You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@shiro.apache.org by lp...@apache.org on 2023/05/05 01:20:40 UTC

[shiro-site] branch main updated: added 2.0.0-alpha release blog

This is an automated email from the ASF dual-hosted git repository.

lprimak pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/shiro-site.git


The following commit(s) were added to refs/heads/main by this push:
     new ea15b9c13 added 2.0.0-alpha release blog
ea15b9c13 is described below

commit ea15b9c137438d5fc9b3bbc2dd640c8714daa47e
Author: lprimak <le...@flowlogix.com>
AuthorDate: Thu May 4 21:19:43 2023 -0400

    added 2.0.0-alpha release blog
---
 .../05/04/apache-shiro-200-alpha-1-released.adoc   | 273 +++++++++++++++++++++
 1 file changed, 273 insertions(+)

diff --git a/src/site/content/blog/2023/05/04/apache-shiro-200-alpha-1-released.adoc b/src/site/content/blog/2023/05/04/apache-shiro-200-alpha-1-released.adoc
new file mode 100644
index 000000000..5fb8ba16d
--- /dev/null
+++ b/src/site/content/blog/2023/05/04/apache-shiro-200-alpha-1-released.adoc
@@ -0,0 +1,273 @@
+////
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+////
+
+= 2.0.0-alpha available
+:jbake-author: Lenny Primak
+:jbake-date: 2023-05-04 00:00:00
+:jbake-type: post
+:jbake-status: published
+:jbake-tags: blog, release
+:idprefix:
+:icons: font
+
+The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.0-alpha.
+
+== All changes
+
+You can learn more on https://issues.apache.org/jira/projects/SHIRO/versions/12315455[Jira, Release 2.0.0-alpha].
+
+Release Notes - Shiro - Version 2.0.0-alpha
+
+=== Sub-tasks
+
+* [https://issues.apache.org/jira/browse/SHIRO-772[SHIRO-772]] -
+PowerMock blocks JDK 11+ builds
+* [https://issues.apache.org/jira/browse/SHIRO-773[SHIRO-773]] -
+Outdated Groovy version does not work with JDK14
+* [https://issues.apache.org/jira/browse/SHIRO-775[SHIRO-775]] -
+Excessive logging in jetty ContainerITs
+
+=== Bugs
+
+* [https://issues.apache.org/jira/browse/SHIRO-349[SHIRO-349]] -
+Security: Byte arrays (and other memory) holding sensitive data (even
+temporarily) should be zerod-out
+* [https://issues.apache.org/jira/browse/SHIRO-512[SHIRO-512]] - Race
+condition in Shiro's web container session timeout handling
+* [https://issues.apache.org/jira/browse/SHIRO-537[SHIRO-537]] - Class
+load issue in OSGI in ClassUtils
+* [https://issues.apache.org/jira/browse/SHIRO-610[SHIRO-610]] -
+Incorrect filterchainResolver in 1.4.0-RC2
+* [https://issues.apache.org/jira/browse/SHIRO-632[SHIRO-632]] -
+org.apache.felix:maven-bundle-plugin causing duplicate class problems
+between core and lang
+* [https://issues.apache.org/jira/browse/SHIRO-646[SHIRO-646]] - Unable
+to login a DelegatingSubject on a DefaultWebSecurityManager
+* [https://issues.apache.org/jira/browse/SHIRO-654[SHIRO-654]] -
+Multiple shiro OSGi bundles export the same packages
+* [https://issues.apache.org/jira/browse/SHIRO-678[SHIRO-678]] - Strings
+garbled when POST without JSESSIONID cookie
+* [https://issues.apache.org/jira/browse/SHIRO-761[SHIRO-761]] - Bad
+OSGi import for javax.annotation in shiro-guice
