public class HelloWorld {
    public static void main(String[] args) {
        //1、读取配置文件，初始化工厂
        Factory<SecurityManager> factory=new IniSecurityManagerFactory("classpath:shiro.ini");
        //2、获取SecurityManager实例
        SecurityManager securityManager=factory.getInstance();
        //3、SecurityManager绑定到SecurityUtils
        SecurityUtils.setSecurityManager(securityManager);
        //4、获取到当前的用户
        Subject currentUser =SecurityUtils.getSubject();
        //5、创建令牌 用户名/密码
        UsernamePasswordToken token=new UsernamePasswordToken("wby","123");
        //6、
        try{
            currentUser.login(token);
            System.out.println("身份验证成功");
        }catch (AuthenticationException a){
            a.getStackTrace();
            System.out.println("身份验证失败");
        }

    }
}

[main]
jdbcRealm=org.apache.shiro.realm.jdbc.JdbcRealm
dataSource=com.mchange.v2.c3p0.ComboPooledDataSource
dataSource.driverClass=com.mysql.jdbc.Driver
dataSource.jdbcUrl=jdbc:mysql://localhost:3306/db_shiro
dataSource.user=root
dataSource.password=root
jdbcRealm.dataSource=$dataSource
securityManager.realms=$jdbcRealm

shiro_realm.ini
[users]
wby=123,role1
hrb=123,role1,role2

 public  void testRole() {
       Subject currenUser=ShiroUtil.login("classpath:shiro_role.ini","wby","123");
       //判断用户是否有该角色
       System.out.println(currenUser.hasRole("role1")+""+ currenUser.hasRole("role2"));
       System.out.println();
       //底层for循环调用hasRole
       boolean[] results=currenUser.hasRoles(Arrays.asList("role1","role2","role3"));
       System.out.println(results[0]);
       System.out.println(results[1]);
       System.out.println(results[2]);
       //只要一个不存在就是false
       boolean result=currenUser.hasAllRoles(Arrays.asList("role1","role2","role3"));
       System.out.println(result);
   }

  @Test
    public  void testRole() {
        Subject currenUser=ShiroUtil.login("classpath:shiro_permission.ini","wby","123");
        //判断用户是否有该权限
        System.out.println(currenUser.isPermitted("user:select")); //true
        System.out.println(currenUser.isPermitted("user:delete"));  //false

    }
    
    
    [users]
    wby=123,role1
    hrb=123,role1,role2
    [roles]
    role1=user:select
    role2=user:add,user:update,user.delete

  <%@ taglib prefix="shiro" uri="http://shiro.apache.org/tags" %>