Apache Shiro Reviews & Product Details

Apache Shiro is a fantastic utility for managing my security measures in Java framework of my organization. It can effectively implement user authentication, server-end encryption, and client session management through its excellent API features. It gives me dynamic annotations, which helps with quick metadata evaluation during my compilation time itself. Review collected by and hosted on G2.com.

It needs improvements on providing transparency for developers without adding a lot of complexities in application development. This will aid in the complete implementation of a user-friendly and flexible security model. Review collected by and hosted on G2.com.

Several years ago we integrated Apache Shiro to an OSGI application and it was one of the few security frameworks that played nicely. Since it was such a nice experience we decided to contribute to the project and submitted integration with EhCache. The whole process was really smooth and the community friendly Review collected by and hosted on G2.com.

Not sure, we didn't have any issues working with the framework Review collected by and hosted on G2.com.

It is really easy to integrate. Very widely used security framework, which makes it reliable. You can understand how to implement without too much effort. We used it for authentication and authorization of API requests, which did a nice job. And some implementations are highly customizable. Review collected by and hosted on G2.com.

Before using Shiro I had done some research, I compared Shiro and 2 other popular security frameworks. One point Shiro was behind was code quality. Their code quality was not as good as other candidates. And the iterations are not so fast, they are still developing but I guess with limited resource. Review collected by and hosted on G2.com.

Their compatibilty of using for persmission with our application. we like the way it handle security things in our product. We mainly use for user valid user permission validation. we have different types of users and we have to distinguish them according to the roles, and for roles we are giving persmission to that roles . like admin, pro, default.Apach handle it so easily like no any other platform gave that support till now as of my knowledge. we suggest to use apache shiro for organization , its good . we are not suing in one team but also we are using in multiple projects. Review collected by and hosted on G2.com.

it is good, but its quite complex and giving only basic security. At first when i started using shiro the its nery difficult to understand, becuase Apach gave us so many features like an ocean of features but we have ot use only shiro and in shiro also lots of feature are available in which we have to use only few of them. So for that we have to explore a lot to search what we exactly need in shiro . yeah i face lot of challenges but at the end when i understood shiro and their functionlity then it svery good to use and work. we realyy apprecitate the way shiro gave their features. so may be it has some downside still its very good to use and we are using it our products. Review collected by and hosted on G2.com.

The fact that I can manage the authorization and authentication to all my users in a single intuitive point. Review collected by and hosted on G2.com.

In general, it's a great tool, but it was a little hard for me to find detailed documentation for advanced features. Review collected by and hosted on G2.com.

Very basic settings setup can provide great Authentication and Authorization in the application. Easy to customize according to business needs. Review collected by and hosted on G2.com.

Support for the Framework is very limited. Review collected by and hosted on G2.com.

I am using Shiro security in my product. And I think the way you can set up the security and permissions using makes my application flexible and secure. Review collected by and hosted on G2.com.

Shiro doesn't support SSO like AD and others very well. Otherwise easy to use. Review collected by and hosted on G2.com.

Intuitive identity verification for my user and guest.

JVM-based application protection. Review collected by and hosted on G2.com.

Difficult integration at the beginning of the installation. Review collected by and hosted on G2.com.

configuring subject and maintaining app level authentication and authorization was easy using shiro Review collected by and hosted on G2.com.

would be great if the configuration can be done through java class itself using annotations rather than xml (not sure if it was introduced now) Review collected by and hosted on G2.com.

We are using it for security frameworks and the best thing is it’s implementation which is easy to do. Review collected by and hosted on G2.com.

Quality of code was not good due to limited resources Review collected by and hosted on G2.com.