What is Apache Shiro?
This article will explain what Apache Shiro is for you in detail. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.
Apache Shiro is an open source software owned by ASF (Shiro pronounced "shee-roh", which means "Castle" in Japanese), which provides a powerful and flexible security framework. Provide security for any application-from command line applications to mobile applications to large network and enterprise applications.
Apache Shiro provides authentication, authorization, encryption and session management functions, hides complex problems, and provides a clear and intuitive API so that developers can easily develop their own program security code. And in order to achieve this goal, we do not have to rely on third-party frameworks, containers or services, and of course we can integrate with these environments so that they can be used in any environment.
Shiro focuses on what the Shiro development team calls the "four security cornerstones"-authentication (Authentication), authorization (Authorization), session management (Session Management), and encryption (Cryptography):
Authentication (Authentication): user identification. Sometimes seen as a "login", it is an act of a user proving who he or she is.
Authorization: access control process, such as deciding what (what) can be accessed by who.
Session management (SessionManagement): manages a user's session (sessions), even in an environment without a WEB or EJB container. Manage the time-related status of the user.
Cryptography: use encryption algorithms to protect data more securely and prevent data from being peeped into.
In addition, there are additional features to support and enhance, such as:
Web support: web program security can be easily achieved by using Shiro's web support API.
Caching:Caching is a first-class citizen in Apache Shiro's API, ensuring that security certification acts quickly and effectively.
Concurrency: Apache Shiro supports multithreading
Testing: support testing to help you develop units and integrated test programs to ensure that your code is securely certified as you expect.
"Run As": allows users to use other user identities (if allowed), which is useful in performing some administrative scripts.
"Remember Me": remember the identity of the user throughout the session cycle (sessions), and the user needs to log in only if the program enforces login.
About what Apache Shiro is to share here, I hope the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.
