13:45-Intro to Apache Shiro.pdf - ApacheCon

More documents

Recommendations

Info

Permissions Defined • Most a<strong>to</strong>mic security element • Describes resource types and their behavior • The “what” of an applica9on • Does not define “who” • AKA “rights”
Roles Defined • Implicit or Explicit construct • Implicit: Name only • Explicit: A named collec9on of Permissions Allows behavior aggrega9on Enables dynamic (run9me) altera9on of user abili9es.
Page 7: Authen+ca+on Defined Identity veri
Page 10 and 11: Step 1: Collec+ng Principals &
Page 12 and 13: Step 3: Grant Access or Handle
Page 15 and 16: How does it work? Subject .login
Page 17 and 18: How does it work? Subject .login
Page 19: Authoriza+on Defined Process of
Page 23 and 24: Authoriza+on Features • Subject-
Page 25 and 26: Programma+c Authoriza+on Role Che
Page 27 and 28: Programma+c Authoriza+on Permissio
Page 29 and 30: Annota+on Authoriza+on Permission
Page 31 and 32: Session Management Defined Managi
Page 33 and 34: Acquiring and Crea+ng Sessions S
Page 35 and 36: Cryptography Authen9ca9on Session M
Page 37 and 38: Ciphers Defined Encryp9on and de
Page 39 and 40: Cryptography Features Simplicity
Page 41 and 42: Example: Plaintext (image courtes
Page 43 and 44: Example: Shiro Defaults (image c
Page 45 and 46: Hash Features • Default interfa
Page 47 and 48: Intui+ve OO Hash API //some exam
Page 49 and 50: Web Support Features • Simple
Page 51 and 52: shiro.ini [main]ldapRealm = org.apa
Page 53 and 54: JSP TagLibs
Page 55 and 56: Auxiliary Features • Threading
Page 57 and 58: Coming in 1.3, 2.0 • Typesafe
Page 59 and 60: Stormpath: Cloud Deployment Appli

13:45-Intro to Apache Shiro.pdf - ApacheCon

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?