Shulou(Shulou.com)06/02 Report--

This article mainly introduces "what are the characteristics of Shiro". In daily operation, I believe many people have doubts about the characteristics of Shiro. The editor consulted all kinds of materials and sorted out simple and easy-to-use methods of operation. I hope it will be helpful for you to answer the doubts about "what are the characteristics of Shiro?" Next, please follow the editor to study!

What is Shiro?

Shiro is a powerful and flexible open source security framework that succinctly handles authentication, authorization, enterprise-level session management, and encryption.

The primary goal of Shiro is to be easy to use and understand. Security issues can be very complex and even painful, but this is not necessary. A framework should hide complexity as much as possible, provide concise and intuitive API, and simplify the work of developers. (this may mean Spring Security)

You can use Shiro to do the following:

Authenticate user identity

Control user access, for example:

Determine whether the user has a role

Determine whether the user is allowed to perform an operation

You can use Session API in any environment, even without Web or EJB containers

React to events during authentication, access control, or Session cycles

Display one or more user security data as a "view"

Enable single sign-on (SSO) featur

Enable the remember me feature without logging in

More other features. All features are integrated into an easy-to-use cohesive API

Shiro tries to achieve these goals in all environments-from the simplest command line to the largest enterprise applications. Do not rely on other third-party frameworks, containers, or application servers. Shiro is integrated into these environments as much as possible, but it can also be used directly in any environment.

Shiro characteristics

Shiro is a comprehensive security framework with many functions. The following figure shows the areas that Shiro focuses on, and this reference manual is organized in a similar manner:

Shiro aims at the "four cornerstones of the security framework": authentication, authorization, Session management, and encryption:

Authentication: also known as "login", to prove who the user is.

Authorization: access control permissions, that is, to determine who has access to what.

Session management: manages the user's Session even in a non-Web or EJB environment.

Encryption: use encryption algorithms to keep data secure while still easy to use.

There are many other features to support and enhance these features in different program environments, especially:

Web support: Shiro's Web API can be easily used in Web programs.

Caching: caching is a first-class citizen of Shiro to ensure fast and efficient operation.

Concurrency: Shiro supports multithreaded applications.

Tests: unit tests and integration tests can be written to ensure that the code runs as expected.

"Run As": allows users to use the identity of other users (if allowed), which is useful in some situations.

Remember me: remember the identity of the user and log in only if necessary.

At this point, the study on "what are the characteristics of Shiro" is over. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.