Posts by Brian Demers

Protecting JAX-RS Resources with RBAC and Apache Shiro

Security is probably the most important thing for your application, but it doesn’t have to be the hardest thing. Today I’ll show you how to use Shiro’s wildcard permissions to enable fine grained Role-Based Access Control (RBAC) which makes granting user permissions trivial (a single line). This will also make your application’s security policy more …

JAX-RS vs Spring for REST Endpoints

REST endpoints are used just about everywhere you need to decouple your web service and client. Many developers have used Spring or JAX-RS for this purpose. Some have used one but not the other, in this post I’ll go over the the differences between the two using basically the same code. In future posts I’ll …

String Interpolation with Apache Shiro

I am happy to announce the the 0.8.0-RC1 release of our Stormpath-Shiro integration. This release builds on top of the recent Apache Shiro 1.4.0-RC2 release. The 1.4.0 Apache Shiro release adds a handful of great features: More modular: new config, crypto and lang were modules split out from shiro-core New Spring Boot modules added (no …

Apache Shiro Stormpath Integration 0.7.1 Released

Welcome to the new Apache Shiro Stormpath integration! This new release features a servlet plugin, plus deeper support for Spring and Spring Boot. Until now, we have only had a basic Apache Shiro realm for Stormpath. While sufficient, this basic realm never granted access to the full suite of Stormpath services. Today, that changed! Servlet …

Tutorial: Apache Shiro EventBus

Last week we released Apache Shiro 1.3, and I shared a tutorial on the new Hazelcast support. Today, I’d like to introduce you to the new EventBus system and show you a couple different ways to use it. Shiro’s EventBus is implemented very similar to Guava’s EventBus, if you are already familiar with that, you already know how …

Hazelcast Support in Apache Shiro

One of the new features in the Apache Shiro 1.3 release is the support for a Hazelcast Cache Manager. In this post, we will walk through updating an existing application and add clustered session support via Hazelcast, all with only a few configuration changes. Download the Sample Web App First, download the simple web application: …

Apache Shiro 1.3 Released

The Apache Shiro team is proud to announce the 1.3.0 release. This is the first feature release in a few years, and we’re really excited about it. The 1.3.0 release contains 12 bug fixes, 8 improvements, and 4 new features. A large number of commits in this release came from the community, probably the most community …