Simple. Java. Security.
3.0.2 available
Published by Lenny Primak on the
The Apache Shiro team is pleased to announce the release of Apache Shiro version 3.0.2.
This release is available for download now.
Release Highlights
This is a maintenance release with security fixes, a new feature, and a number of improvements and bug fixes. It is recommended that all users upgrade to this version.
New Features
-
Form data can now be saved and replayed without requiring a sign-in page
Security Fixes
-
Superclass and interface annotation processing is harmonized across integrations
-
Default settings of
ShiroFilterFactoryBeanandNoAccessFilterare now aligned with other components -
Many more hardening and security improvements have been made throughout the framework (see Vulnerability Reports).
Improvements
This release includes various improvements to form data saving and replay, Spring Boot 4.2+ support, logging, SBOM generation, and build and CI stability.
Bug Fixes
This release includes several bug fixes in Spring configuration, permission handling, and Faces form replay.
Migration Guide
If you are upgrading from an earlier version of Shiro, please read the Migration Guide for important changes and upgrade instructions.
Thank you to the following contributors!
-
Sharang Gupta (first contribution)
Release Notes
The full list of changes is available on GitHub, Release 3.0.2.
Download
Download and verification instructions are available on our download page.
