You are viewing a plain text version of this content. The canonical link for it is here.
- [I] [Question] Issues with .asf.yaml [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/03 01:55:45 UTC, 11 replies.
- [I] [Enhancement] Add safe redirect utilities with domain whitelisting to WebUtils / RedirectView [shiro] - posted by "Allen-wick (via GitHub)" <gi...@apache.org> on 2026/06/05 09:25:23 UTC, 5 replies.
- [I] [Hardening] Deprecate RandomSessionIdGenerator due to insufficient entropy (64-bit) [shiro] - posted by "Allen-wick (via GitHub)" <gi...@apache.org> on 2026/06/05 14:19:25 UTC, 3 replies.
- [I] `shiro.doap.rdf`: should we list more later versions of Shiro [shiro] - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/06/08 14:45:01 UTC, 2 replies.
- [I] [Enhancement] Deprecate Spring Remoting integration (SecureRemoteInvocationExecutor) due to upstream Java deserialization risks [shiro] - posted by "Allen-wick (via GitHub)" <gi...@apache.org> on 2026/06/09 03:21:19 UTC, 2 replies.
- Re: [I] [Bug] Unexpected session expiration behavior on ARM64 architecture (Concurrency Issue) [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/09 07:12:11 UTC, 0 replies.
- [I] [Bug] JSR-250 annotations are disabled by default [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/09 07:24:19 UTC, 3 replies.
- [I] [Doc] Clarify that disabling principal parameter also disables JSR-250 annotations [shiro] - posted by "Allen-wick (via GitHub)" <gi...@apache.org> on 2026/06/09 09:44:11 UTC, 2 replies.
- [D] [Enhancement] Add safe redirect utilities with domain whitelisting to WebUtils / RedirectView [shiro] - posted by "Allen-wick (via GitHub)" <gi...@apache.org> on 2026/06/11 03:35:30 UTC, 5 replies.
- Re: [I] [Doc] Restore structured release notes — separate behavioral changes from dependency updates [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/12 20:01:59 UTC, 0 replies.
- [I] [Enhancement] Create a PR for 3.x into main [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/13 17:20:31 UTC, 0 replies.
- Re: [I] [Enhancement] Create a PR for merging 3.x into main [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/14 21:45:03 UTC, 1 replies.
- Re: [D] [Question] Any ETA for Apache Shiro 3.0.0 GA Release? [shiro] - posted by "fit2-zhao (via GitHub)" <gi...@apache.org> on 2026/06/14 22:10:17 UTC, 1 replies.
- Re: [I] [Enhancement] Create 2.x maint branch and move main to 3.x [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/17 12:56:29 UTC, 0 replies.
- [I] [Enhancement] Multi-realm system failures are not logged but swallowed [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/18 03:41:02 UTC, 1 replies.
- [jira] [Closed] (SHIRO-561) "Remember me" cookie age is not verified server-side - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/18 17:23:00 UTC, 0 replies.
- [jira] [Commented] (SHIRO-561) "Remember me" cookie age is not verified server-side - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/18 17:23:00 UTC, 0 replies.
- [jira] [Updated] (SHIRO-561) "Remember me" cookie age is not verified server-side - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 02:18:00 UTC, 1 replies.
- [jira] [Reopened] (SHIRO-561) "Remember me" cookie age is not verified server-side - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 02:18:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-561) "Remember me" cookie age is not verified server-side - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 02:19:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-441) Explain how "Remember Me" works under the hood and that you might want to use a custom cipher key - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:07:00 UTC, 0 replies.
- [jira] [Updated] (SHIRO-441) Explain how "Remember Me" works under the hood and that you might want to use a custom cipher key - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:09:00 UTC, 1 replies.
- [jira] [Resolved] (SHIRO-572) Validate everything in 1.2 / 1.3 has merged into 2.0 - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:14:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-257) Support case insensitive url path matching - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:21:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-360) Create UrlEncoder - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:22:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-490) Extend shiro-faces with taglib functions - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:25:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-781) Add JPMS support - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:28:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-489) can not get session on sina app engine - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:31:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-33) Features overview - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:32:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-821) Difference in behaviour when matching regex patterns with trailing spaces between shiro-core v1.7.0 and v1.7.1 - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:34:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-801) Shiro blocks requests with non-ACII characters in the URL path - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:35:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-796) Move away from ThreadLocals - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:36:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-799) When ThreadContext works with ThreadPool bring security issues - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:36:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-733) bean inject error while use shiro-spring-boot-web-starter - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:37:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-760) Bypass shiroFilter ACL - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:39:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-454) Provide a way to logout a user without destroying the http session - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:39:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-727) session invalidate - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:41:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-649) 内存介质更新Session时不起作用 - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:42:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-616) Two different sessions are created - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:44:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-614) UnknownSessionException when shiro is again trying to access the deleted session. - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:45:00 UTC, 0 replies.
- [jira] [Closed] (SHIRO-609) Shiro JAX-RS - Don't assume JAX-RS handles annotation processing - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:45:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-601) deleted cookies don't set httpOnly flag. trigger warnings in PEN tools - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:46:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-578) Race condition between Session.touch() and AbstractValidatingSessionManager. - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:48:00 UTC, 0 replies.
- [jira] [Resolved] (SHIRO-22) Enable POST redirects on session timeout - posted by "Lenny Primak (Jira)" <ji...@apache.org> on 2026/06/19 06:51:00 UTC, 0 replies.
- [I] [Bug] Bug title DefaultSecurityManger.login(null, token) fails in 2.2.1 [shiro] - posted by "mnd999 (via GitHub)" <gi...@apache.org> on 2026/06/22 10:48:26 UTC, 0 replies.
- [I] [Enhancement] Clean Jenkins PR build workspace [shiro] - posted by "apupier (via GitHub)" <gi...@apache.org> on 2026/06/22 11:56:44 UTC, 4 replies.
- Re: [I] [Bug] DefaultSecurityManger.login(null, token) fails in 2.2.1 [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/06/22 14:59:09 UTC, 0 replies.
- [I] [Bug] AllowAllCredentialsMatcher logs a "matched the simulated credentials" error via simulateFailedLogin [shiro] - posted by "phil198 (via GitHub)" <gi...@apache.org> on 2026/06/26 10:15:07 UTC, 0 replies.
- [I] [Bug] shiro 3.0.0 blocks WEB-INF/resources [shiro] - posted by "lee-peter24 (via GitHub)" <gi...@apache.org> on 2026/06/27 07:50:11 UTC, 5 replies.