# Apache Shiro Reference Documentation ## I ntroduction to Apache Shiro ## What is Apache Shiro? Apache Shiro 是一个强大而灵活的开源安全框架，它干净利落地处理身份认证，授权，企业会话管理和加密。 Apache Shiro 的首要目标是易于使用和理解。安全有时候是很复杂的，甚至是痛苦 的，但它没有必要这样。框架应该尽可能掩盖复杂的地方，露出一个干净而直观的 API，来简化开发人员在使他们的应用程序安全上的努力。 以下是你可以用 Apache Shiro 所做的事情: • 验证用户来核实他们的身份 • 对用户执行访问控制，如： - 判断用户是否被分配了一个确定的安全角色 • 判断用户是否被允许做某事 在任何环境下使用 Session API，即使没有 Web 或 EJB API 中。 Shiro 视图在所有应用程序环境下实现这些目标——从最简单的命令行应用程序到最大的企业应用，不强制依赖其他第三方框架，容器，或应用服务器。当然，该项目的目标是尽可能地融入到这些环境，但它能够在任何环境下立即可用。 ## Apache Shiro Features Apache Shiro 是一个拥有许多功能的综合性的程序安全框架。下面的图表展示了 Shiro 的重点，并且这个参考手册也会与之类似的被组织起来：

#### Apache Shiro 1.2.x Reference Manual 中文翻译 ## 目錄 介绍 0 I. Overview 总览 1 1. Introduction 介绍 1.1 2. Tutorial 教程 1.2 3. Architecture 架构 1.3 4. Configuration 配置 1.4 II. Core 核心 2 5. Application Security With Apache Shiro 用 Shiro 保护你的应用安全 8.3 23. CacheManager 缓存管理 8.4 24. Apache Shiro Cryptography Features 加密功能 8.5 #### apache-shiro-1.2.x-reference ## APACHE SHIRO Chinese translation of Apache Shiro 1.2.x Reference Manual and the other article collection. The laset version of Apache Shiro is 1.2.x. You can also see the demos of the reference at https://github.com/waylau/apache-shiro-1

# 跟我学Shiro 张开涛著 示例：https://github.com/zhangkaitao/shiro-example 博客：http://jinnianshilongnian.iteye.com/ 交流群：231889722/134755960 ## 写给自己的话 简单，踏实。 2014年2月21日20点18分 谨记 ## 目录 写给自己的话.....1 目录.. ...2 第一章 SHIRO 简介.....5 简介.....5 第二章 身份验证.....9 环境准备.....9 登录/退出.....10 身份认证流程.....12 REALM.....12 AUTHENTICATOR 及 AUTHENTICATIONSTRATEGY.....16 第三章 授权.... 104 SESSION 缓存 ..... 106 第十二章 与 SPRING 集成 ..... 107 JAVASE 应用 ..... 107 WEB 应用 ..... 109 SHIRO 权限注解 ..... 112 第十三章 REMEMBERME ..... 114 REMEMBERME 配置 ..... 114 第十四章 SSL ..... 117 第十五章 单点登录

# Spring Security Shiro Plugin - Reference Documentation Burt Beckwith Version 3.1.2.BUILD-SNAPSHOT ## Table of Contents 1. Introduction to the Spring Security Shiro Plugin ..... 1 1.1. History . service methods ..... 5 2.4. Using Shiro directly ..... 5 3. Configuration ..... 6 # Chapter 1. Introduction to the Spring Security Shiro Plugin The Spring Security Shiro plugin adds some support for using combining Spring Security and Shiro. It currently only supports Shiro ACLs, since Spring Security ACLs are very powerful but can be very cumbersome to use, and the Shiro approach is straightforward and

Shiro support for the Spring Security plugin ## Shiro support for the Spring Security plugin - Reference Documentation Authors: Burt Beckwith Version: 0.1 ## Table of Contents 1 Introduction 1.1 History 1 Introduction The Spring Security Shiro plugin adds some support for using a hybrid approach combining Spring Security and Shiro. It currently only supports Shiro ACLs, since Spring Security ACLs are are very powerful but can be very cumbersome to use, and the Shiro approach is straightforward and simple. The majority of the authentication and authorization work is still done by Spring Security. This

# Shiro support for the Spring Security plugin - Reference Documentation Authors: Burt Beckwith Version: 1.0.0 ## Table of Contents 1 Introduction to the Spring Security Shiro Plugin 1.1 History the Spring Security Shiro Plugin The Spring Security Shiro plugin adds some support for using a hybrid approach combining Spring Security and Shiro. It currently only supports Shiro ACLs, since Spring Spring Security ACLs are very powerful but can be very cumbersome to use, and the Shiro approach is straightforward and simple. The majority of the authentication and authorization work is still done by Spring

Apache OFBiz $ ^{®} $ The Apache OFBiz Project Version Trunk ## Table of Contents 1. System requirements ..... 2 2. Quick start ..... 3 2.1. Download the Gradle wrapper: ..... 3 2.2. Prepare file in ASCIIDoc format you may want to see it at HTML or PDF format Welcome to Apache OFBiz! A powerful top level Apache software project. OFBiz is an Enterprise Resource Planning (ERP) System written reading section. ### 3. Security If you find a security issue, please report it to: security @ ofbiz.apache.org. Once proper mitigations to the security issues are complete the OFBiz team will disclose this

## THE APACHE SOFTWARE FOUNDATION # 解读Apache 演讲者 Craig Russell Justin Mclean 姜宁 # 本演讲包含了 Bertrand Delacretaz, Roman Shaposhnik 以及其它ASF贡献者的工作 ## Craig Russell介绍 • 软件架构师 ■ Object Data Management Group (MySQL) • Apache Committer - from 2005 • Apache Member - from 2007 • Apache Secretary - from 2010-2019 • Apache 孵化器管理委员成员 • Apache 董事会主席 ## Apache 软件基金会: 世界上最大的开源基金会 ## Apache基金会的使命 Apache软基金会 (ASF) 501(c)(3) 注册公益性组织。ASF 的使命是通过向加入 ASF 的志同道合的软件项目社区提供服务，为公众提供开源软件。 ASF提供了一个独立于任何公司影响力的中立空间，保证其中的项目可以在商业友好Apache许可证2.0下繁荣发展，为公众利益创建开源软件。 公开成立于1999年的公益组织 使命: 为公众利益提供免费的软件。 ![Image](/uploads/documents/c/6/7/4/c

### THE APACHE $ ^{®} $ SOFTWARE FOUNDATION apache.org ## Apache Explained Presented by Roman Shaposhnik Craig Russell Justin Mclean Including original work of Bertrand Delacretaz and other Cloudera → Apache Committer - from 2010 → Apache Member - from 2014 → Apache Board Member and VP of Legal Affairs - from 2018 → Member, Incubator Project Management Committee, Bigdata ## Apache Software Software Foundation: The World’s Largest Open Source Foundation ## The ASF's Mission The Apache Software Foundation (ASF) is a US 501(c)(3) charitable organization. Its mission is to provide Open Source

## THE APACHE SOFTWARE FOUNDATION ## Apache Explained Presented by Craig Russell Justin Mclean Willem Jiang Including original work of Bertrand Delacretaz, Roman Shaposhnik and other amazing ASF contributors (MySQL) • Apache Committer - from 2005 • Apache Member - from 2007 • Apache Secretary - 2010 - 2019 • Member, Incubator Project Management Committee • Chairman, Apache Board of Directors ## Apache Software Software Foundation: The World's Largest Open Source Foundation ## The ASF's Mission The Apache Software Foundation (ASF) is a US 501(c)(3) charitable organization. Its mission is to provide Open