java - How does Shiro's Subject.login() know which table my user information is in?

Question

shiro-jdbc-realm.ini

Answer 1

shiro的jdbcRealm中有这么些默认的query

   /**
     * The default query used to retrieve account data for the user.
     */
    protected static final String DEFAULT_AUTHENTICATION_QUERY = "select password from users where username = ?";
    
    /**
     * The default query used to retrieve account data for the user when {@link #saltStyle} is COLUMN.
     */
    protected static final String DEFAULT_SALTED_AUTHENTICATION_QUERY = "select password, password_salt from users where username = ?";

    /**
     * The default query used to retrieve the roles that apply to a user.
     */
    protected static final String DEFAULT_USER_ROLES_QUERY = "select role_name from user_roles where username = ?";

    /**
     * The default query used to retrieve permissions that apply to a particular role.
     */
    protected static final String DEFAULT_PERMISSIONS_QUERY = "select permission from roles_permissions where role_name = ?";

Either the tables in your database are the above tables, or you specified them yourselfquery

Answer 2

Shiro does the username and password verification function in the realm you specify. You still have to write this verification yourself

Look at this http://jinnianshilongnian.ite...