Shiro 简介
Apache Shiro is a powerful and easy to use Java security framework for authentication, authorization, cryptography, and session management.
Apache Shiro architecture:
1, Authentication authentication user login ----
2, the Authorization Authorization - the user has what rights
3, Cryptography secure data encryption
4, Session Management Session Management
5, Web Integration web systems integration
6, Interations integrate other applications, spring, caching framework
Shiro analysis of the core API
Subject : User Principal ( the operation to the SecurityManager )
the SecurityManager : Security Manager ( association Realm )
Realm bridge Shiro connection data:
