You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@shiro.apache.org by "kirys.it" <ki...@neoteroi.org> on 2015/05/20 09:28:03 UTC
Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Hi all
I'm searching for a security framework for a personal project based on
JEE6 (JSF + CDI
+ EJB and Jax-ws for the rest parts)
Shiro seemed a good candidate ( social with
https://github.com/bujiio/buji-pac4j ) but lack of official support for
the stack and lack of updates ( is this the official repo?
https://github.com/apache/shiro/blob/trunk/ ) make me think that maybe i
should look else were.
What You think
K.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Lenny Primak <lp...@hope.nyc.ny.us>.
I am using Shiro in this exact context. It works great
> On Jul 6, 2015, at 5:18 PM, dan <da...@bamlabs.com> wrote:
>
> I have chosen Shiro for several web projects and it has worked out very
> nicely.
>
> I also have noticed that there has not been any significant development for
> about two years. My guess is that the company behind Shiro is focusing all
> their efforts on enterprise version which is unfortunate for the open source
> community. I hope they will balance their efforts in the future...
>
> Dan
>
>
>
> --
> View this message in context: http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580603.html
> Sent from the Shiro User mailing list archive at Nabble.com.
>
RE: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Konrad Zuse <th...@hotmail.com>.
No clue, just curious about the release in general as I heard there' s alot of new things and updated encryption algorithms that are preferred like HMAC and such.
Date: Tue, 7 Jul 2015 16:09:27 -0700
Subject: Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
From: kalle.o.korhonen@gmail.com
To: user@shiro.apache.org
On Tue, Jul 7, 2015 at 3:03 PM, Konrad Zuse <th...@hotmail.com> wrote:
1.2.4??? What's going on with the 2.0 branch? We were told Late 2014, more likely Q1 of 2015, but lookingmore at Q3???
2.0 branch is active. There's no fixed timetable but what sort of functionality are you specifically looking for in 2.0?
Kalle
Date: Mon, 6 Jul 2015 21:45:50 -0700
Subject: Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
From: kalle.o.korhonen@gmail.com
To: user@shiro.apache.org
On Mon, Jul 6, 2015 at 2:18 PM, dan <da...@bamlabs.com> wrote:
I have chosen Shiro for several web projects and it has worked out very
nicely.
I also have noticed that there has not been any significant development for
about two years. My guess is that the company behind Shiro is focusing all
their efforts on enterprise version which is unfortunate for the open source
community. I hope they will balance their efforts in the future...
The committers all work for different companies. True, there hasn't been any major development in the past couple of years but it's only because the current offering is pretty stable and does what it is meant for. Incidentally, I'm just working on getting 1.2.4 release out though.
Kalle
--
View this message in context: http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580603.html
Sent from the Shiro User mailing list archive at Nabble.com.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Kalle Korhonen <ka...@gmail.com>.
On Tue, Jul 7, 2015 at 3:03 PM, Konrad Zuse <th...@hotmail.com>
wrote:
> 1.2.4??? What's going on with the 2.0 branch? We were told Late 2014,
> more likely Q1 of 2015, but lookingmore at Q3???
>
2.0 branch is active. There's no fixed timetable but what sort of
functionality are you specifically looking for in 2.0?
Kalle
------------------------------
> Date: Mon, 6 Jul 2015 21:45:50 -0700
> Subject: Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
> From: kalle.o.korhonen@gmail.com
> To: user@shiro.apache.org
>
>
> On Mon, Jul 6, 2015 at 2:18 PM, dan <da...@bamlabs.com> wrote:
>
> I have chosen Shiro for several web projects and it has worked out very
> nicely.
> I also have noticed that there has not been any significant development for
> about two years. My guess is that the company behind Shiro is focusing all
> their efforts on enterprise version which is unfortunate for the open
> source
> community. I hope they will balance their efforts in the future...
>
>
> The committers all work for different companies. True, there hasn't been
> any major development in the past couple of years but it's only because the
> current offering is pretty stable and does what it is meant for.
> Incidentally, I'm just working on getting 1.2.4 release out though.
>
> Kalle
>
>
> --
> View this message in context:
> http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580603.html
> Sent from the Shiro User mailing list archive at Nabble.com.
>
>
>
RE: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Konrad Zuse <th...@hotmail.com>.
1.2.4??? What's going on with the 2.0 branch? We were told Late 2014, more likely Q1 of 2015, but lookingmore at Q3???
Date: Mon, 6 Jul 2015 21:45:50 -0700
Subject: Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
From: kalle.o.korhonen@gmail.com
To: user@shiro.apache.org
On Mon, Jul 6, 2015 at 2:18 PM, dan <da...@bamlabs.com> wrote:
I have chosen Shiro for several web projects and it has worked out very
nicely.
I also have noticed that there has not been any significant development for
about two years. My guess is that the company behind Shiro is focusing all
their efforts on enterprise version which is unfortunate for the open source
community. I hope they will balance their efforts in the future...
The committers all work for different companies. True, there hasn't been any major development in the past couple of years but it's only because the current offering is pretty stable and does what it is meant for. Incidentally, I'm just working on getting 1.2.4 release out though.
Kalle
--
View this message in context: http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580603.html
Sent from the Shiro User mailing list archive at Nabble.com.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by dan <da...@bamlabs.com>.
Kalle,
For what it's worth, my observation is that open source software either
steadily evolves or it gets eclipsed at some point...
There is so much concern and activity in security that it is hard to imagine
that the core product couldn't benefit from attention in this area. As
another example, Lee has created a very cool offering, JSON Web Token for
Java, which would be nice to see incorporated into Shiro. I think that
Shiro has to move up the food chain in order to stay relevant.
