Apache Shiro (pronounced "sheeroh", a Japanese word for
castle
A castle is a type of fortification, fortified structure built during the Middle Ages predominantly by the nobility or royalty and by Military order (monastic society), military orders. Scholars usually consider a ''castle'' to be the private ...
) is an open source software security framework that performs
authentication
Authentication (from ''authentikos'', "real, genuine", from αὐθέντης ''authentes'', "author") is the act of proving an Logical assertion, assertion, such as the Digital identity, identity of a computer system user. In contrast with iden ...
,
authorization
Authorization or authorisation (see American and British English spelling differences#-ise, -ize (-isation, -ization), spelling differences), in information security, computer security and identity management, IAM (Identity and Access Managemen ...
,
cryptography
Cryptography, or cryptology (from "hidden, secret"; and ''graphein'', "to write", or ''-logy, -logia'', "study", respectively), is the practice and study of techniques for secure communication in the presence of Adversary (cryptography), ...
and
session management
In computer science and networking in particular, a session is a time-delimited two-way link, a practical (relatively high) layer in the TCP/IP protocol enabling interactive expression and information exchange between two or more communication d ...
. Shiro has been designed to be an intuitive and easy-to-use framework while still providing robust security features.
History
Shiro's predecessor, JSecurity, was founded in 2004 by Les Hazlewood and Jeremy Haile because they could not find a suitable Java security framework that operated well at the application level and they were frustrated with
JAAS. Between 2004 and 2008, JSecurity was hosted on
SourceForge
SourceForge is a web service founded by Geoffrey B. Jeffery, Tim Perdue, and Drew Streib in November 1999. SourceForge provides a centralized software discovery platform, including an online platform for managing and hosting open-source soft ...
and its committer list grew to include Peter Ledbrook, Alan Ditzel, Tim Veil.
In 2008, JSecurity project was submitted to the
Apache Software Foundation
The Apache Software Foundation ( ; ASF) is an American nonprofit corporation (classified as a 501(c)(3) organization in the United States) to support a number of open-source software projects. The ASF was formed from a group of developers of the ...
(ASF) and accepted into their Incubator Program to be stewarded by mentors in order to become a top level Apache Project.
Under the ASF's Incubator, Jsecurity was renamed Ki (pronounced Key) and shortly later renamed Shiro by the community because of trademark concerns.
The project continued to grow while in the Apache Incubator, adding Kalle Korhonen as a project committer. And in July 2010, the Shiro community released its official version 1.0, marking a period of stability in the code base.
Following the release of version 1.0, the Shiro community created a Project Management Committee and elected Les Hazlewood as its chair. On September 22, 2010, Shiro became a ''top level project'' (TLP) in the Apache Software Foundation.
Releases
* 1.12.0 on 2023-07-18 (current stable release)
* 1.11.0 on 2023-01-13
* 1.10.1 on 2022-11-19
* 1.10.0 on 2022-10-10
* 1.9.1 on 2022-06-28
* 1.9.0 on 2022-03-22
* 1.8.0 on 2021-08-26
* 1.7.1 on 2021-01-31
* 1.7.0 on 2020-10-29
* 1.6.0 on 2020-08-17
* 1.5.3 on 2020-05-03
* 1.5.2 on 2020-03-23
* 1.5.1 on 2020-02-23
* 1.5.0 on 2020-01-24
* 1.4.2 on 2019-11-18
* 1.4.1 on 2019-04-18
* 1.4.0 on 2017-05-05
* 1.3.2 on 2016-09-11
* 1.3.1 on 2016-08-29
* 1.3.0 on 2016-07-25
* 1.2.6 on 2016-06-28
* 1.2.5 on 2016-05-24
* 1.2.4 on 2015-07-07
* 1.2.3 on 2014-02-25
* 1.2.2 on 2013-05-15
* 1.2.1 on 2012-07-28
* 1.2.0 on 2012-01-24
* 1.1.0 on 2010-11-01
See also
*
Application security
Application security (short AppSec) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve security practices and, through that, to find, fix and preferably prevent security is ...
*
Java Authentication and Authorization Service
Java Authentication and Authorization Service, or JAAS, pronounced "Jazz", is the Java implementation of the standard Pluggable Authentication Module (PAM) information security framework.
JAAS was introduced as an extension library to the Java ...
(JAAS)
*
Enterprise JavaBean#Security EJB Container-Managed Security
JGuard, an LGPL-licensed security framework
*
Spring Security
Spring Security is a Java/Java EE framework that provides authentication, authorization and other security features for enterprise applications. The project was started in late 2003 as 'Acegi Security' (pronounced ''Ah-see-gee'' , whose letters ar ...
, an Apache-licensed Java security framework
References
External links
*
{{Apache Software Foundation
Shiro
Free security software
Java (programming language) libraries
Java enterprise platform
Computer access control frameworks