresUser) {
            authzArray.set(3, UserAuthzHandler.me());
        } else if (a instanceof RequiresGuest) {
            authzArray.set(4, GuestAuthzHandler.me());
        }
    }
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@PUT
@RequiresRoles("agate-administrator")
public Response updateApplication(@PathParam("id")String id, Agate.ApplicationDto dto) {
  Application application = applicationService.getApplication(id);
  application.setDescription(dto.getDescription());
  application.setRedirectURI(dto.getRedirectURI());
  application.setScopes(Lists.newArrayList());
  dto.getScopesList().forEach(s -> application.addScope(s.getName(), s.getDescription()));

  if (dto.hasKey()) {
    application.setKey(applicationService.hashKey(dto.getKey()));
  }

  applicationService.save(application);

  return Response.noContent().build();
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@GET
@Path("/keystore/{name}/{alias}")
@Timed
@RequiresRoles(Roles.MICA_ADMIN)
public Response getEncryptionKeyCertificate(@PathParam("name") String name, @PathParam("alias") String alias)
  throws IOException, KeyStoreException {

  if(!Sets.newHashSet(KeyStoreService.SYSTEM_KEY_STORE, OpalService.OPAL_KEYSTORE).contains(name)) {
    return Response.status(Response.Status.BAD_REQUEST).build();
  }

  if(keyStoreService.getKeyStore(name).aliasExists(alias)) {
    return Response.ok(keyStoreService.getPEMCertificate(name, alias), MediaType.TEXT_PLAIN_TYPE)
      .header("Content-disposition", String.format("attachment; filename=%s-%s-certificate.pem", name, alias))
      .build();
  }

  return Response.status(Response.Status.NOT_FOUND).build();
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@RequiresAuthentication
@RequiresRoles("ADMIN")
@WrapException
@Override
public User createUser(final UserCreationModel user) {
    user.setRole(Role.DEVELOPER);
    UserEntity userEntity = converter.map(user);
    final String password = user.getPassword();
    if (password != null) {
        userEntity.setHashedPassword(PasswordsHashCalculator.calculatePasswordHash(password));
    }
    updateToken(userEntity);
    userEntity = userDAO.persist(userEntity);
    userDAO.flush();
    return converter.map(userEntity, configBean);
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@GET
@Path("{id}/download")
@RequiresRoles(UserRole.ROLE_ADMIN)
@Produces(MediaType.TEXT_PLAIN)
public Response download(@PathParam("id") long id) {
	Course course = courseDao.findById(id);
	Builder<String> setBuilder = ImmutableSet.builder();
	if (course.getProjects().isEmpty()) {
		return Response.status(Status.NO_CONTENT).entity("This course doesn't have any projects").build();
	} else {
		for (Project project : course.getProjects()) {
			if (project.getSourceCodeUrl() == null) {
				LOG.warn("This project doesnt have a source code URL: {}", project);
			} else {
				setBuilder.add(project.getSourceCodeUrl());
			}
		}
		Set<String> sourceCodeurls = setBuilder.build();
		return Response.ok(repoDownloader.prepareDownload(sourceCodeurls)).build();
	}
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@RequiresRoles(GroupService.ADMIN_ROLE)
@RequestMapping(value = "list")
public ModelAndView list(ModelMap m,
                         @ModelAttribute("listParam") ListParam listParam) {
    //
    m.put("groups", list(listParam));
    Pagination p = new Pagination(groupService.count(listParam.getSearchTermAsOptional()),
            listParam.getOffset(), listParam.getLimit());
    m.put("groupsPagination", p);
    //
    GroupListPaginationToLinkFunction pf = new GroupListPaginationToLinkFunction();
    pf.setPagination(p);
    pf.setSearchTerm(listParam.getSearchTermAsOptional());
    m.put("groupsPaginationToLinkFunction", pf);
    //
    return new ModelAndView("admin/group/list", m);
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@RequiresRoles(GroupService.ADMIN_ROLE)
@RequestMapping(value = "list")
public ModelAndView list(ModelMap m,
                         @ModelAttribute("userAdminListParam") UserAdminListParam listParam) {
    //
    List<User> l = userService.list(
            Optional.<String>absent(), Optional.<String>absent(),
            listParam.getOffset(), listParam.getLimit());
    m.put("users", l);
    //
    long c = userService.count(Optional.<String>absent(), Optional.<String>absent());
    Pagination p = new Pagination(c, listParam.getOffset(), listParam.getLimit());
    m.put("usersPagination", p);
    //
    UserListPaginationToLinkFunction pf = new UserListPaginationToLinkFunction();
    pf.setSearchTerm(listParam.getSearchTermAsOptional());
    pf.setGroupName(listParam.getGroupNameAsOptional());
    pf.setPagination(p);
    m.put("usersPaginationToLinkFunction", pf);
    //
    return new ModelAndView("admin/user/list", m);
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@RequiresRoles(GroupService.ADMIN_ROLE)
@RequestMapping(value = "form")
public ModelAndView form(ModelMap m,
                         @RequestParam(value = "username", required = false, defaultValue = "") final String username) {
    //
    if (false == Strings.isNullOrEmpty(username)) {
        Optional<User> u = userService.getByUsername(username);
        if (u.isPresent()) {
            m.put("user", u.get());
        }
    } else {
        m.put("user", new User());
    }
    //
    m.put("TIMEZONE_IDS", timeZoneService.sortedTimeZoneIds());
    m.put("EVERYONE_GROUP", GroupService.EVERYONE_ROLE);
    //
    m.put("groups", groupService.list(Optional.<String>absent(), 0, Integer.MAX_VALUE));
    //
    return new ModelAndView("admin/user/form", m);
}
 

import org.apache.shiro.authz.annotation.RequiresRoles; //导入依赖的package包/类
@RequiresRoles(GroupService.ADMIN_ROLE)
@ResponseBody
@RequestMapping(value = "changePassword/{username}", produces = {MediaType.TEXT_PLAIN_VALUE})
public String changePassword(@PathVariable("username") final String username,
                             @RequestParam(value = "newPassword", required = true) final String newPassword) throws Exception {
    //
    Optional<User> u = userService.getByUsername(username);
    if (false == u.isPresent()) {
        throw new Exception(String.format("USER NOT FOUND [%s]", username));
    }
    //
    User u2 = u.get();
    userService.setPassword(u2, newPassword);
    //
    return "OK. CHANGED.";
}