Comments (3)
第一个问题:官方规范的话是使用Bearer格式,不过我之所以是要使用username是因为我要通过username来校验用户的token是否合法,这个你可以看看我的逻辑处理。其实这一块不一定要按照规范来的嘛,只要你能保证最后鉴权能成功,没有权限漏洞即可。
第二个问题:JWT的token超时时间是支持的,你看看JWT的文档吧。
第三个问题:我刚刚发现shiro官方有shiro-spring-boot-web-starter
的整合包,有时间我会重新写下教程,到时候也能很方便的实现注解等功能。顺便那个token鉴权方式我也会重新改写的,写好了会告诉你的。
from spring-boot-shiro.
好的谢谢
from spring-boot-shiro.
教程更新了,你可以看看
from spring-boot-shiro.
Related Issues (20)
- 关于filter拦截配置问题的请教 HOT 5
- smithgirlfriend HOT 1
- 配置文件 HOT 1
- 请问没有vue的代码吗? HOT 2
- 这个工具类抛出异常出错 HOT 4
- 密码的判断 HOT 1
- 用户名密码验证不应该交由shiro吗? HOT 2
- 可否从token获取用户角色,或者使用缓存,减轻数据库压力。 HOT 1
- 一大堆错误,肿么办? HOT 1
- 登录时未使用Shiro的认证器 HOT 1
- JWTUtil增加refresh HOT 3
- 密码在数据库中明文存储 HOT 1
- 敏感资源如果没有携带TOKEN HOT 4
- 关于url拦截 HOT 2
- Login并未实现保持用户信息吗 HOT 1
- 没有token 时怎么办 HOT 3
- token刷新 HOT 1
- Dependency org.apache.shiro:shiro-web, leading to CVE problem HOT 1
- Token 令牌建議不要存放密碼
- Token 令牌建議不要存放密碼 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spring-boot-shiro.