<dependency>
    <groupId>org.iherus.shiro</groupId>
    <artifactId>shiro-redis</artifactId>
    <version>2.5.0</version>
</dependency>

<dependency>
    <groupId>org.iherus.shiro</groupId>
    <artifactId>shiro-redis-spring-boot-web-starter</artifactId>
    <version>2.5.0</version>
</dependency>

[main]
#定义凭证匹配器
credentialsMatcher=org.apache.shiro.authc.credential.HashedCredentialsMatcher
#散列算法
credentialsMatcher.hashAlgorithmName=MD5
#散列次数
credentialsMatcher.hashIterations=2

#定义缓存池配置
poolConfig=redis.clients.jedis.JedisPoolConfig
poolConfig.minIdle=3
poolConfig.maxIdle=10
poolConfig.maxWaitMillis=1500
poolConfig.maxTotal=100

#定义连接配置
## Standalone
configuration=org.iherus.shiro.cache.redis.config.RedisStandaloneConfiguration
configuration.host=127.0.0.1
configuration.port=6379
configuration.database=2
#configuration.password=

## Sentinel
#configuration=org.iherus.shiro.cache.redis.config.RedisSentinelConfiguration
#configuration.masterName=mymaster
#configuration.sentinelsFromText=127.0.0.1:56379,127.0.0.1:56479,127.0.0.1:56579
#configuration.database=2
#configuration.password=

## Cluster
#configuration=org.iherus.shiro.cache.redis.config.RedisClusterConfiguration
#configuration.clusterNodesFromText=127.0.0.1:16379, 127.0.0.1:16380, 127.0.0.1:16381, 127.0.0.1:16382, 127.0.0.1:16383, 127.0.0.1:16384
#configuration.password=

#定义连接工厂
## Jedis
connectionFactory=org.iherus.shiro.cache.redis.connection.jedis.JedisConnectionFactory
connectionFactory.poolConfig=$poolConfig
connectionFactory.configuration=$configuration
#connectionFactory.clientName=
#connectionFactory.connectTimeoutMillis=
#connectionFactory.soTimeoutMillis=

## Lettuce
#connectionFactory=org.iherus.shiro.cache.redis.connection.lettuce.LettuceConnectionFactory
#connectionFactory.poolConfig=$poolConfig
#connectionFactory.configuration=$configuration
#connectionFactory.clientName=
#connectionFactory.timeoutMillis=

## Redisson
#connectionFactory=org.iherus.shiro.cache.redis.connection.redisson.RedissonConnectionFactory
#connectionFactory.configuration=$configuration
#connectionFactory.clientName=
#connectionFactory.connectTimeoutMillis=
#connectionFactory.soTimeoutMillis=

#定义缓存管理器
cacheManager=org.iherus.shiro.cache.redis.RedisCacheManager
cacheManager.connectionFactory=$connectionFactory
cacheManager.expirationMillis=900000
cacheManager.keyPrefix=shiro:test:cache:
#cacheManager.scanBatchSize=3000
#cacheManager.deleteBatchSize=5000
#cacheManager.fetchBatchSize=50
#cacheManager.database=5

#将凭证匹配器设置到realm
customRealm=org.iherus.shiro.tester.CustomRealm
customRealm.credentialsMatcher=$credentialsMatcher
securityManager.realms=$customRealm
securityManager.cacheManager=$cacheManager

    <!-- SHIRO安全管理器 -->
    <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager">
        <property name="realm" ref="userRealm" />
        <property name="cacheManager" ref="cacheManager" />
        <property name="rememberMeManager" ref="rememberMeManager" />
        <property name="sessionManager" ref="sessionManager" />
    </bean>

    <!-- 用户域 -->
    <bean id="userRealm" class="org.iherus.shiro.tester.CustomRealm" />

    <!-- 会话管理器-->
    <bean id="sessionManager" class="org.apache.shiro.web.session.mgt.DefaultWebSessionManager">
        <property name="sessionDAO" ref="sessionDAO" />
        <property name="globalSessionTimeout" value="${shiro.globalSessionTimeout}" />
        <property name="deleteInvalidSessions" value="${shiro.deleteInvalidSessions}" />
        <property name="sessionValidationInterval" value="${shiro.sessionValidationInterval}" />
    </bean>

    <!-- sessionDAO-->
    <bean id="sessionDAO" class=" org.iherus.shiro.cache.redis.RedisSessionDAO">
	<property name="cacheManager" ref="cacheManager" />
    </bean>

    <!-- 记住登录管理器 -->
    <bean id="rememberMeManager" class="org.apache.shiro.web.mgt.CookieRememberMeManager">
        <property name="cookie" ref="rememberMeCookie" />
    </bean>

