Can't you secure your applications? Do you feel that existing Java security solutions are difficult to use and you're still confused?
Apache Shiro, a Java security framework that provides a simple but powerful approach to application security.
Apache Shiro is powerful and easy to use in Java security framework that performs authentication, authorization, cryptography, and session management and can be used to secure all applications, from command-line applications, mobile applications to the largest web and enterprise applications.
Shiro provides the application security API to perform the following aspects:
*Authentication - proving the identity of users, often called user 'login'.
*Authorization - access control
*Cryptography - protecting or hiding data from prying eyes
*Session management - by time-sensitive state users
Shiro also supports certain auxiliary functions, such as web application security, unit testing, and multithreading support, but they exist to reinforce the four above known as primary.*Authorization - access control
*Cryptography - protecting or hiding data from prying eyes
*Session management - by time-sensitive state users
Why use it?
Easy to use:
The ultimate goal of the project is ease of use. Application security can be extremely confusing and frustrating. So easy to use that beginner programmers can start using it.
Flexible :
Apache Shiro can work in any application environment. While it works in Web, EJB, and IoC environments it doesn't need them.
Pluggable :
You will see Shiro seamlessly integrated with frameworks like Spring, Grails, Wicket, Tapestry, Mule, Apache Camel, Vaadin, and many others.
Supported :
Apache Shiro is part of the Apache Software Foundation, a proven organization to act in the best interest of its community. Project development and user groups have respectful citizens ready to help.
This content is for members only. Log in or register for free to see it.
Source