Apache Shiro – Lightweight framework-agnostic security framework

Apache Shiro | Simple. Java. Security. --> Fork me on GitHub Simple. Java. Security. Apache Shiro™ is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the largest web and enterprise applications. Getting Started What is Apache Shiro? 10 Minute Tutorial More articles... Authentication Support logins across one or more pluggable data sources (LDAP, JDBC, Active Directory... Read More >>> Authorization Perform access control based on roles or fine grained permissions, also using plug... Read More >>> Cryptography Secure data with the easiest possible Cryptography API’s available, giving you... Read More >>> Session Management Use sessions in any environment, even outside web or EJB containers. Easily... Read More >>> Web Integration Save development time with innovative approaches that easily handle web specific... Read More >>> Integrations API’s giving you power and simplicity beyond what Java provides by default... Read More >>> Download Latest news: 3.0.0-alpha-1 available by Lenny Primak on 2026-02-27 2.1.0 available by Francois Papon on 2026-02-08 2.0.6 available by Francois Papon on 2025-11-07 2.0.5 available by Lenny Primak on 2025-07-07 2.0.4 available by Lenny Primak on 2025-04-20 Popular Guides: Java Authentication Guide Learn how Shiro securely verifies identities. Java Authorization Guide Learn how Shiro handles permissions, roles and users. Web App Tutorial Step-by-step tutorial for securing a web application with Apache Shiro. Apache Shiro Mini Book A free InfoQ mini-book by Nebrass Lamouchi