@Test
public void testLogin() throws Exception {
//1.加载 ini 配置文件创建 SecurityManager
Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");
//2.获取 securityManager
SecurityManager securityManager = factory.getInstance();
//3.将 securityManager 绑定到当前运行环境
SecurityUtils.setSecurityManager(securityManager);
//4.创建主体(此时的主体还为经过认证)
Subject subject = SecurityUtils.getSubject();
//5.构造主体登录的凭证（即用户名/密码)
UsernamePasswordToken upToken = new UsernamePasswordToken("zhangsan", "123456");
//6.主体登录
subject.login(upToken);
//7.验证是否登录成功
System.out.println("用户登录成功=" + subject.isAuthenticated());
//8.登录成功获取数据
//getPrincipal 获取登录成功的安全数据
System.out.println(subject.getPrincipal());
}

@Test
public void testLogin() {
Subject subject = SecurityUtils.getSubject();
String username = "abc";
String password = "123456";
UsernamePasswordToken usernamePasswordToken = new UsernamePasswordToken(username,password);
subject.login(usernamePasswordToken);
//验证用户是否登陆成功
System.out.println(subject.isAuthenticated());
//获取登陆成功的数据
System.out.println(subject.getPrincipals());
//判断 subject 是否拥有相关角色
System.out.println(subject.hasRole("role1"));
//判断 subject 是否拥有相关权限
System.out.println(subject.isPermitted("user:save"));
}

public class PermissionRealm extends AuthorizingRealm {
@Override
public void setName(String name) {
System.out.println(name);
super.setName("permissionRealm");
}
/_授权：授权的主要目的对用户增加某些权限或角色_/
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
String username = (String) principalCollection.getPrimaryPrincipal();
System.out.println(username);
List<String> permissions = new ArrayList<>();
permissions.add("user:save");
permissions.add("user:update");
List<String> roles = new ArrayList<>();
roles.add("role1");
roles.add("role2");
SimpleAuthorizationInfo simpleAuthorizationInfo = new SimpleAuthorizationInfo();
simpleAuthorizationInfo.addStringPermissions(permissions);
simpleAuthorizationInfo.addRoles(roles);
return simpleAuthorizationInfo;
}
/_ 认证：认证的主要目的，比较用户输入的用户名密码是否和数据库中的一致_/
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) throws AuthenticationException {
UsernamePasswordToken usernamePasswordToken = (UsernamePasswordToken) authenticationToken;
String username = usernamePasswordToken.getUsername();
String password = String.valueOf(usernamePasswordToken.getPassword());
if (!"123456".equals(password)) {
throw new RuntimeException("username or password error");
} else {
return new SimpleAuthenticationInfo(username, password, this.getName());

      }

}
}

public void testMd5() {
  String password = "123456";
  String encodedPassword = new Md5Hash(password).toString();
  System.out.println(encodedPassword);
}

String password = "123456";
String salt = new SecureRandomNumberGenerator().nextBytes().toString();
int times = 2;  // 加密次数：2
String alogrithmName = "md5";   // 加密算法

String encodePassword = new SimpleHash(alogrithmName, password, salt, times).toString();

System.out.printf("原始密码是 %s , 盐是： %s, 运算次数是： %d, 运算出来的密文是：%s ",password,salt,times,encodePassword);