Apache Shiro 3.0.0 Released with Major Security Hardening and JDK 17 Support
Apache Shiro security framework releases 3.0.0
I am thrilled to announce Apache Shiro 3.0.0, a major release reflecting over two years of dedicated work. This version sets JDK 17 as the new baseline and embraces Jakarta EE 9/10/11 alongside Spring 6/7. We have significantly hardened security by default, enabling case-insensitive path matching and adding the NoAccessFilter. Please note that Shiro 1.x and 2.x are now end-of-life.
Apache Shiro 1.x and 2.x are now considered end-of-life.
- forkerenok
In my junior-to-mid days (ca. 2010) Apache Shiro seemed like a breath of fresh air compared to Spring Security in terms of ease of integration.
Good to see it's still around.
- zipy124
For those like me who hadn't heard of this here is Apache's own product description for context:
Apache Shiro™ is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the largest web and enterprise applications.
- Frieren
I think that many people on startups miss this part of development, robust stable products that do what is expected from them.
Most companies software should not move fast and break things but it should be stable, provide the functionality that their users require and stability is a great asset.
Apache software is reliable in a way that many modern things are not(looking at you platforms like Android, Facebook, etc.).