? ? ? ?<dependency>
?? ??? ? ? ?<groupId>org.casbin</groupId>
?? ??? ? ? ?<artifactId>jcasbin</artifactId>
?? ??? ? ? ?<version>1.1.0</version>
?? ??? ?</dependency>
?? ??? ?<dependency>
?? ??? ? ? ?<groupId>org.casbin</groupId>
?? ??? ? ? ?<artifactId>jdbc-adapter</artifactId>
?? ??? ? ? ?<version>1.1.0</version>
?? ??? ?</dependency>

@Configuration
@ConfigurationProperties(prefix = "org.jcasbin")
public class EnforcerConfigProperties {
	private String url;
	private String driverClassName;
	private String username;
	private String password;
	private String modelPath;
	public String getUrl() {
		return url;
	}
	public void setUrl(String url) {
		this.url = url;
	}
	public String getDriverClassName() {
		return driverClassName;
	}
	public void setDriverClassName(String driverClassName) {
		this.driverClassName = driverClassName;
	}
	public String getUsername() {
		return username;
	}
	public void setUsername(String username) {
		this.username = username;
	}
	public String getPassword() {
		return password;
	}
	public void setPassword(String password) {
		this.password = password;
	}
	public String getModelPath() {
		return modelPath;
	}
	public void setModelPath(String modelPath) {
		this.modelPath = modelPath;
	}
	@Override
	public String toString() {
		return "EnforcerConfigProperties [url=" + url + ", driverClassName=" + driverClassName + ", username="
				+ username + ", password=" + password + ", modelPath=" + modelPath + "]";
	}
}

org.jcasbin.url=jdbc:mysql://localhost:3306/casbin?useSSL=false
org.jcasbin.driver-class-name=com.mysql.jdbc.Driver
org.jcasbin.username=root
org.jcasbin.password=root
org.jcasbin.model-path=conf/authz_model.conf

@Component
public class EnforcerFactory implements InitializingBean {
	private static Enforcer enforcer;
	@Autowired
	private EnforcerConfigProperties enforcerConfigProperties;
	private static EnforcerConfigProperties config;
	@Override
	public void afterPropertiesSet() throws Exception {
		config = enforcerConfigProperties;
		//從數(shù)據(jù)庫讀取策略
		JDBCAdapter jdbcAdapter = new JDBCAdapter(config.getDriverClassName(),config.getUrl(),config.getUsername(),
													config.getPassword(), true);
		enforcer = new Enforcer(config.getModelPath(), jdbcAdapter);
		enforcer.loadPolicy();//Load the policy from DB.
	}
	/**
	 * 添加權(quán)限
	 * @param policy
	 * @return
	 */
	public static boolean addPolicy(Policy policy){
		boolean addPolicy = enforcer.addPolicy(policy.getSub(),policy.getObj(),policy.getAct());
		enforcer.savePolicy();
		return addPolicy;
	}
	/**
	 * 刪除權(quán)限
	 * @param policy
	 * @return
	 */
	public static boolean removePolicy(Policy policy){
		boolean removePolicy = enforcer.removePolicy(policy.getSub(),policy.getObj(),policy.getAct());
		enforcer.savePolicy();
		return removePolicy;
	}
	public static Enforcer getEnforcer(){
		return enforcer;
	}
}

public class Policy {
	/**想要訪問資源的用戶 或者角色*/
	private String sub;
	/**將要訪問的資源，可以使用  * 作為通配符，例如/user/* */
	private String obj;
	/**用戶對資源執(zhí)行的操作。HTTP方法，GET、POST、PUT、DELETE等，可以使用 * 作為通配符*/
	private String act;
	public Policy() {
		super();
	}
	/**
	 * 
	 * @param sub 想要訪問資源的用戶 或者角色
	 * @param obj 將要訪問的資源，可以使用  * 作為通配符，例如/user/*
	 * @param act 用戶對資源執(zhí)行的操作。HTTP方法，GET、POST、PUT、DELETE等，可以使用 * 作為通配符
	 */
	public Policy(String sub, String obj, String act) {
		super();
		this.sub = sub;
		this.obj = obj;
		this.act = act;
	}
	public String getSub() {
		return sub;
	}
	public void setSub(String sub) {
		this.sub = sub;
	}
	public String getObj() {
		return obj;
	}
	public void setObj(String obj) {
		this.obj = obj;
	}
	public String getAct() {
		return act;
	}
	public void setAct(String act) {
		this.act = act;
	}
	@Override
	public String toString() {
		return "Policy [sub=" + sub + ", obj=" + obj + ", act=" + act + "]";
	}
}

@WebFilter(urlPatterns = "/*" , filterName = "JCasbinAuthzFilter")
@Order(Ordered.HIGHEST_PRECEDENCE)//執(zhí)行順序，最高級別最先執(zhí)行，int從小到大
public class JCasbinAuthzFilter implements Filter {
	private static final Logger log = LoggerFactory.getLogger(JCasbinAuthzFilter.class);
	private static Enforcer enforcer;
	@Override
	public void init(FilterConfig filterConfig) throws ServletException {
	}
	@Override
	public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain)
			throws IOException, ServletException {
		HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        String user = request.getParameter("username");
        String path = request.getRequestURI();
        String method = request.getMethod();
        enforcer = EnforcerFactory.getEnforcer();
        if (path.contains("anon")) {
        	chain.doFilter(request, response);
		}else if (enforcer.enforce(user, path, method)) {
			chain.doFilter(request, response);
		} else {
			log.info("無權(quán)訪問");
			Map<String, Object> result = new HashMap<String, Object>();
            result.put("code", 1001);
            result.put("msg", "用戶權(quán)限不足");
            result.put("data",null);
            response.setCharacterEncoding("UTF-8");
            response.setContentType("application/json");
            response.getWriter().write(JSONObject.toJSONString(result,SerializerFeature.WriteMapNullValue));
	    }
	}
	@Override
	public void destroy() {
	}
}

@PutMapping("/anon/role/per")
	public ResultBO<Object> addPer(){
		EnforcerFactory.addPolicy(new Policy("alice", "/user/list", "*"));
		return ResultTool.success();
	}
	@DeleteMapping("/anon/role/per")
	public ResultBO<Object> deletePer(){
		EnforcerFactory.removePolicy(new Policy("alice", "/user/list", "*"));
		return ResultTool.success();
	}