Simple. Java. Security.
Apache Shiro Guides
|
Handy Hint
|
Shiro v1 and v2 version end-of-life notice
As of February 28, 2024, Shiro v1 was superseded by v2.
As of June 29, 2026, Shiro v2 was superseded by v3.
|
This page collects the primary guides for learning Apache Shiro. Whether you are new to Shiro or looking to deepen your understanding, these guides provide practical, step-by-step instructions.
Please post any errata to the user or dev mailing lists.
Getting Started
If you are new to Shiro, start here:
-
10 Minute Tutorial - A quick hands-on introduction to Shiro’s core API and concepts.
-
Your First Shiro Application - Build a simple application secured by Shiro from scratch.
-
Beginner’s Webapp Tutorial - A step-by-step guide to enabling Shiro in a web application.
Core Concepts
Once you understand the basics, explore these guides to learn how authentication and authorization work in Shiro:
-
Authentication Guide - Learn how to verify user identity using Shiro’s authentication API.
-
Authorization Guide - Understand how to control access to resources based on roles and permissions.
Advanced Topics
After mastering the core concepts, consider these topics:
-
Realm Guide - Learn how Realms connect Shiro to your user data sources.
-
Session Management - Understand how Shiro manages user sessions across environments.
-
Cryptography - Explore Shiro’s simplified cryptography APIs.
Upgrading Shiro
-
Migration Guide: Upgrading Shiro 1.x → 2.x → 3.x - Step-by-step instructions for upgrading between major Shiro versions.
See Also
-
Reference Documentation - Complete reference for all Shiro features.
-
Documentation Hub - Central hub for all Shiro documentation resources.
-
Community Articles - Articles and tutorials contributed by the Shiro community.
