13:45-Intro to Apache Shiro.pdf - ApacheCon

More documents

Recommendations

Info

How to Authorize with Shiro Mul9ple means of checking access control: • Programma9cally • JDK 1.5 annota9ons & AOP • JSP/GSP/JSF* TagLibs (web support)
Programma+c Authoriza+on Role Check //get the current SubjectSubject currentUser =SecurityUtils.getSubject();if (currentUser.hasRole(“administrator”)) {button //show the ‘delete user’} else {(?‏button //don’t show the}
Page 7: Authen+ca+on Defined Identity veri
Page 10 and 11: Step 1: Collec+ng Principals &
Page 12 and 13: Step 3: Grant Access or Handle
Page 15 and 16: How does it work? Subject .login
Page 17 and 18: How does it work? Subject .login
Page 19 and 20: Authoriza+on Defined Process of
Page 21 and 22: Roles Defined • Implicit or Ex
Page 23: Authoriza+on Features • Subject-
Page 27 and 28: Programma+c Authoriza+on Permissio
Page 29 and 30: Annota+on Authoriza+on Permission
Page 31 and 32: Session Management Defined Managi
Page 33 and 34: Acquiring and Crea+ng Sessions S
Page 35 and 36: Cryptography Authen9ca9on Session M
Page 37 and 38: Ciphers Defined Encryp9on and de
Page 39 and 40: Cryptography Features Simplicity
Page 41 and 42: Example: Plaintext (image courtes
Page 43 and 44: Example: Shiro Defaults (image c
Page 45 and 46: Hash Features • Default interfa
Page 47 and 48: Intui+ve OO Hash API //some exam
Page 49 and 50: Web Support Features • Simple
Page 51 and 52: shiro.ini [main]ldapRealm = org.apa
Page 53 and 54: JSP TagLibs
Page 55 and 56: Auxiliary Features • Threading
Page 57 and 58: Coming in 1.3, 2.0 • Typesafe
Page 59 and 60: Stormpath: Cloud Deployment Appli

13:45-Intro to Apache Shiro.pdf - ApacheCon

Create successful ePaper yourself

Delete template?

Save as template?