Fork me on GitHub

Apache Shiro Logo Simple. Java. Security. Apache Software Foundation Event Banner

Download Apache Shiro

Apache Shiro 2.0.2 is the current stable release (Java 11+).

To download Shiro please follow the instructions below.

Code Signatures

You may verify the authenticity of all artifacts below by using the PGP KEYS file.

Current Release

The current release is 2.0.2. For older releases, please visit our release archive.

Release 2.0.2

2.0.2 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-2.0.2-source-release.zip (pgp, sha512)

Associated documentation can be found here

2.0.2 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-2.0.2

2.0.2 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-core
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>2.0.2</version>
</dependency>
 Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables support for web-based applications.
shiro-servlet-plugin
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>2.0.2</version>
</dependency>
 Servlet Fragment which configures Shiro's servlet filter.
shiro-cdi
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cdi</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables support for CDI integration.
shiro-jakarta-ee
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jakarta-ee</artifactId>
  <version>2.0.2</version>
</dependency>
 Jakarta EE Web Profile integration.
shiro-jaxrs
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables support for JAX-RS applications.
shiro-aspectj
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables Ehcache-based famework caching.
shiro-hazelcast
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables Hazelcast-based famework caching.
shiro-features
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>2.0.2</version>
</dependency>
 OSGi / Apache Karaf integration.
shiro-guice
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables Google Guice integration.
shiro-quartz
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>2.0.2</version>
</dependency>
 Enables Spring Framework integration.
shiro-spring-boot-starter
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>2.0.2</version>
</dependency>
 Spring Boot starter.
shiro-spring-boot-web-starter
(pgp) 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>2.0.2</version>
</dependency>
 Spring Boot web starter.
shiro-tools-hasher
(pgp) 		Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed: 
 java -jar shiro-tools-hasher-2.0.2-cli.jar