    <!-- Cookie对象 -->
    <bean id="rememberMeCookie" class="org.apache.shiro.web.servlet.SimpleCookie">
        <property name="name" value="${shiro.cookieName}" />
        <property name="maxAge" value="${shiro.cookieMaxAge}" />
    </bean>

    <!-- 缓存管理器 -->
    <bean id="cacheManager" class="org.iherus.shiro.cache.redis.RedisCacheManager">
        <property name="connectionFactory" ref="connectionFactory" />
        <property name="database" value="2" />
        <property name="expirationMillis" value="90000" />
        <property name="keyPrefix" value="shiro:cache:" />
        <property name="scanBatchSize" value="3000" />
        <property name="deleteBatchSize" value="5000" />
        <property name="fetchBatchSize" value="50" />
    </bean>

    <!-- Redis连接工厂 -->
    <bean id="connectionFactory" class="org.iherus.shiro.cache.redis.connection.jedis.JedisConnectionFactory">
	<property name="clientName" value="SRC" />
	<property name="connectTimeoutMillis" value="3000" />
	<property name="soTimeoutMillis" value="2000" />
	<property name="poolConfig" ref="poolConfig" />
	<property name="configuration" ref="standaloneConfiguration" />
	<!-- <property name="configuration" ref="sentinelConfiguration" /> -->
	<!-- <property name="configuration" ref="clusterConfiguration" />  -->
    </bean>

    <!-- Redis单机配置 -->
    <bean id="standaloneConfiguration" class="org.iherus.shiro.cache.redis.config.RedisStandaloneConfiguration">
	<property name="host" value="127.0.0.1" />
	<property name="port" value="6379" />
	<property name="database" value="0" />
	<!-- <property name="password" value="" /> -->
    </bean>

    <!-- Redis哨兵配置 -->
    <bean id="sentinelConfiguration" class="org.iherus.shiro.cache.redis.config.RedisSentinelConfiguration">
	<property name="masterName" value="mymaster" />
	<property name="sentinelsFromText" value="127.0.0.1:56379,127.0.0.1:56479,127.0.0.1:56579" />
	<!-- <property name="password" value="" /> -->
    </bean>

    <!-- Redis集群配置 -->
    <bean id="clusterConfiguration" class="org.iherus.shiro.cache.redis.config.RedisClusterConfiguration">
	<property name="clusterNodesFromText" value="127.0.0.1:16379,127.0.0.1:16380,127.0.0.1:16381..." />
	<property name="maxAttempts" value="5" />
	<!-- <property name="password" value="" /> -->
    </bean>

    <!-- 配置缓存连接池 -->
    <bean id="poolConfig" class="redis.clients.jedis.JedisPoolConfig">
        <property name="minIdle" value="${redis.minIdle}" />
        <property name="maxIdle" value="${redis.maxIdle}" />
        <property name="maxWaitMillis" value="${redis.maxWaitMillis}" />
        <property name="maxTotal" value="${redis.maxTotal}" />
    </bean>

        <dependency>
            <groupId>org.iherus.shiro</groupId>
            <artifactId>shiro-redis-spring-boot-web-starter</artifactId>
            <version>{latestVersion}</version>
        </dependency>

    @Bean
    public SessionManager sessionManager(SessionDAO sessionDAO) {
        DefaultWebSessionManager webSessionManager = new DefaultWebSessionManager();
        
        // 注入RedisSessionDAO实例
        webSessionManager.setSessionDAO(sessionDAO);
        
        .....other.....

        return webSessionManager;
    }

    @Bean
    public DefaultWebSecurityManager securityManager(SessionManager sessionManager, CacheManager cacheManager, List<Realm> realms) {
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        // 注入SessionManager实例
        securityManager.setSessionManager(sessionManager);
        
        // 注入cacheManager实例
        securityManager.setCacheManager(cacheManager != null ? cacheManager : new MemoryConstrainedCacheManager());

        securityManager.setRealms(realms);

        .....other.....

        return securityManager;
    }

    @Bean
    public JedisSslClientConfigurationCustomizer JedisSslClientConfigurationCustomizer() {
        return ((builder) -> {
            ....SSL配置....
        });
    }

	/**
	 * 建议重写此方法，提供唯一的缓存Key
	 */
	@Override
	protected Object getAuthorizationCacheKey(PrincipalCollection principals) {
		return this.getAuthenticationCacheKey(principals);
	}

	/**
	 * 建议重写此方法，提供唯一的缓存Key
	 */
	@SuppressWarnings("unchecked")
	@Override
	protected Object getAuthenticationCacheKey(PrincipalCollection principals) {
		StringBuilder sb = new StringBuilder();
		principals.forEach(principal -> {
			sb.append(((User) principal).getId());
		});

		return sb.toString();
	}