Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/jcasbin/shiro-casbin
Apache Shiro's authorization middleware based on Casbin
https://github.com/jcasbin/shiro-casbin
abac access-control authorization casbin plugin rbac shiro
Last synced: 21 days ago
JSON representation
Apache Shiro's authorization middleware based on Casbin
- Host: GitHub
- URL: https://github.com/jcasbin/shiro-casbin
- Owner: jcasbin
- License: apache-2.0
- Created: 2018-04-27T15:15:42.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2024-05-15T09:25:39.000Z (7 months ago)
- Last Synced: 2024-08-05T17:37:07.630Z (4 months ago)
- Topics: abac, access-control, authorization, casbin, plugin, rbac, shiro
- Language: Java
- Homepage: https://github.com/casbin/jcasbin
- Size: 48.8 KB
- Stars: 6
- Watchers: 3
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - jcasbin/shiro-casbin - Apache Shiro's authorization middleware based on Casbin (Java)
README
# shiro-casbin
[](https://codebeat.co/projects/github-com-jcasbin-shiro-casbin-master)
[](https://github.com/jcasbin/shiro-casbin/actions/workflows/ci.yml)
[](https://codecov.io/gh/jcasbin/shiro-casbin?branch=master)
[](https://www.javadoc.io/doc/org.casbin/shiro-casbin)
[](https://mvnrepository.com/artifact/org.casbin/shiro-casbin/latest)
[](https://discord.gg/S5UjpzGZjN)
Apache Shiro's RBAC & ABAC Authorization Plug-in based on jCasbin
## How it works?
**1.Add configuration**
You need to specify the path of the model file in the configuration file.
```yaml
shiro-jcasbin:
// madel path
modelPath: src/test/resources/model/rbac_model.conf
````
Of course, you also need to configure the data source information in the spring configuration file. For example:
```yaml
shiro-jcasbin:
// madel path
modelPath: src/test/resources/model/rbac_model.conf
spring:
datasource:
driver-class-name: com.mysql.cj.jdbc.Driver
url: jdbc:mysql://localhost:3306/casbin?serverTimezone=GMT%2B8
username: casbin_test
password: TEST_casbin
```
**2.Enable annotation interception**
You need to enable annotation interception in Shiro's configuration file. As for annotation startup classes, please use the ShiroAdvisor, like this:
```java
@Configuration
public class ShiroConfig {
// Other configs is omitted.
@Bean
public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
AuthorizationAttributeSourceAdvisor advisor = new ShiroAdvisor();
advisor.setSecurityManager(securityManager);
return advisor;
}
}
```
**3.Use the EnforcerAuth annotation.**
Now you can use the EnforcerAuth annotation to the controller method, like this:
```java
@RestController
public class EnforcerAuthController {
// Other methods is omitted.
@EnforcerAuth
@GetMapping("/data")
public String function1() {
return "success";
}
}
```
It will verify whether the current login user has the requested address permission. If the current login user has the permission, this controller method will work properly. If not, it will throw the exception which can prompt you that the current login user does not have the permission.If no user is currently logged in, it will throw the exception which can prompt you that you should login in.