Apache Shiro - Role-Based Access Control (RBAC) İçindir

Giriş

Açıklaması şöyle. Framework yani çatı olarak kullanılır.

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management and cryptography.

Şeklen şöyle

Daha gelişmiş bir şekil şöyle

Bölümlerin amacı şöyle

Authentication: Sometimes referred to as ‘login’, this is the act of proving a user is who they say they are.

Authorization: The process of access control, i.e. determining ‘who’ has access to ‘what’.

Session Management: Managing user-specific sessions, even in non-web or EJB applications.

Cryptography: Keeping data secure using cryptographic algorithms while still being easy to use.

Maven

Spring ile kullanmak için şöyle yaparız

<dependency>
    <groupId>org.apache.shiro</groupId>
    <artifactId>shiro-spring-boot-starter</artifactId>
    <version>1.8.0</version>
</dependency>

Spring ile tümleşim için bir örnek burada