13:45-Intro to Apache Shiro.pdf - ApacheCon

More documents

Recommendations

Info

Logging Out One method: //Logs the user out, relinquishes account//data, and invalidates any SessionSecurityUtils.getSubject().logout();App-‐specific log-‐out logic: Before/Amer the call Listen for Authen9ca9on or S<strong>to</strong>ppedSession events.
Coming in 1.3, 2.0 • Typesafe EventBus • OOTB Hazelcast Session clustering • Lower coupling in components Composi9on over Inheritance • Stronger JEE (CDI, JSF) support • Default Realm Pluggable authc lookup, authz lookup • Default Authen9ca9on Filter (mul9ple HTTP schemes + UI fallback)
Page 7: Authen+ca+on Defined Identity veri
Page 10 and 11: Step 1: Collec+ng Principals &
Page 12 and 13: Step 3: Grant Access or Handle
Page 15 and 16: How does it work? Subject .login
Page 17 and 18: How does it work? Subject .login
Page 19 and 20: Authoriza+on Defined Process of
Page 21 and 22: Roles Defined • Implicit or Ex
Page 23 and 24: Authoriza+on Features • Subject-
Page 25 and 26: Programma+c Authoriza+on Role Che
Page 27 and 28: Programma+c Authoriza+on Permissio
Page 29 and 30: Annota+on Authoriza+on Permission
Page 31 and 32: Session Management Defined Managi
Page 33 and 34: Acquiring and Crea+ng Sessions S
Page 35 and 36: Cryptography Authen9ca9on Session M
Page 37 and 38: Ciphers Defined Encryp9on and de
Page 39 and 40: Cryptography Features Simplicity
Page 41 and 42: Example: Plaintext (image courtes
Page 43 and 44: Example: Shiro Defaults (image c
Page 45 and 46: Hash Features • Default interfa
Page 47 and 48: Intui+ve OO Hash API //some exam
Page 49 and 50: Web Support Features • Simple
Page 51 and 52: shiro.ini [main]ldapRealm = org.apa
Page 53 and 54: JSP TagLibs
Page 55: Auxiliary Features • Threading
Page 59 and 60: Stormpath: Cloud Deployment Appli

13:45-Intro to Apache Shiro.pdf - ApacheCon

Create successful ePaper yourself

Delete template?

Save as template?