Apache Shiro

Apache Shiro bundles together various features and toolkits for protecting and enhancing the security of a Java website, Web or desktop application.

Shiro can be used from simple local apps to large intranet structures or enterprise networks.

Besides the classic CLI, Web or desktop environments, the framework is mobile compatible as well.

Shiro lets programmers secure their code against unauthorized access, with the help of a simple cryptography API, user authentication, an authorization toolkit, and advanced session controllers.

Integrations with other Java technologies are also included, covering tools like Grails, Google App Engine, the Play Framework, Apache Wicket, and Lift.

What is new in this release:

• Fixed Bugs:
• ReflectionBuilder has invalid log message format
• runAs feature doesn't work
• Creating a subject should not create a session
• DefaultSecurityManager has invalid SLF4J log instruction
• Authentication cache
• Source Tarball doesn't Build
• PasswordMatcher should support character arrays
• DomainPermission(string, string) constructor sets targets to the same value as actions
• Basic authentication issue when using COLON character
• PropertiesRealm unable to reload Properties

What is new in version 1.2.3:

• Fixed Bugs:
• ReflectionBuilder has invalid log message format
• runAs feature doesn't work
• Creating a subject should not create a session
• DefaultSecurityManager has invalid SLF4J log instruction
• Authentication cache
• Source Tarball doesn't Build
• PasswordMatcher should support character arrays
• DomainPermission(string, string) constructor sets targets to the same value as actions
• Basic authentication issue when using COLON character
• PropertiesRealm unable to reload Properties