+* [https://issues.apache.org/jira/browse/SHIRO-762[SHIRO-762]] -
+SecurityUtils.securityManager should be volatile
+* [https://issues.apache.org/jira/browse/SHIRO-766[SHIRO-766]] -
+ArrayIndexOutOfBoundsException in Base64#decode
+* [https://issues.apache.org/jira/browse/SHIRO-767[SHIRO-767]] -
+org.apache.shiro.util.ClassUtil cannot load the array of Primitive
+DataType when use undertown as web container
+* [https://issues.apache.org/jira/browse/SHIRO-774[SHIRO-774]] - Remove
+wrong usage of prerequisites in pom.xml
+* [https://issues.apache.org/jira/browse/SHIRO-778[SHIRO-778]] - onInit
+method on AuthenticatingRealm is called twice
+* [https://issues.apache.org/jira/browse/SHIRO-792[SHIRO-792]] -
+ShiroWebFilterConfiguration seems to conflict with other
+FilterRegistrationBean
+* [https://issues.apache.org/jira/browse/SHIRO-797[SHIRO-797]] - Shiro
+1.7.0 is lower than using springboot version 2.0.7 dependency error
+* [https://issues.apache.org/jira/browse/SHIRO-812[SHIRO-812]] - Key
+value separator in config is broken with escape char
+* [https://issues.apache.org/jira/browse/SHIRO-817[SHIRO-817]] -
+CommonsInterpolator does not follow javadoc
+* [https://issues.apache.org/jira/browse/SHIRO-818[SHIRO-818]] - JAX-RS
+ExceptionMapper returns wrong status code
+* [https://issues.apache.org/jira/browse/SHIRO-819[SHIRO-819]] - Hasher
+Utility not executable
+* [https://issues.apache.org/jira/browse/SHIRO-825[SHIRO-825]] -
+Trailing slash in URI results in "IllegalArgumentException: There is no
+configured chain under the name/key"
+* [https://issues.apache.org/jira/browse/SHIRO-845[SHIRO-845]] -
+Dependencies for test-jars missing
+* [https://issues.apache.org/jira/browse/SHIRO-899[SHIRO-899]] - Jakarta
+9+ fails with Shiro native sesions
+* [https://issues.apache.org/jira/browse/SHIRO-902[SHIRO-902]] -
+Separator conflict between PermissionUtils.resolveDelimitedPermissions()
+and WildcardPermission.SUBPART_DIVIDER_TOKEN
+
+=== Epic
+
+* [https://issues.apache.org/jira/browse/SHIRO-897[SHIRO-897]] - Group
+all Jakarta-EE related issues here
+
+=== New Features
+
+* [https://issues.apache.org/jira/browse/SHIRO-206[SHIRO-206]] - Support
+for JSF/Facelets
+* [https://issues.apache.org/jira/browse/SHIRO-290[SHIRO-290]] - Create
+a BCrypt Hash implementation
+* [https://issues.apache.org/jira/browse/SHIRO-337[SHIRO-337]] - adding
+support for CDI
+* [https://issues.apache.org/jira/browse/SHIRO-789[SHIRO-789]] - Also
+add cookie SameSite option to Spring
+* [https://issues.apache.org/jira/browse/SHIRO-898[SHIRO-898]] - Migrate
+Jakarta EE support from FlowLogix to Shiro
+
+=== Improvements
+
+* [https://issues.apache.org/jira/browse/SHIRO-216[SHIRO-216]] - Add
+@Documented to Shiro authorization annotations
+* [https://issues.apache.org/jira/browse/SHIRO-398[SHIRO-398]] -
+Inconsistent name for session validation interval property in different
+implementations
+* [https://issues.apache.org/jira/browse/SHIRO-478[SHIRO-478]] - Upgrade
+dependencies on trunk
+* [https://issues.apache.org/jira/browse/SHIRO-551[SHIRO-551]] -
+DelegatingSubject should implement toString()
