Google Git
Sign in
apache / shiro-site / f7cdd255bcc892cff7e35dfe14c82f33ef7414da / . / feed.xml
blob: 2e30e06936d3e33c53e580c12e95e11d20cb1cd6 [file] [log] [blame]
<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
<title>Apache Shiro | The Apache Software Foundation</title>
<subtitle>Simple. Java. Security.</subtitle>
<link href="https://shiro.apache.org/"/>
<link rel="self" href="https://shiro.apache.org/feed.xml" />
<updated>2024-02-28T20:20:16Z</updated>
<author>
<name>Les Hazlewood</name>
<uri>https://twitter.com/@lhazlewood</uri>
</author>
<author>
<name>Benjamin Marwell</name>
<uri>https://twitter.com/@bmarwell</uri>
</author>
<author>
<name>Lenny Primak</name>
<uri>https://twitter.com/@lprimak</uri>
</author>
<author>
<name>François Papon</name>
<uri>https://twitter.com/@fpapon2</uri>
</author>
<author>
<name>Richard Zowalla</name>
<uri>https://twitter.com/@zowalla</uri>
</author>
<author>
<name>Brian Demers</name>
<uri>https://twitter.com/@briandemers</uri>
</author>
<id>https://shiro.apache.org/</id>
<generator uri="https://jbake.org/">JBake.org</generator>
<icon>/images/favicon128.png</icon>
<logo>/images/apache-shiro-logo.png</logo>
<entry>
<title>2.0.0 available</title>
<link href="https://shiro.apache.org/blog/2024/02/apache-shiro-200-released.html"/>
<id>https://shiro.apache.org/blog/2024/02/apache-shiro-200-released.html</id>
<updated>2024-02-28T00:00:00Z</updated>
<author>
<name>Lenny Primak</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.0.
This is the first major release for Shiro 2.x&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;release_highlights&quot;&gt;Release Highlights&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;Java 11 is the minimum supported JVM version&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;Jakarta EE 10 support (Java/Jakarta EE 8 is also supported)&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;New Jakarta EE integration module (see &lt;a href=&quot;https://shiro.apache.org/jakarta-ee.html&quot;&gt;Jakarta EE Integration&lt;/a&gt; for more information)&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;SpringBoot 3.x support (SpringBoot 2.x is also supported)&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;Automatic form resubmission when session expired (Jakarta EE only)&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://github.com/apache/shiro/releases/tag/shiro-root-2.0.0&quot;&gt;GitHub, Release 2.0.0&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>1.13.0 available with fix CVE-2023-46750</title>
<link href="https://shiro.apache.org/blog/2023/11/10/apache-shiro-1130-released.html"/>
<id>https://shiro.apache.org/blog/2023/11/10/apache-shiro-1130-released.html</id>
<updated>2023-11-10T00:00:00Z</updated>
<author>
<name>Francois Papon</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.13.0.
This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release solves 2 issues since the 1.13.0 release and is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://github.com/apache/shiro/releases/tag/shiro-root-1.13.0&quot;&gt;GitHub, Release 1.13.0&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;cve_2023_46750&quot;&gt;&lt;a href=&quot;https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46750&quot;&gt;CVE-2023-46750&lt;/a&gt;&lt;/h3&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;URL Redirection to Untrusted Site (&apos;Open Redirect&apos;) vulnerability when &quot;form&quot; authentication is used in Apache Shiro.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;&lt;strong&gt;Mitigation:&lt;/strong&gt; Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>1.12.0 available with fix CVE-2023-34478</title>
<link href="https://shiro.apache.org/blog/2023/07/18/apache-shiro-1120-released.html"/>
<id>https://shiro.apache.org/blog/2023/07/18/apache-shiro-1120-released.html</id>
<updated>2023-07-18T00:00:00Z</updated>
<author>
<name>Francois Papon</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.12.0.
