Apache Shiro 1.3.0 发布，轻量安全框架

文章转载开源中国

Apache Shiro 1.3.0 发布了。此版本解决了包含自1.2.6版以来的26个问题，目前可供下载。

更新内容：

Bug

• [SHIRO-373] – Complete CAS remember-me support

• [SHIRO-397] – SingleArgumentMethodEventListenerTest fails

• [SHIRO-421] – Unable to set long timeouts on HttpServletSession

• [SHIRO-435] – SecurityManager is not a singleton in ShiroWebModule

• [SHIRO-473] – DefaultAnnotationResolver.getAnnotation throws NullPointerException

• [SHIRO-480] – setTarget method in DomainPermission does not set targets

• [SHIRO-483] – passwordsMatch() returns false with right plain password-encrypted password in JVM with default locale tr_TR

• [SHIRO-502] – OSGi import of com.google.inject in shiro-guice has incorrect version range

• [SHIRO-515] – ExecutorServiceSessionValidationScheduler leaks resources due to improper synchronization

• [SHIRO-547] – Use MessageDigest#isEqual() instead of Arrays#equals() for comparing digests

• [SHIRO-568] – hash iterations is calculated wrongly in SimpleHash

• [SHIRO-570] – SimpleCookie should check the path of the cookie

改进

• [SHIRO-278] – Rename JndiLdapRealm to DefaultLdapRealm

• [SHIRO-300] – WildcardPermission: change visibility of field 'parts' to protected

• [SHIRO-361] – HttpServletResponse.encodeURL: only append JSESSIONID when necessary

• [SHIRO-428] – AuthorizingRealm "no cache" logging should be at DEBUG level, not INFO, OR is should log only once

• [SHIRO-437] – WildcardPermission: conformed toString

• [SHIRO-514] – ExecutorServiceSessionValidationScheduler should create threads with a configurable name

• [SHIRO-564] – WildcardPermission case-insensitive makes parts collections twice

• [SHIRO-566] – CollectionUtils should use Collections wrappers of arrays if possible

新特性

• [SHIRO-200] – Add ability to configure basic authentication for specific HTTP methods

• [SHIRO-395] – Add an Event Bus for event publishing and low-coupling for custom components/plugins.

• [SHIRO-412] – Hazelcast-based caching and session clustering

• [SHIRO-436] – Add EnvironmentLoader finalizeEnvironment method

Task

• [SHIRO-208] – Correct JDK 1.5 / 1.6 incompatibilities

• [SHIRO-571] – Mark shiro-cas deprecated (replaced with buji-pac4j)

下载地址：

Latest Stable Release (1.3.0)

• 1.3.0 Binary Distribution

• 1.3.0 Source Code Distribution

• 1.3.0 Git Source repository

详情：http://shiro.apache.org/download.html

Shiro 是一个权限控制框架，因其简单而又不失强大的特点引起了不少开发者的注意。