+* [https://issues.apache.org/jira/browse/SHIRO-671[SHIRO-671]] - Add
+support for javax.annotation.security.RolesAllowed, PermitAll, and
+DenyAll
+* [https://issues.apache.org/jira/browse/SHIRO-679[SHIRO-679]] - Shiro
+modules have split packages
+* [https://issues.apache.org/jira/browse/SHIRO-708[SHIRO-708]] - Remove
+deprecated shiro-cas module
+* [https://issues.apache.org/jira/browse/SHIRO-740[SHIRO-740]] -
+SslFilter with HTTP Strict Transport Security (HSTS)
+* [https://issues.apache.org/jira/browse/SHIRO-750[SHIRO-750]] - Migrate
+to jakarta APIs
+* [https://issues.apache.org/jira/browse/SHIRO-764[SHIRO-764]] - Add
+IpFilter for restricting access IP ranges
+* [https://issues.apache.org/jira/browse/SHIRO-770[SHIRO-770]] - Remove
+Base64
+* [https://issues.apache.org/jira/browse/SHIRO-771[SHIRO-771]] - Add
+OpenJDK-OpenJ9 travis builds
+* [https://issues.apache.org/jira/browse/SHIRO-795[SHIRO-795]] - Disable
+session path rewriting by default
+* [https://issues.apache.org/jira/browse/SHIRO-804[SHIRO-804]] - Avoid
+conflicts with spring boot aop
+* [https://issues.apache.org/jira/browse/SHIRO-806[SHIRO-806]] - Remove
+deprecated DefaultLdapContextFactory
+* [https://issues.apache.org/jira/browse/SHIRO-807[SHIRO-807]] - Remove
+deprecated getLdapContext(String username, String password)
+* [https://issues.apache.org/jira/browse/SHIRO-811[SHIRO-811]] - Convert
+AuthorizationFilterTest to using Mockito
+* [https://issues.apache.org/jira/browse/SHIRO-836[SHIRO-836]] - Delete
+jsecurty-sample.jks
+* [https://issues.apache.org/jira/browse/SHIRO-838[SHIRO-838]] - Create
+SHA512-Hashes
+* [https://issues.apache.org/jira/browse/SHIRO-840[SHIRO-840]] - Java 17
+compatibility
+* [https://issues.apache.org/jira/browse/SHIRO-846[SHIRO-846]] -
+Creation of site takes very long time
+* [https://issues.apache.org/jira/browse/SHIRO-848[SHIRO-848]] -
+Relative Path in pom.xml is not needed
+* [https://issues.apache.org/jira/browse/SHIRO-850[SHIRO-850]] - The
+profile name jdk19-plus is misleading
+* [https://issues.apache.org/jira/browse/SHIRO-851[SHIRO-851]] -
+Handling properties for compile/enconding vs. default configurations of
+plugins
+* [https://issues.apache.org/jira/browse/SHIRO-852[SHIRO-852]] -
+Configuration for maven-release-plugin prepationGoal should be changed
+* [https://issues.apache.org/jira/browse/SHIRO-853[SHIRO-853]] -
+Versions of maven-surefire/failsafe/report plugin are not in sync
+* [https://issues.apache.org/jira/browse/SHIRO-854[SHIRO-854]] -
+Konfiguration includes/excludes maven-failsafe-plugin can be reduced to
+default
+* [https://issues.apache.org/jira/browse/SHIRO-860[SHIRO-860]] - update
+logback to 1.2.10
+* [https://issues.apache.org/jira/browse/SHIRO-862[SHIRO-862]] - Replace
+Google Analytics with Matomo for new Javadocs
+* [https://issues.apache.org/jira/browse/SHIRO-871[SHIRO-871]] -
+ActiveDirectoryRealm - append suffix only if missing from username
+* [https://issues.apache.org/jira/browse/SHIRO-872[SHIRO-872]] - fix
+Reproducible Builds issues
+* [https://issues.apache.org/jira/browse/SHIRO-884[SHIRO-884]] - fix
+source jar Reproducible Builds issue
