Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
authentication, authorization, enterprise session management, single sign-on and cryptography services.
| License | Apache 2.0 |
|---|---|
| Tags | bundlesecuritywebapacheshiroosgi |
| Organization | The Apache Software Foundation |
| HomePage | https://shiro.apache.org/shiro-web/ |
| Date | Nov 13, 2024 |
| Files | pom (4 KB) bundle (173 KB) View All |
| Repositories | CentralAlfresco |
| Ranking | #1277 in MvnRepository (See Top Artifacts) |
| Used By | 431 artifacts |
| Vulnerabilities | Vulnerabilities from dependencies: CVE-2024-38828 CVE-2024-38827 CVE-2024-38820 View 3 more ... |
Compile Dependencies (2)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| Security Apache 2.0 | | org.apache.shiro » shiro-core | 2.0.2 | ✔ |
BSD 3-clause |  | org.owasp.encoder » encoder | 1.3.1 | ✔ |
Provided Dependencies (4)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| Java Spec EPL 2.0GPL |  | javax.servlet » javax.servlet-api | 4.0.1 | 6.1.0 |
| Java Spec CDDLGPL 2.0 | | javax.servlet.jsp » jsp-api | 2.2 | 2.3.3 |
| JSP Tag Library Apache 2.0 |  | org.apache.taglibs » taglibs-standard-spec | 1.2.5 | ✔ |
| JSP Tag Library Apache 2.0 | | org.apache.taglibs » taglibs-standard-impl | 1.2.5 | ✔ |
Test Dependencies (13)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| JVM Languages Apache 2.0 |  | org.apache.groovy » groovy | 4.0.23 | 4.0.24 |
| Logging Bridge Apache 2.0 |  | org.apache.logging.log4j » log4j-slf4j2-impl | 2.24.1 | 2.24.3 |
| Logging Apache 2.0 | | org.apache.logging.log4j » log4j-core | 2.24.1 | 2.24.3 |
Apache 2.0 | | org.apache.shiro » shiro-config-ogdl | 2.0.2 | ✔ |
| Security Apache 2.0 | | org.apache.shiro » shiro-core | 2.0.2 | ✔ |
| Assertion Apache 2.0 |  | org.assertj » assertj-core | 3.26.3 | 3.27.2 |
| Mocking Apache 2.0 |  | org.easymock » easymock | 5.4.0 | 5.5.0 |
| Testing BSD 3-clause |  | org.hamcrest » hamcrest-core | 3.0 | ✔ |
| Testing EPL 2.0 |  | org.junit.jupiter » junit-jupiter-params | 5.11.3 | 5.11.4 |
| Testing EPL 2.0 | | org.junit.jupiter » junit-jupiter-api | 5.11.3 | 5.11.4 |
| Testing EPL 2.0 | | org.junit.jupiter » junit-jupiter-engine | 5.11.3 | 5.11.4 |
| Mocking MIT |  | org.mockito » mockito-core | 5.14.2 | 5.15.2 |
| Logging Bridge Apache 2.0 |  | org.slf4j » jcl-over-slf4j | 2.0.16 | ✔ |
Managed Dependencies (73)
Licenses
| License | URL |
|---|---|
| Apache-2.0 | https://www.apache.org/licenses/LICENSE-2.0.txt |
Developers
| Name | Dev Id | Roles | Organization | |
|---|---|---|---|---|
| Allan Ditzel | aditzel<at>apache.org | aditzel | Apache Software Foundation | |
| Jeremy Haile | jhaile<at>apache.org | jhaile | Mobilization Labs | |
| Les Hazlewood | lhazlewood<at>apache.org | lhazlewood | Stormpath | |
| Kalle Korhonen | kaosko<at>apache.org | kaosko | Apache Software Foundation | |
| Peter Ledbrook | p.ledbrook<at>cacoethes.co.uk | pledbrook | SpringSource | |
| Tim Veil | tveil<at>apache.org | tveil | ||
| Brian Demers | bdemers<at>apache.org | bdemers | PMC Chair | Stormpath |
| Jared Bunting | jbunting<at>apache.org | jbunting | Apache Software Foundation | |
| Francois Papon | fpapon<at>apache.org | fpapon | Yupiik | |
| Benjamin Marwell | bmarwell<at>apache.org | bmarwell | ||
| Lenny Primak | lprimak<at>apache.org | lprimak | Flow Logix |
Mailing Lists
| Name | Details |
|---|---|
| Apache Shiro Users Mailing List |
user-subscribe@shiro.apache.org
user-unsubscribe@shiro.apache.org |
| Apache Shiro Developers Mailing List |
dev-subscribe@shiro.apache.org
dev-unsubscribe@shiro.apache.org |