Apache Shiro

{{Infobox software

| name = Apache Shiro

| logo = Apache Shiro logo.svg

| logo size = 180px

| screenshot =

| caption = Easy Application Security for JVM applications

| developer = Apache Software Foundation

| latest release version = 1.12.0

| latest release date = 2023-18-07

| latest preview version =

| latest preview date =

| operating system = Cross-platform

| repo = {{URL|https://gitbox.apache.org/repos/asf?p{{=}}shiro.git|Shiro Repository}}

| programming language = Java

| genre = Application security, Application framework, Web framework

| license = Apache License 2.0

| website = {{Official URL}}

}}

Apache Shiro (pronounced "sheeroh", a Japanese word for castle {{nihongo||城||lead=yes}}) is an open source software security framework that performs authentication, authorization, cryptography and session management. Shiro has been designed to be an intuitive and easy-to-use framework while still providing robust security features.

History

Shiro's predecessor, JSecurity, was founded in 2004 by Les Hazlewood and Jeremy Haile because they could not find a suitable Java security framework that operated well at the application level and they were frustrated with JAAS. Between 2004 and 2008, JSecurity was hosted on SourceForge and its committer list grew to include Peter Ledbrook, Alan Ditzel, Tim Veil.{{cite web|title=JSecurity Proposal to Apache Incubator |url=http://wiki.apache.org/incubator/JSecurityProposal |archive-url=https://web.archive.org/web/20110612074011/http://wiki.apache.org/incubator/JSecurityProposal |archive-date=2011-06-12 |url-status=live }}

In 2008, JSecurity project was submitted to the Apache Software Foundation (ASF) and accepted into their Incubator Program to be stewarded by mentors in order to become a top level Apache Project.{{cite web |title=Apache Incubator Board Reports July 2008 |url=http://wiki.apache.org/incubator/July2008#line-64 |archive-url=https://web.archive.org/web/20110612074026/http://wiki.apache.org/incubator/July2008#line-64 |archive-date=2011-06-12 |url-status=live |access-date=2010-09-12 }} Under the ASF's Incubator, Jsecurity was renamed Ki (pronounced Key) and shortly later renamed Shiro by the community because of trademark concerns.{{cite web |title=Apache Incubator Board Reports April 2009 |url=http://wiki.apache.org/incubator/April2009#line-112 |archive-url=https://web.archive.org/web/20110406110408/http://wiki.apache.org/incubator/April2009#line-112 |archive-date=2011-04-06 |url-status=live |access-date=2010-09-12 }}{{cite web |title=Apache Incubator Board Reports July 2009 |url=http://wiki.apache.org/incubator/July2009#line-170 |archive-url=https://web.archive.org/web/20110406023547/http://wiki.apache.org/incubator/July2009#line-170 |archive-date=2011-04-06 |url-status=live |access-date=2010-09-12 }}

The project continued to grow while in the Apache Incubator, adding Kalle Korhonen as a project committer.{{cite web |title=Apache Incubator Board Reports October 2009 |url=http://wiki.apache.org/incubator/October2009#line-192 |archive-url=https://web.archive.org/web/20110306141251/http://wiki.apache.org/incubator/October2009#line-192 |archive-date=2011-03-06 |url-status=live |access-date=2010-09-12 }} And in July 2010, the Shiro community released its official version 1.0, marking a period of stability in the code base.{{cite web |title=Apache Incubator Board Reports July 2010 |url=http://wiki.apache.org/incubator/July2010#line-219 |archive-url=https://web.archive.org/web/20110122025650/http://wiki.apache.org/incubator/July2010#line-219 |archive-date=2011-01-22 |url-status=live |access-date=2010-09-12 }} Following the release of version 1.0, the Shiro community created a Project Management Committee and elected Les Hazlewood as its chair. On September 22, 2010, Shiro became a top level project (TLP) in the Apache Software Foundation.