Questions tagged [shiro]

Apache Shiro is a Java security framework that performs authentication, authorization, cryptography, and session management.

Apache Shiro is a Java security framework that performs authentication, authorization, cryptography, and session management. Shiro's API provides mechanisms to secure a variety of application types, including mobile software, web apps, and enterprise systems.

Shiro can be configured using .ini files, programmatic setup, or a combination of both. For more information see:

1252 questions
3
votes
0 answers

Apache Shiro behaves weird in Play Framework environment?

We are moving our previous project to Play Framework 2.4. In previous project (Vaadin 7), we used Apache Shiro without any issues. Now, in Play Framework, we're having issues with Apache shiro. A user is able to log in. But then refresh the page…
ipkiss
  • 13,311
  • 33
  • 88
  • 123
3
votes
1 answer

Embedded Jetty + ShiroFilter problems

I haven't asked questions here yet, but after around 2 months of struggle on this, I decided to finally ask for help. I am new to Java, this is actually my first project (just for fun), in which I am trying to create a web server with Jetty (without…
3
votes
2 answers

Shiro Filter without redirect

I have a REST-Interface that gets called from the Front-End code via jquery-Ajax-Requests. The called url is secured with the following shiro.ini: /api/** = authc If the user is not authenticated Shiro wants to redirect to the login-Url and the…
3
votes
1 answer

Can apache Shiro be used to build an Identity Provider?

I am looking with Apache shrio framework. Looking at it authentication and authorization features can i build Identity server provider using shrio framework. Is it possible to have features like, Single Sign On SAML support Federation based on…
Sohan
  • 6,252
  • 5
  • 35
  • 56
3
votes
1 answer

Integrating Apache Shiro with Play 1.2

I've developed an application using Play Framework 1.2. I've read on several sites that it is possible to integrate Apache Shiro with Play 2.x. However, is there any example available to integrate Apache Shiro with the version 1.x of the Play…
Aneurysmo
  • 303
  • 1
  • 3
  • 9
3
votes
1 answer

Authentication and Session Management in distributed spring application

I'm working on migrating a single module spring web application into a JMS based modular architecture. This link has the structure of the application right now and my goal. I'll be employing a CAS based SSO server which does the authentication. The…
Firdous Amir
  • 1,297
  • 5
  • 21
  • 39
3
votes
0 answers

Can active directory alone support single sign on in shiro without using CAS?

I have mapped an active directory in shiro which authenticates user properly. Now I want to do a single sign on within two web application which is mapped with the same active directory. Is it possible to do a single sign on without using…
Madhuri Gaur
  • 131
  • 4
3
votes
0 answers

Vaadin & Apache Shiro - Session Expired

User logs in ok, logs out ok, but if he immediately makes another attempt to log in (input login/pass + enter) he receives popup Session Expired Take note of any unsaved data, and click here or press ESC key to continue. Log in operation handled by…
tmporaries
  • 1,523
  • 8
  • 25
  • 39
3
votes
1 answer

How do I simulate session cookies for RESTful service (Grails, Shiro)?

I have an existing Grails application which uses the Nimble plugin (therefore Apache Shiro security underneath). I am adding a RESTful JSON API to it. My login method manages to get the session ID from Shiro and returns it to the client: class…
John M
  • 1,469
  • 17
  • 41
3
votes
1 answer

Dynamic instance-level permissions with Apache Shiro

I am creating a REST service in Java using Dropwizard in combination with Apache Shiro for authentication and authorization. I extended JdbcRealm in order to make Shiro use my PostgreSQL database (which I access through Hibernate). Authentication…
Marco Lamina
  • 3,326
  • 4
  • 22
  • 22
3
votes
2 answers

Shiro, Spring application appending jsessionid to each URL

I'm currently developing application with Spring and Shiro. I'm deploying to Tomcat 7 and in production I'm using nginx as reverse proxy. Everything works smoothly (well kind of) except that the jsessionid is added to each URL when accessing the…
Stugal
  • 850
  • 1
  • 8
  • 24
3
votes
2 answers

How to show firstname of the user in grails with shiro

i am new to grails and trying to show the firstname of the user with: "shiro:principal property="firstName" but it gives me the following error: Error executing tag 'shiro:principal': No such property: firstName for class: java.lang.String If i…
user
  • 41
  • 2
3
votes
3 answers

How to integrate Apache Shiro with AngularJS

I am having REST API with JPA and for login framework I am using Apache Shiro. Is it possible to integrate Apache Shiro with AngularJS and If YES Please give some example to workout with it. Thanks
Amit Mourya
  • 538
  • 1
  • 7
  • 18
3
votes
0 answers

Configure Apache Shiro for MySQL with SHA256 Passwords

I am trying to gather the necessary information to be successful with my objective. My goal is simple, take a advantage of Shiro for authentication and authorization. I wish to deploy shiro in a Java Web Application context. I want users to be able…
medokr
  • 441
  • 1
  • 5
  • 16
3
votes
1 answer

Logout all still-logged-in users from WebApp using Shiro and Spring WebMVC (Java8, Spring 4.x)

I'm fairly new to shiro, so here's my question: I've implemented Shiro into an application using Spring WebMVC / Spring Framework (4.x)on a Tomcat 8 container. The Roles and Permissions are working fine so far, the login, too, but Problem is, that…
Dominik
  • 2,801
  • 2
  • 33
  • 45