# Apache Shiro

Java security framework that performs authentication, authorization, cryptography and session management.


Source: https://findsoftware.frbit.cloud/apache-shiro/
Last reviewed: 2026-11-04
Listed since: 2026-11-04

## Record

### Links

- home: https://shiro.apache.org/
- repository: https://github.com/apache/shiro
- docs: https://shiro.apache.org/10-minute-tutorial.html
- forum: https://github.com/apache/shiro/discussions

### Identity

- status: active
- maintainer: The Apache Software Foundation
- maintainerType: foundation
- parent: unknown
- firstRelease: 2010
- hqCountry: unknown

### Kind

- category: auth
- hosting: java
- language: java
- runtime: jvm
- runtimeMin: jvm 17
- basedOn: unknown

### Content

- contentStore: not applicable
- databases: not applicable
- adminUi: not applicable
- headlessApi: not applicable
- templating: not applicable
- i18n: not applicable

### Rendering and deploy

- runsAs: unknown
- renderingModes: not applicable
- installMethod: maven

### License

- licenseModel: open-source
- license: Apache-2.0

### Releases

- currentMajor: 3
- latestReleaseDate: 2026-08-23

### Adoption

- githubStargazers: 4464
- packagistDownloads: not applicable
- npmWeeklyDownloads: not applicable
- contributors: 83
- pluginCount: unknown
- packagistMonthlyDownloads: unknown
- ecosystemsMonthlyDownloads: unknown
- httpArchiveSites: unknown
- wordpressActiveInstalls: unknown
- dependentRepos: unknown
- dependentPackages: unknown

### Sources

- urls: https://shiro.apache.org/ (read 2026-11-04)
- urls: https://api.github.com/repos/apache/shiro (read 2026-11-04)
- urls: https://shiro.apache.org/10-minute-tutorial.html (read 2026-11-04)
- firstRelease: https://search.maven.org/solrsearch/select?q=g:org.apache.shiro+AND+a:shiro-core&core=gav&rows=200&wt=json (read 2026-11-04)
- maintainer: https://shiro.apache.org/ (read 2026-11-04)
- maintainerType: https://shiro.apache.org/ (read 2026-11-04)
- category: https://shiro.apache.org/ (read 2026-11-04)
- language: https://api.github.com/repos/apache/shiro (read 2026-11-04)
- runtime: https://shiro.apache.org/download.html (read 2026-11-04)
- runtimeMin: https://shiro.apache.org/download.html (read 2026-11-04)
- installMethod: https://shiro.apache.org/download.html (read 2026-11-04)
- installMethod: https://shiro.apache.org/download.html (read 2026-11-04)
- license: https://github.com/apache/shiro/blob/main/LICENSE (read 2026-11-04)
- licenseModel: https://github.com/apache/shiro/blob/main/LICENSE (read 2026-11-04)
- currentMajor: https://github.com/apache/shiro/releases/tag/shiro-root-3.0.1 (read 2026-11-04)
- latestReleaseDate: https://api.github.com/repos/apache/shiro/releases (read 2026-11-04)
- githubStargazers: https://api.github.com/repos/apache/shiro (read 2026-11-04)
- contributors: https://api.github.com/repos/apache/shiro/contributors (read 2026-11-04)

## Notes

Apache Shiro is a Java security framework for authentication, authorization, cryptography and session management. A Java application adds it through Maven: shiro-core is required in every environment, and shiro-web is the module for web applications. The web configuration pages register a listener and a filter in web.xml, and the site lists Spring, Guice and Jakarta EE integrations alongside the core.

The Apache Software Foundation maintains the project.

## Worth knowing

The site marks its older release lines as end of life; the download page offers the current line. Building from the source bundle needs a newer JDK than the runtime minimum on the download page.

---

Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Attributes are recorded, never scored; absent means unknown.
Credit, in full: FindSoftware, CC BY 4.0