Fork me on GitHub

Apache Shiro Logo Simple. Java. Security. Apache Software Foundation Event Banner

This is the Apache Shiro release archive.

To download archived versions of Apache Shiro please follow the instructions below. Please note that the current version of Apache Shiro is 1.9.1. We recommend to stick to the latest version.

Code Signatures

You may verify the authenticity of all artifacts below by using the PGP KEYS file.

Previous Releases

This is the release archive. To download the current release, please go to the download page instead.

Release 1.8.0

1.8.0 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.8.0-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.8.0 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.8.0

1.8.0 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.8.0</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.8.0</version>
</dependency>
Enables support for web-based applications.
shiro-servlet-plugin
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>1.8.0</version>
</dependency>
Servlet Fragment which configures Shiro's servlet filter.
shiro-jaxrs
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>1.8.0</version>
</dependency>
Enables support for JAX-RS applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.8.0</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.8.0</version>
</dependency>
Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.8.0</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-hazelcast
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.8.0</version>
</dependency>
Enables Hazelcast-based famework caching.
shiro-features
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.8.0</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.8.0</version>
</dependency>
Enables Google Guice integration.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.8.0</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.8.0</version>
</dependency>
Enables Spring Framework integration.
shiro-spring-boot-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>1.8.0</version>
</dependency>
Spring Boot starter.
shiro-spring-boot-web-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>1.8.0</version>
</dependency>
Spring Boot web starter.
shiro-tools-hasher
(pgp)
Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed:
 java -jar shiro-tools-hasher-1.8.0-cli.jar

Release 1.7.1

1.7.1 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.7.1-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.7.1 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.7.1

1.7.1 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.7.1</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.7.1</version>
</dependency>
Enables support for web-based applications.
shiro-servlet-plugin
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>1.7.1</version>
</dependency>
Servlet Fragment which configures Shiro's servlet filter.
shiro-jaxrs
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>1.7.1</version>
</dependency>
Enables support for JAX-RS applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.7.1</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.7.1</version>
</dependency>
Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.7.1</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-hazelcast
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.7.1</version>
</dependency>
Enables Hazelcast-based famework caching.
shiro-features
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.7.1</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.7.1</version>
</dependency>
Enables Google Guice integration.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.7.1</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.7.1</version>
</dependency>
Enables Spring Framework integration.
shiro-spring-boot-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>1.7.1</version>
</dependency>
Spring Boot starter.
shiro-spring-boot-web-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>1.7.1</version>
</dependency>
Spring Boot web starter.
shiro-tools-hasher
(pgp)
Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed:
 java -jar shiro-tools-hasher-1.7.1-cli.jar

Release 1.6.0

1.6.0 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.6.0-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.6.0 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.6.0

1.6.0 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.6.0</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.6.0</version>
</dependency>
Enables support for web-based applications.
shiro-servlet-plugin
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>1.6.0</version>
</dependency>
Servlet Fragment which configures Shiro's servlet filter.
shiro-jaxrs
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>1.6.0</version>
</dependency>
Enables support for JAX-RS applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.6.0</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.6.0</version>
</dependency>
Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.6.0</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-hazelcast
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.6.0</version>
</dependency>
Enables Hazelcast-based famework caching.
shiro-features
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.6.0</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.6.0</version>
</dependency>
Enables Google Guice integration.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.6.0</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.6.0</version>
</dependency>
Enables Spring Framework integration.
shiro-spring-boot-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>1.6.0</version>
</dependency>
Spring Boot starter.
shiro-spring-boot-web-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>1.6.0</version>
</dependency>
Spring Boot web starter.
shiro-tools-hasher
(pgp)
Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed:
 java -jar shiro-tools-hasher-1.6.0-cli.jar

Release 1.5.3

1.5.3 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.5.3-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.5.3 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.5.3

1.5.3 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.5.3</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.5.3</version>
</dependency>
Enables support for web-based applications.
shiro-servlet-plugin
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>1.5.3</version>
</dependency>
Servlet Fragment which configures Shiro's servlet filter.
shiro-jaxrs
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>1.5.3</version>
</dependency>
Enables support for JAX-RS applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.5.3</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-hazelcast
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Hazelcast-based famework caching.
shiro-features
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.5.3</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Google Guice integration.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Spring Framework integration.
shiro-spring-boot-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>1.5.3</version>
</dependency>
Spring Boot starter.
shiro-spring-boot-web-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>1.5.3</version>
</dependency>
Spring Boot web starter.
shiro-tools-hasher
(pgp)
Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed:
 java -jar shiro-tools-hasher-1.5.3-cli.jar

Release 1.4.2

1.4.2 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.4.2-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.4.2 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.4.2

1.4.2 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.4.2</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.4.2</version>
</dependency>
Enables support for web-based applications.
shiro-servlet-plugin
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>1.4.2</version>
</dependency>
Servlet Fragment which configures Shiro's servlet filter.
shiro-jaxrs
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>1.4.2</version>
</dependency>
Enables support for JAX-RS applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.4.2</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-hazelcast
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Hazelcast-based famework caching.
shiro-features
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.4.2</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Google Guice integration.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Spring Framework integration.
shiro-spring-boot-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>1.4.2</version>
</dependency>
Spring Boot starter.
shiro-spring-boot-web-starter
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>1.4.2</version>
</dependency>
Spring Boot web starter.
shiro-tools-hasher
(pgp)
Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed:
 java -jar shiro-tools-hasher-1.4.2-cli.jar

Release 1.3.2

1.3.2 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.3.2-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.3.2 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.3.2

1.3.2 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.3.2</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.3.2</version>
</dependency>
Enables support for web-based applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.3.2</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-hazelcast
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Hazelcast-based famework caching.
shiro-features
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.3.2</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Google Guice integration.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Spring Framework integration.
shiro-tools-hasher
(pgp)
Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed:
 java -jar shiro-tools-hasher-1.3.2-cli.jar

Release 1.2.6

1.2.6 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.2.6-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.2.6 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.2.6

1.2.6 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.2.6</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.2.6</version>
</dependency>
Enables support for web-based applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.2.6</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Jasig CAS support. Warning:  Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-features
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.2.6</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Google Guice integration.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Spring Framework integration.
shiro-tools-hasher
(pgp)
Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed:
 java -jar shiro-tools-hasher-1.2.6-cli.jar

Release 1.1.0

1.1.0 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build: shiro-root-1.1.0-source-release.zip (pgp, sha512)

Associated documentation can be found here

1.1.0 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.1.0

1.1.0 Binaries

If you don't want to build yourself, you can download pre-built binaries from Maven Central, just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all
(pgp)
Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.1.0</version>
</dependency>
Required in all environments. Slf4j's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.1.0</version>
</dependency>
Enables support for web-based applications.
shiro-aspectj
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.1.0</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-ehcache
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.1.0</version>
</dependency>
Enables Ehcache-based famework caching.
shiro-quartz
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.1.0</version>
</dependency>
Enables Quartz-based scheduling for Shiro native session validation.
shiro-spring
(pgp)
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.1.0</version>
</dependency>
Enables Spring Framework integration.