Package | Description |
---|---|
org.apache.shiro.cas | |
org.apache.shiro.guice.web | |
org.apache.shiro.realm |
Components and sub-packages used in supporting the core
Realm interface. |
org.apache.shiro.realm.activedirectory |
Realms that acquire security data from a Microsoft Active Directory.
|
org.apache.shiro.realm.jdbc |
Realms that acquire security data from an RDBMS (Relational Database Management System) using the
JDBC API.
|
org.apache.shiro.realm.ldap |
Realms that acquire security data from an LDAP (Lightweight Directory Access Protocol) server
utilizing LDAP/Naming APIs.
|
org.apache.shiro.realm.text |
Realms that acquire security data from text-based data sources such as
File s or
text streams. |
org.apache.shiro.web.filter |
Base package supporting all Servlet
Filter implementations used to control
access to web pages and URL resources. |
org.apache.shiro.web.filter.authc |
Servlet
Filter implementations specific to controlling access based on a
subject's authentication status, or those that can execute authentications (log-ins) directly. |
org.apache.shiro.web.filter.authz |
Servlet
Filter implementations that perform authorization (access control)
checks based on the Subject's abilities (for example, role or permission checks). |
org.apache.shiro.web.filter.session | |
org.apache.shiro.web.servlet |
Shiro-specific implementations of the Servlet API (Servlet Filters, et al).
|
Modifier and Type | Class and Description |
---|---|
class |
CasFilter
This filter validates the CAS service ticket to authenticate the user.
|
class |
CasRealm
This realm implementation acts as a CAS client to a CAS server for authentication and basic authorization.
|
Modifier and Type | Class and Description |
---|---|
class |
GuiceShiroFilter
Shiro filter that is managed by and receives its filter chain configurations from Guice.
|
Modifier and Type | Class and Description |
---|---|
class |
AuthenticatingRealm
A top-level abstract implementation of the Realm interface that only implements authentication support
(log-in) operations and leaves authorization (access control) behavior to subclasses.
|
class |
AuthorizingRealm
An
AuthorizingRealm extends the AuthenticatingRealm 's capabilities by adding Authorization
(access control) support. |
class |
CachingRealm
A very basic abstract extension point for the
Realm interface that provides caching support for subclasses. |
class |
SimpleAccountRealm
A simple implementation of the
Realm interface that
uses a set of configured user accounts and roles to support authentication and authorization. |
Modifier and Type | Class and Description |
---|---|
class |
ActiveDirectoryRealm
A
Realm that authenticates with an active directory LDAP
server to determine the roles for a particular user. |
Modifier and Type | Class and Description |
---|---|
class |
JdbcRealm
Realm that allows authentication and authorization via JDBC calls.
|
Modifier and Type | Class and Description |
---|---|
class |
AbstractLdapRealm
A
Realm that authenticates with an LDAP
server to build the Subject for a user. |
class |
JndiLdapRealm
An LDAP
Realm implementation utilizing Sun's/Oracle's
JNDI API as an LDAP API. |
Modifier and Type | Class and Description |
---|---|
class |
IniRealm
|
class |
PropertiesRealm
A
TextConfigurationRealm that defers all logic to the parent class, but just enables
Properties based configuration in addition to the parent class's String configuration. |
class |
TextConfigurationRealm
A SimpleAccountRealm that enables text-based configuration of the initial User, Role, and Permission objects
created at startup.
|
Modifier and Type | Class and Description |
---|---|
class |
AccessControlFilter
Superclass for any filter that controls access to a resource and may redirect the user to the login page
if they are not authenticated.
|
class |
PathMatchingFilter
Base class for Filters that will process only specified paths and allow all others to pass through.
|
Modifier and Type | Class and Description |
---|---|
class |
AnonymousFilter
Filter that allows access to a path immeidately without performing security checks of any kind.
|
class |
AuthenticatingFilter
An
AuthenticationFilter that is capable of automatically performing an authentication attempt
based on the incoming request. |
class |
AuthenticationFilter
Base class for all Filters that require the current user to be authenticated.
|
class |
BasicHttpAuthenticationFilter
Requires the requesting user to be
authenticated for the
request to continue, and if they're not, requires the user to login via the HTTP Basic protocol-specific challenge. |
class |
FormAuthenticationFilter
Requires the requesting user to be authenticated for the request to continue, and if they are not, forces the user
to login via by redirecting them to the
loginUrl you configure. |
class |
LogoutFilter
Simple Filter that, upon receiving a request, will immediately log-out the currently executing
subject
and then redirect them to a configured redirectUrl . |
class |
PassThruAuthenticationFilter
An authentication filter that redirects the user to the login page when they are trying to access
a protected resource.
|
class |
UserFilter
Filter that allows access to resources if the accessor is a known user, which is defined as
having a known principal.
|
Modifier and Type | Class and Description |
---|---|
class |
AuthorizationFilter
Superclass for authorization-related filters.
|
class |
HostFilter
A Filter that can allow or deny access based on the host that sent the request.
|
class |
HttpMethodPermissionFilter
A filter that translates an HTTP Request's Method (eg GET, POST, etc)
into an corresponding action (verb) and uses that verb to construct a permission that will be checked to determine
access.
|
class |
PermissionsAuthorizationFilter
Filter that allows access if the current user has the permissions specified by the mapped value, or denies access
if the user does not have all of the permissions specified.
|
class |
PortFilter
A Filter that requires the request to be on a specific port, and if not, redirects to the same URL on that port.
|
class |
RolesAuthorizationFilter
Filter that allows access if the current user has the roles specified by the mapped value, or denies access
if the user does not have all of the roles specified.
|
class |
SslFilter
Filter which requires a request to be over SSL.
|
Modifier and Type | Class and Description |
---|---|
class |
NoSessionCreationFilter
A
PathMatchingFilter that will disable creating new Sessions during the request. |
Modifier and Type | Class and Description |
---|---|
class |
AbstractShiroFilter
Abstract base class that provides all standard Shiro request filtering behavior and expects
subclasses to implement configuration-specific logic (INI, XML, .properties, etc).
|
class |
AdviceFilter
A Servlet Filter that enables AOP-style "around" advice for a ServletRequest via
preHandle ,
postHandle ,
and afterCompletion
hooks. |
class |
IniShiroFilter
Deprecated.
in 1.2 in favor of using the
ShiroFilter |
class |
NameableFilter
Allows a filter to be named via JavaBeans-compatible
NameableFilter.getName() /NameableFilter.setName(String) methods. |
class |
OncePerRequestFilter
Filter base class that guarantees to be just executed once per request,
on any servlet container.
|
class |
ShiroFilter
Primary Shiro Filter for web applications configuring Shiro via Servlet <listener> in web.xml.
|
Copyright © 2004–2016 The Apache Software Foundation. All rights reserved.