What is Apache Shiro?

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management and cryptography.

Apache Shiro’s first and foremost goal is to be easy to use and understand. Security can be very complex at times, even painful, but it doesn’t have to be. A framework should mask complexities where possible and expose a clean and intuitive API that simplifies the developer’s effort to make their application(s) secure.

Here are some things that you can do with Apache Shiro:

Authenticate a user to verify their identity

Perform access controlfor a user, such as:
Determine if a user is assigned a certain security role or not
Determine if a user is permitted to do something or not

Use a Session API in any environment, even without web or EJB containers.

React to events during authentication, access control, or during a session’s lifetime.

Aggregate 1 or more data sources of user security data and present this all as a single
composite user ‘view’.

Enable Single Sign On (SSO) functionality

Enable ‘Remember Me’ services for user association without login

權限管理概念

只要有用戶參與的系統一般都要有權限管理，權限管理實現對用戶訪問系統的控制，按照安全規則或者安全策略控制用戶可以訪問而且只能訪問自己被授權的資源。

權限管理包括用戶認證和授權兩部分。

總結

以上是生活随笔為你收集整理的Apache Shiro 权限管理的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。