springboot3+jdk17+shiro+jwt+redis

Spring Boot 3 和 JDK 17 的组合尚未广泛可用，因为 Spring Boot 3 是基于 Java 17 的发布候选版本。Spring Boot 2.5.x 是最后支持 Java 8 的 Spring Boot 版本。

考虑到这一点，我将提供一个示例配置，展示如何在 Spring Boot 2.5.x（最接近 Spring Boot 3 的稳定版本）中使用 Shiro 和 JWT 以及 Redis。

@Configuration
public class ShiroConfig {
 
    @Bean
    public Realm realm() {
        // 配置 Realm 用于身份验证
        return new MyRealm();
    }
 
    @Bean
    public DefaultWebSecurityManager securityManager(Realm realm) {
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        securityManager.setRealm(realm);
        return securityManager;
    }
 
    @Bean
    public ShiroFilterFactoryBean shiroFilterFactoryBean(DefaultWebSecurityManager securityManager) {
        ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean();
        shiroFilterFactoryBean.setSecurityManager(securityManager);
        // 配置 Shiro Filter 规则
        return shiroFilterFactoryBean;
    }
}
 
public class MyRealm extends AuthorizingRealm {
 
    @Autowired
    private UserService userService;
 
    @Override
    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) {
        // 实现认证逻辑
    }
 
    @Override
    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
        // 实现授权逻辑
    }
}
 
@Configuration
public class JwtConfig {
 
    @Value("${jwt.secret}")
    private String secret;
 
    @Bean
    public JWTTokenFilter jwtTokenFilter() {
        return new JWTTokenFilter();
    }
 
    // 其他 JWT 配置 Bean
}
 
public class JWTTokenFilter extends AuthenticatingFilter {
 
    @Override
    protected boolean isLoginAttempt(ServletRequest request, ServletResponse response) {
        // 实现 JWT 登录尝试检测逻辑
    }
 
    @Override
    protected AuthenticationToken createToken(ServletRequest request, ServletResponse response) {
        // 实现创建 JWT Token 逻辑
    }
 
    @Override
    protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
        // 实现访问拒绝时的逻辑
    }
}
 
@Configuration
public class RedisConfig {
 
    @Bean
    public LettuceConnectionFactory redisConnectionFactory() {
        return new LettuceConne