package org.zln.hello.realm;import org.apache.shiro.authc.*;import org.apache.shiro.realm.Realm;/** * Created by sherry on 16/9/8. */public class MyRealm01 implements Realm {    @Override    public String getName() {        return "MyRealm01";    }    @Override    public boolean supports(AuthenticationToken token) {        //仅支持UsernamePasswordToken类型的 Token        return token instanceof UsernamePasswordToken;    }    @Override    public AuthenticationInfo getAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {        String username = (String)token.getPrincipal(); //得到用户名        String password = new String((char[])token.getCredentials()); //得到密码        if(!"zhang".equals(username)) {            throw new UnknownAccountException(); //如果用户名错误            //        }        if(!"123".equals(password)) {            throw new IncorrectCredentialsException(); //如果密码错误        }        //如果身份认证验证成功,返回一个 AuthenticationInfo 实现;        return new SimpleAuthenticationInfo(username, password, getName());    }}

#声明一个 realmMyRealm01=org.zln.hello.realm.MyRealm01#指定 securityManager 的 realms 实现securityManager.realms=$MyRealm01

package org.zln.hello;import org.apache.log4j.LogManager;import org.apache.log4j.Logger;import org.apache.shiro.SecurityUtils;import org.apache.shiro.authc.UsernamePasswordToken;import org.apache.shiro.config.IniSecurityManagerFactory;import org.apache.shiro.mgt.SecurityManager;import org.apache.shiro.subject.Subject;import org.apache.shiro.util.Factory;/** * Created by sherry on 16/9/8. */public class HelloWorld {    private static Logger logger = LogManager.getLogger(HelloWorld.class);    private static Subject subject;    static {        //1、获取 SecurityManager 工厂,此处使用 Ini 配置文件初始化 SecurityManager//        Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro.ini");        Factory<SecurityManager> factory = new IniSecurityManagerFactory("classpath:shiro-realm.ini");        //2、得到 SecurityManager 实例 并绑定给 SecurityUtils        SecurityManager securityManager = factory.getInstance();        SecurityUtils.setSecurityManager(securityManager);        //3、得到 Subject 及创建用户名/密码身份验证 Token(即用户身份/凭证)        subject = SecurityUtils.getSubject();    }    public static boolean login(String username,String password){        UsernamePasswordToken token = new UsernamePasswordToken(username,password);        //4、登录,即身份验证        try {            subject.login(token);        }catch (Exception e){            logger.info("身份验证失败");            logger.error(e.getMessage(),e);            return false;        }        return subject.isAuthenticated();//是否成功登陆    }    public static void main(String[] args) {        //6、退出        subject.logout();    }}