Apache Shiro Reviews & Product Details

Apache Shiro is a fantastic utility for managing my security measures in Java framework of my organization. It can effectively implement user authentication, server-end encryption, and client session management through its excellent API features. It gives me dynamic annotations, which helps with quick metadata evaluation during my compilation time itself. Review collected by and hosted on G2.com.

It needs improvements on providing transparency for developers without adding a lot of complexities in application development. This will aid in the complete implementation of a user-friendly and flexible security model. Review collected by and hosted on G2.com.

Several years ago we integrated Apache Shiro to an OSGI application and it was one of the few security frameworks that played nicely. Since it was such a nice experience we decided to contribute to the project and submitted integration with EhCache. The whole process was really smooth and the community friendly Review collected by and hosted on G2.com.

Not sure, we didn't have any issues working with the framework Review collected by and hosted on G2.com.

It is really easy to integrate. Very widely used security framework, which makes it reliable. You can understand how to implement without too much effort. We used it for authentication and authorization of API requests, which did a nice job. And some implementations are highly customizable. Review collected by and hosted on G2.com.

Before using Shiro I had done some research, I compared Shiro and 2 other popular security frameworks. One point Shiro was behind was code quality. Their code quality was not as good as other candidates. And the iterations are not so fast, they are still developing but I guess with limited resource. Review collected by and hosted on G2.com.

Their compatibility of using for permission with our application. We like the way it handles security things in our product. We mainly use it for valid user permission validation. We have different types of users and we have to distinguish them according to the roles, and for roles, we are giving permission to those roles, like admin, pro, default. Apache handles it so easily like no other platform has given that support till now as of my knowledge. We suggest using Apache Shiro for organizations, it's good. We are not using it in one team but also in multiple projects. Review collected by and hosted on G2.com.

It is good, but it's quite complex and gives only basic security. At first, when I started using Shiro, it was very difficult to understand because Apache gave us so many features like an ocean of features, but we have to use only Shiro, and in Shiro also lots of features are available in which we have to use only a few of them. So for that, we have to explore a lot to search for what we exactly need in Shiro. Yeah, I faced a lot of challenges, but in the end, when I understood Shiro and its functionality, then it's very good to use and work. We really appreciate the way Shiro gave their features. So maybe it has some downsides, still it's very good to use, and we are using it in our products. Review collected by and hosted on G2.com.

The fact that I can manage the authorization and authentication to all my users in a single intuitive point. Review collected by and hosted on G2.com.

In general, it's a great tool, but it was a little hard for me to find detailed documentation for advanced features. Review collected by and hosted on G2.com.

Very basic settings setup can provide great Authentication and Authorization in the application. Easy to customize according to business needs. Review collected by and hosted on G2.com.

Support for the Framework is very limited. Review collected by and hosted on G2.com.

I am using Shiro security in my product. And I think the way you can set up the security and permissions using makes my application flexible and secure. Review collected by and hosted on G2.com.

Shiro doesn't support SSO like AD and others very well. Otherwise easy to use. Review collected by and hosted on G2.com.

Intuitive identity verification for my user and guest. JVM-based application protection. Review collected by and hosted on G2.com.

Difficult integration at the beginning of the installation. Review collected by and hosted on G2.com.

Configuring subject and maintaining app level authentication and authorization was easy using Shiro Review collected by and hosted on G2.com.

Would be great if the configuration can be done through Java class itself using annotations rather than XML (not sure if it was introduced now) Review collected by and hosted on G2.com.

We are using it for security frameworks and the best thing is it’s implementation which is easy to do. Review collected by and hosted on G2.com.

Quality of code was not good due to limited resources Review collected by and hosted on G2.com.