Apache Shiro

Apache Shiro

Developer(s)	Apache Software Foundation
Stable release	incubation / March 4, 2009
Written in	Java
Operating system	Cross-platform
Type	java security framework
License	Apache License 2.0
Website	http://incubator.apache.org/shiro/

Apache Shiro (formerly known as Apache jSecurity) is a java security framework designed to have a clean object model, and easy to plugin. Apache Ki has been renamed to Apache Shiro .

Overview

Shiro is designed to be easier to use than JAAS and to be accessible to non-java applications. Shiro supports Role and User permissions, and has bindings for web applications (JSecurityFilter). The permissions can be stored on a LDAP or on a database (via JDBC). It also integrates with Spring framework

Example

 //Permissions can be checked using object-based permissions
 PrinterPermission perm = new PrinterPermission("hplaserjet");
 
 if(perm.isPermitted()) {
     //show print button  
 } else {
     //grey out button 
 }

See also

• Java Authentication and Authorization Service (JAAS)
• Enterprise_JavaBean#Security EJB Container-Managed Security
• jGuard a JAAS implementation

External links

• Apache Shiro homepage
• Apache Shiro Presentation
• JSecurity Tutorial by Bruce Philips