基于Shiro安全框架的身份验证最简单的实例

<dependencies>
    <dependency>
      <groupId>junit</groupId>
      <artifactId>junit</artifactId>
      <version>4.11</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>commons-logging</groupId>
      <artifactId>commons-logging</artifactId>
      <version>1.1.3</version>
    </dependency>
    <dependency>
      <groupId>org.apache.shiro</groupId>
      <artifactId>shiro-core</artifactId>
      <version>1.2.2</version>
    </dependency>
  </dependencies>

[users]
wanmait=123456
test=123

@Test
public void testLogin() {
    //1、获取 SecurityManager 工厂，此处使用 Ini 配置文件初始SecurityManager
    Factory<SecurityManager> factory =
            new IniSecurityManagerFactory("classpath:shiro.ini");


    //2、得到 SecurityManager 实例 并绑定给 SecurityUtils
    org.apache.shiro.mgt.SecurityManager securityManager = factory.getInstance();
    SecurityUtils.setSecurityManager(securityManager);


    //3、得到 Subject 及创建用户名/密码身份验证 Token（即用户身份/凭证）
    Subject subject = SecurityUtils.getSubject();
    UsernamePasswordToken token = new UsernamePasswordToken("wanmait", "1234567");
    try {
        //4、登录，即身份验证
        subject.login(token);
        System.out.println("登录认证成功");
    } catch (AuthenticationException e) {
        //5、身份验证失败
        System.err.println("认证失败");
    }
    //6、退出
    subject.logout();
}