+* [https://issues.apache.org/jira/browse/SHIRO-885[SHIRO-885]] - Use
+OWASP Java Encoder with OSGi manifest
+* [https://issues.apache.org/jira/browse/SHIRO-889[SHIRO-889]] - Provide
+Jakarta jar modules
+* [https://issues.apache.org/jira/browse/SHIRO-890[SHIRO-890]] - Avoid
+another proxy creator when @EnableAspectJAutoProxy enabled
+* [https://issues.apache.org/jira/browse/SHIRO-900[SHIRO-900]] -
+Refactor of root POM (and update groovy to apache)
+
+=== Tests
+
+* [https://issues.apache.org/jira/browse/SHIRO-776[SHIRO-776]] - JUnit
+update to version 5
+* [https://issues.apache.org/jira/browse/SHIRO-777[SHIRO-777]] - Remove
+PowerMock and update the enforcer exclusion list
+
+=== Wishe
+
+* [https://issues.apache.org/jira/browse/SHIRO-780[SHIRO-780]] - NOTICE
+files of shiro components don't match NOTICE in source code repository
+
+=== Tasks
+
+* [https://issues.apache.org/jira/browse/SHIRO-39[SHIRO-39]] - JEE
+integration
+* [https://issues.apache.org/jira/browse/SHIRO-573[SHIRO-573]] - Remove
+shiro-cas from master (2.0)
+* [https://issues.apache.org/jira/browse/SHIRO-768[SHIRO-768]] - Remove
+the shiro-all module
+* [https://issues.apache.org/jira/browse/SHIRO-793[SHIRO-793]] -
+deleteMe cookie should use the defined "sameSite"
+* [https://issues.apache.org/jira/browse/SHIRO-805[SHIRO-805]] -
+Spelling
+* [https://issues.apache.org/jira/browse/SHIRO-841[SHIRO-841]] -
+NullPointerException from SessionsSecurityManager.start()
+* [https://issues.apache.org/jira/browse/SHIRO-849[SHIRO-849]] - Add
+support for JCache
+* [https://issues.apache.org/jira/browse/SHIRO-904[SHIRO-904]] - Make
+JDK 11 base compatibility in Shiro 2.0
+
+=== Dependency upgrades
+
+* [https://issues.apache.org/jira/browse/SHIRO-765[SHIRO-765]] - Upgrade
+to Apache Pom Parent 23
+* [https://issues.apache.org/jira/browse/SHIRO-785[SHIRO-785]] - Upgrade
+to maven-bundle-plugin 5.1.1
+* [https://issues.apache.org/jira/browse/SHIRO-786[SHIRO-786]] - Upgrade
+to Spring 5.2.8.RELEASE and Spring boot 2.3.2.RELEASE
+* [https://issues.apache.org/jira/browse/SHIRO-828[SHIRO-828]] -
+aspectj-maven-plugin 1.14.0
+* [https://issues.apache.org/jira/browse/SHIRO-842[SHIRO-842]] -
+shiro-web depends on older log4j
+* [https://issues.apache.org/jira/browse/SHIRO-878[SHIRO-878]] - Update
+Spring Dependencies to 5.2.20
+* [https://issues.apache.org/jira/browse/SHIRO-882[SHIRO-882]] - Upgrade
+to apache pom parent 26
+* [https://issues.apache.org/jira/browse/SHIRO-886[SHIRO-886]] - Upgrade
+to commons configuration 2.8.0
+
+=== Question
+
+* [https://issues.apache.org/jira/browse/SHIRO-784[SHIRO-784]] - Error
+creating bean with name
+'org.apache.shiro.spring.web.config.ShiroWebFilterConfiguration':
+Unsatisfied dependency expressed through field 'filterMap';
+
+=== Dependency
+
+* [https://issues.apache.org/jira/browse/SHIRO-881[SHIRO-881]] - pom.xml
+in samples/web may lack dependency
+
+
+== Download
+
+Download and verification instructions are available link:/download.html[on our download page].
+
+== Documentation
+
+For more information on link:/documentation.html[Shiro, please read the documentation.]
+
+Enjoy!
+
+The Apache Shiro Team