Apache Shiro

Apache Shiro

Developer(s)	Apache Software Foundation
Stable release	incubation / {{|2009|03|04}}
Written in	Java
Operating system	Cross-platform
Type	java security framework
License	Apache License 2.0
Website	http://incubator.apache.org/shiro/

Apache Shiro (formerly known as Apache jSecurity) is a java security framework designed to have a clean object model, and easy to plugin. Apache Ki has been renamed to Apache Shiro .

Overview

Shiro is designed to be easier to use than JAAS and to be accessible to non-java applications. Shiro supports Role and User permissions, and has bindings for web applications (JSecurityFilter). The permissions can be stored on a LDAP or on a database (via JDBC). It also integrates with Spring framework

Example

<source lang="java">

//Permissions can be checked using object-based permissions
PrinterPermission perm = new PrinterPermission("hplaserjet");

if(perm.isPermitted()) {
    //show print button  
} else {
    //grey out button 
}

</source>

See also

• Java Authentication and Authorization Service (JAAS)
• Enterprise_JavaBean#Security EJB Container-Managed Security
• jGuard a JAAS implementation

External links

• Apache Shiro homepage
• Apache Shiro Presentation
• JSecurity Tutorial by Bruce Philips