Like I said, I think Shiro is a great offering and I'd like to see it
maintain its edge.
Just my 2 cents,
Dan
--
View this message in context: http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580606.html
Sent from the Shiro User mailing list archive at Nabble.com.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Kalle Korhonen <ka...@gmail.com>.
On Mon, Jul 6, 2015 at 2:18 PM, dan <da...@bamlabs.com> wrote:
> I have chosen Shiro for several web projects and it has worked out very
> nicely.
> I also have noticed that there has not been any significant development for
> about two years. My guess is that the company behind Shiro is focusing all
> their efforts on enterprise version which is unfortunate for the open
> source
> community. I hope they will balance their efforts in the future...
>
The committers all work for different companies. True, there hasn't been
any major development in the past couple of years but it's only because the
current offering is pretty stable and does what it is meant for.
Incidentally, I'm just working on getting 1.2.4 release out though.
Kalle
> --
> View this message in context:
> http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580603.html
> Sent from the Shiro User mailing list archive at Nabble.com.
>
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by dan <da...@bamlabs.com>.
I have chosen Shiro for several web projects and it has worked out very
nicely.
I also have noticed that there has not been any significant development for
about two years. My guess is that the company behind Shiro is focusing all
their efforts on enterprise version which is unfortunate for the open source
community. I hope they will balance their efforts in the future...
Dan
--
View this message in context: http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580603.html
Sent from the Shiro User mailing list archive at Nabble.com.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by "kirys.it" <ki...@neoteroi.org>.
On 05/20/2015 09:53 AM, Alexander Openkowski wrote:
> As you can see it is being worked on Shiro 2.0. How actively, maybe
> behind the scenes? When will it be released? I have no clue. : )
>
Is what I hope cause it is a nice project, but it is like it is in
suspended animation ^_^.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Alexander Openkowski <op...@googlemail.com>.
I can not tell you whether Shiro is a good choice for your case, but
there has been some activity recently on trunk:
https://github.com/apache/shiro/commits/trunk
and also on this 2.0 branch:
https://github.com/apache/shiro/commits/2.0-api-design-changes
As you can see it is being worked on Shiro 2.0. How actively, maybe
behind the scenes? When will it be released? I have no clue. : )
On 05/20/2015 09:28 AM, kirys.it wrote:
> Hi all
> I'm searching for a security framework for a personal project based on
> JEE6 (JSF + CDI
> + EJB and Jax-ws for the rest parts)
> Shiro seemed a good candidate ( social with
> https://github.com/bujiio/buji-pac4j ) but lack of official support
> for the stack and lack of updates ( is this the official repo?
> https://github.com/apache/shiro/blob/trunk/ ) make me think that maybe
> i should look else were.
> What You think
> K.
>
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Lenny Primak <lp...@hope.nyc.ny.us>.
I don't use pax. Perhaps I should. The home page has a read me. The library has all the integration points between shiro and Java EE
> On May 21, 2015, at 10:58 AM, Kirys <ki...@neoteroi.org> wrote:
>
>
> On 20 May 2015 16:33, "Lenny Primak" <lp...@hope.nyc.ny.us> wrote:
> >
> > We use Shiro in JavaEE 7 (JSF/CDI/Jax-RS/EJB etc)
>
> Do you use pax too?
>
> > I also wrote FlowLogix JEE library that has a integrations with Shiro:
> >
> > https://github.com/flowlogix/flowlogix
>
> Just curious, what is this library for? I didn't find a summary page :) (or maybe just missed it somehow)
>
> Bye
> K.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Kirys <ki...@neoteroi.org>.
On 20 May 2015 16:33, "Lenny Primak" <lp...@hope.nyc.ny.us> wrote:
>
> We use Shiro in JavaEE 7 (JSF/CDI/Jax-RS/EJB etc)
Do you use pax too?
> I also wrote FlowLogix JEE library that has a integrations with Shiro:
>
> https://github.com/flowlogix/flowlogix
Just curious, what is this library for? I didn't find a summary page :)
(or maybe just missed it somehow)
Bye
K.
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by Lenny Primak <lp...@hope.nyc.ny.us>.
We use Shiro in JavaEE 7 (JSF/CDI/Jax-RS/EJB etc)
I also wrote FlowLogix JEE library that has a integrations with Shiro:
https://github.com/flowlogix/flowlogix
On May 20, 2015, at 3:28 AM, kirys.it wrote:
> Hi all
> I'm searching for a security framework for a personal project based on JEE6 (JSF + CDI
> + EJB and Jax-ws for the rest parts)
> Shiro seemed a good candidate ( social with https://github.com/bujiio/buji-pac4j ) but lack of official support for the stack and lack of updates ( is this the official repo? https://github.com/apache/shiro/blob/trunk/ ) make me think that maybe i should look else were.
> What You think
> K.
>
Re: Is shiro still a good choice (JSF+CDI-JAX-WS ejb)
Posted by scSynergy <ro...@scsynergy.de>.
I use Shiro with JEE7 on Wildfly in combination with
https://github.com/ops4j/org.ops4j.pax.shiro and still have not found any
security framework that is as lightweight, flexible and easy to use as
Shiro. But I sure hope that CDI will be officially supported by Shiro in
version 2.
--
View this message in context: http://shiro-user.582556.n2.nabble.com/Is-shiro-still-a-good-choice-JSF-CDI-JAX-WS-ejb-tp7580542p7580543.html
Sent from the Shiro User mailing list archive at Nabble.com.