Apache Shiro Reviews

Several years ago we integrated Apache Shiro to an OSGI application and it was one of the few security frameworks that played nicely. Since it was such a nice experience we decided to contribute to the project and submitted integration with EhCache. The whole process was really smooth and the community friendly

Not sure, we didn't have any issues working with the framework

Added authentication, authorization and session management to the application

.Easy to implement and very easy to maintain

Nothing that I could remember of to dislike the library

We have used

It is really easy to integrate. Very widely used security framework, which makes it reliable. You can understand how to implement without too much effort. We used it for authentication and authorization of API requests, which did a nice job. And some implementations are highly customizable.

Before using Shiro I had done some research, I compared Shiro and 2 other popular security frameworks. One point Shiro was behind was code quality. Their code quality was not as good as other candidates. And the iterations are not so fast, they are still developing but I guess with limited resource.

If you need a fast implementation of security layer, Apache Shiro can be a very good solution. A mid level developer can handle the development quite good. Of course you need to consider your business and tech needs. For example there can be more suitable frameworks which can fit into your tech stack, maybe offer some extra features.

We integrated our platform login with LDAP. I used Apache Shiro there, it was easy and convenient.

Their compatibilty of using for persmission with our application. we like the way it handle security things in our product. We mainly use for user valid user permission validation. we have different types of users and we have to distinguish them according to the roles, and for roles we are giving persmission to that roles . like admin, pro, default.Apach handle it so easily like no any other platform gave that support till now as of my knowledge. we suggest to use apache shiro for organization , its good . we are not suing in one team but also we are using in multiple projects.

it is good, but its quite complex and giving only basic security. At first when i started using shiro the its nery difficult to understand, becuase Apach gave us so many features like an ocean of features but we have ot use only shiro and in shiro also lots of feature are available in which we have to use only few of them. So for that we have to explore a lot to search what we exactly need in shiro . yeah i face lot of challenges but at the end when i understood shiro and their functionlity then it svery good to use and work. we realyy apprecitate the way shiro gave their features. so may be it has some downside still its very good to use and we are using it our products.

i suggest peple to use this. we are using in very lasge amount in our lots of product so we suggest to use it also.

Permission checks for different types of user I used apache shiro for permission check in our application.

.configuring subject and maintaining app level authentication and authorization was easy using shiro

would be great if the configuration can be done through java class itself using annotations rather than xml (not sure if it was introduced now)

authentication and authorization

roles and permissions management

I am using Shiro security in my product. And I think the way you can set up the security and permissions using makes my application flexible and secure.

Shiro doesn't support SSO like AD and others very well. Otherwise easy to use.

With the help of Shiro, I solved the permissions related issues in my product. I need to set up permission up to field level with curd permissions both front end and backend. And Shiro helps me very well here.

The fact that I can manage the authorization and authentication to all my users in a single intuitive point.

In general, it's a great tool, but it was a little hard for me to find detailed documentation for advanced features.

If you're looking for an easy-used security framework based in Java programming language, then Shiro is the right option for you.

At first, we were using LDAP to manage the security permissions of our users, but when we migrated to the cloud we were really struggling with that. When we started using Apache Shiro, things became much more easier.

Shiro offers an out of the box functionality to secure your apps easily and without any hassle. It's the library we use in a Grails application we built and it's always reliable.

It might be hard to get into Shiro's terminology of Realms

Authorization and

Apache Shiro is a fantastic utility for managing my security measures in Java framework of my organization. It can effectively implement user authentication, server-end encryption, and client session management through its excellent API features. It gives me dynamic annotations, which helps with quick metadata evaluation during my compilation time itself.

It needs improvements on providing transparency for developers without adding a lot of complexities in application development. This will aid in the complete implementation of a user-friendly and flexible security model.

Apache Shiro governs plenty of support in terms of PAM and AOP inspectors which are greatly responsible for the authentication and authorization of users The caching support features is great as it enhances the performance of its JAAS security operations. Also, it has superb encoding and decoding components for my diverse data formats with the help of its web functionalities.

We are using it for security frameworks and the best thing is it’s implementation which is easy to do.

Quality of code was not good due to limited resources

We are implementing API security operations.