Apache Shiro
| Company type | Open source software project |
|---|---|
| Industry | Computer software, Security software |
| Predecessor | JSecurity |
| Founded | 2004 |
| Founder | Les Hazlewood, Jeremy Haile |
| Headquarters | United States |
| Products | Security framework for Java applications (authentication, authorization, cryptography, session management) |
| Website | shiro |
Apache Shiro (pronounced "sheeroh", derived from the Japanese term for castle) is a Java-based open-source security framework that offers capabilities in authentication, authorization, cryptography, and session management. Engineered for simplicity, Shiro provides powerful security tools tailored for applications running on the JVM.
History
The project began as JSecurity in 2004, initiated by Les Hazlewood and Jeremy Haile in response to the absence of adequate Java security frameworks at the application layer and dissatisfaction with JAAS. Between 2004 and 2008, JSecurity was hosted on SourceForge with contributions from developers such as Peter Ledbrook, Alan Ditzel, and Tim Veil.
In 2008, JSecurity joined the Apache Software Foundation (ASF) Incubator Program aiming to become a top-level Apache project. During this incubation phase, it was initially renamed Ki before adopting the name Shiro due to trademark conflicts. The development team grew with additional contributors like Kalle Korhonen. The release of version 1.0 in July 2010 signified a stable codebase. Following this milestone, a Project Management Committee was established with Les Hazlewood serving as chairperson. On September 22, 2010, Shiro was officially designated as a top-level project within ASF.
Releases
- 1.12.0 (2023-07-18, current stable)
- 1.11.0 (2023-01-13)
- 1.10.1 (2022-11-19)
- 1.10.0 (2022-10-10)
- 1.9.1 (2022-06-28)
- 1.9.0 (2022-03-22)
- 1.8.0 (2021-08-26)
- 1.7.1 (2021-01-31)
- 1.7.0 (2020-10-29)
- 1.6.0 (2020-08-17)
- 1.5.3 (2020-05-03)
- 1.5.2 (2020-03-23)
- 1.5.1 (2020-02-23)
- 1.5.0 (2020-01-24)
- 1.4.2 (2019-11-18)
- 1.4.1 (2019-04-18)
- 1.4.0 (2017-05-05)
- 1.3.2 (2016-09-11)
- 1.3.1 (2016-08-29)
- 1.3.0 (2016-07-25)
- 1.2.6 (2016-06-28)
- 1.2.5 (2016-05-24)
- 1.2.4 (2015-07-07)
- 1.2.3 (2014-02-25)
- 1.2.2 (2013-05-15)
- 1.2.1 (2012-07-28)
- 1.2.0 (2012-01-24)
- 1.1.0 (2010-11-01)
See also
- Application security
- Java Authentication and Authorization Service (JAAS)
- Enterprise JavaBean#Security EJB Container-Managed Security
- JGuard, an LGPL licensed security framework
- Spring Security, an Apache Java security solution