星光旅游网

项目功能介绍：https://www.bilibili.com/video/BV18Z4y1r7Ut

后台服务端

技术栈：

项目结构图：

Shiro认证和授权

即用户登录并赋予权限

Controller层，用户登录接口（用户名、密码、验证码）

@PostMapping("/toLogin")
public RespBean userLogin(@RequestBody HashMap<String, String> params, HttpSession session) {
    String username = params.get("username");
    String password = params.get("password");
    String verify_code = params.get("verify_code");

    //1、比较验证码
    String session_verify = (String) session.getAttribute("verify_code");
    log.warn("session_verify===>" + session_verify);
    if (StringUtils.hasLength(verify_code) && session_verify.equalsIgnoreCase(verify_code)) {
        try {
            Subject subject = SecurityUtils.getSubject();
            subject.login(new UsernamePasswordToken(username, password));

            //从session中获取认证的TUser对象 返回给前端
            TUser user = (TUser) session.getAttribute("USER_SESSION");
            return RespBean.success("ok", user);
        } catch (UnknownAccountException e) {
            throw new LoginException("用户名不存在！");
        } catch (IncorrectCredentialsException e) {
            throw new LoginException("密码错误！");
        } catch (Exception e) {
            throw new LoginException(e.getMessage());
        }
    } else {
        throw new LoginException("验证码错误！");
    }
}