[users]

#用户zhang的密码是1111111，此用户具有role1和role2两个角色

zhang=111111,role1,role2

wang=111111,role2

[roles]

#角色role1对资源user拥有create、update权限

role1=user:create,user:update

#角色role2对资源user拥有create、delete权限

role2=user:create,user:delete

#角色role3对资源user拥有create权限

role3=user:create

System.out.println("是否拥有role角色："+subject.hasRole("role1"));

        System.out.println("是否拥有role1,role2角色："+subject.hasAllRoles(Arrays.asList("role1","role2")));

//        check是否拥有role角色

        subject.checkRole("role1");

        subject.checkRoles("role1","role2");

//基于资源的授权

        System.out.println("是否拥有user:create的权限："+subject.isPermitted("user:create"));

        System.out.println("是否拥有user的多个权限："+subject.isPermittedAll("user:create","user:update"));//返回true

        //查询每个权限结果

        boolean[] permitted = subject.isPermitted("user:create","user:update","user:add");

        for (boolean b : permitted) {

            System.out.println(b);//返回 true，true，false

        }

        System.out.println("是否拥有user的多个权限："+permitted.length);//返回3个结果

        //check检查权限

        subject.checkPermission("user:create");

        //check检查全部权限是否都有

        subject.checkPermissions("user:create","user:update");

授权

@Override

    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {

        //null usernames are invalid

        if (principals == null) {

            throw new AuthorizationException("PrincipalCollection method argument cannot be null.");

        }

        //获取认证之后返回的身份信息

        String username = (String) getAvailablePrincipal(principals);

        // 根据身份信息从数据库中查询权限数据

        //....这里使用静态数据模拟

        List<String> permissions = new ArrayList<>();

        permissions.add("user:create");

        permissions.add("user:add");

        //将权限信息封闭为AuthorizationInfo

        SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();

        info.addStringPermissions(permissions);

        return info;

    }