This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release solves 2 issues since the 1.12.0 release and is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://issues.apache.org/jira/projects/SHIRO/versions/12353403&quot;&gt;Jira, Release 1.12.0&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;cve_2023_34478&quot;&gt;&lt;a href=&quot;https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34478&quot;&gt;CVE-2023-34478&lt;/a&gt;&lt;/h3&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;&lt;strong&gt;Mitigation:&lt;/strong&gt; Update to Apache Shiro 1.12.0+ or 2.0.0-alpha-3+.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;&lt;strong&gt;Credit:&lt;/strong&gt;
Apache Shiro would like to thank &lt;strong&gt;swifty tk&lt;/strong&gt; for reporting this issue.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;improvement&quot;&gt;Improvement&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-816&quot;&gt;SHIRO-816&lt;/a&gt;] - Update shiro-hazelcast to support Hazelcast 5.x&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;task&quot;&gt;Task&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-849&quot;&gt;SHIRO-849&lt;/a&gt;] - Add support for JCache&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>2.0.0-alpha available</title>
<link href="https://shiro.apache.org/blog/2023/05/04/apache-shiro-200-alpha-1-released.html"/>
<id>https://shiro.apache.org/blog/2023/05/04/apache-shiro-200-alpha-1-released.html</id>
<updated>2023-05-04T00:00:00Z</updated>
<author>
<name>Lenny Primak</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.0-alpha.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://issues.apache.org/jira/projects/SHIRO/versions/12315455&quot;&gt;Jira, Release 2.0.0-alpha&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Release Notes - Shiro - Version 2.0.0-alpha&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;sub_tasks&quot;&gt;Sub-tasks&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-772&quot;&gt;SHIRO-772&lt;/a&gt;] -
PowerMock blocks JDK 11+ builds&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-773&quot;&gt;SHIRO-773&lt;/a&gt;] -
Outdated Groovy version does not work with JDK14&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-775&quot;&gt;SHIRO-775&lt;/a&gt;] -
Excessive logging in jetty ContainerITs&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;bugs&quot;&gt;Bugs&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-349&quot;&gt;SHIRO-349&lt;/a&gt;] -
Security: Byte arrays (and other memory) holding sensitive data (even
temporarily) should be zerod-out&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-512&quot;&gt;SHIRO-512&lt;/a&gt;] - Race
condition in Shiro&amp;#8217;s web container session timeout handling&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-537&quot;&gt;SHIRO-537&lt;/a&gt;] - Class
load issue in OSGI in ClassUtils&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-610&quot;&gt;SHIRO-610&lt;/a&gt;] -
Incorrect filterchainResolver in 1.4.0-RC2&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-632&quot;&gt;SHIRO-632&lt;/a&gt;] -
org.apache.felix:maven-bundle-plugin causing duplicate class problems
between core and lang&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-646&quot;&gt;SHIRO-646&lt;/a&gt;] - Unable
to login a DelegatingSubject on a DefaultWebSecurityManager&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-654&quot;&gt;SHIRO-654&lt;/a&gt;] -
Multiple shiro OSGi bundles export the same packages&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-678&quot;&gt;SHIRO-678&lt;/a&gt;] - Strings
garbled when POST without JSESSIONID cookie&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-761&quot;&gt;SHIRO-761&lt;/a&gt;] - Bad
OSGi import for javax.annotation in shiro-guice&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-762&quot;&gt;SHIRO-762&lt;/a&gt;] -
SecurityUtils.securityManager should be volatile&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-766&quot;&gt;SHIRO-766&lt;/a&gt;] -
ArrayIndexOutOfBoundsException in Base64#decode&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-767&quot;&gt;SHIRO-767&lt;/a&gt;] -
org.apache.shiro.util.ClassUtil cannot load the array of Primitive
DataType when use undertown as web container&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-774&quot;&gt;SHIRO-774&lt;/a&gt;] - Remove
wrong usage of prerequisites in pom.xml&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-778&quot;&gt;SHIRO-778&lt;/a&gt;] - onInit
method on AuthenticatingRealm is called twice&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-792&quot;&gt;SHIRO-792&lt;/a&gt;] -
ShiroWebFilterConfiguration seems to conflict with other
FilterRegistrationBean&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-797&quot;&gt;SHIRO-797&lt;/a&gt;] - Shiro
1.7.0 is lower than using springboot version 2.0.7 dependency error&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-812&quot;&gt;SHIRO-812&lt;/a&gt;] - Key
value separator in config is broken with escape char&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-817&quot;&gt;SHIRO-817&lt;/a&gt;] -
CommonsInterpolator does not follow javadoc&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-818&quot;&gt;SHIRO-818&lt;/a&gt;] - JAX-RS
ExceptionMapper returns wrong status code&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-819&quot;&gt;SHIRO-819&lt;/a&gt;] - Hasher
Utility not executable&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-825&quot;&gt;SHIRO-825&lt;/a&gt;] -
Trailing slash in URI results in &quot;IllegalArgumentException: There is no
configured chain under the name/key&quot;&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-845&quot;&gt;SHIRO-845&lt;/a&gt;] -
Dependencies for test-jars missing&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-899&quot;&gt;SHIRO-899&lt;/a&gt;] - Jakarta
9+ fails with Shiro native sesions&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-902&quot;&gt;SHIRO-902&lt;/a&gt;] -
Separator conflict between PermissionUtils.resolveDelimitedPermissions()
and WildcardPermission.SUBPART_DIVIDER_TOKEN&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;epic&quot;&gt;Epic&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-897&quot;&gt;SHIRO-897&lt;/a&gt;] - Group
all Jakarta-EE related issues here&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;new_features&quot;&gt;New Features&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-206&quot;&gt;SHIRO-206&lt;/a&gt;] - Support
for JSF/Facelets&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-290&quot;&gt;SHIRO-290&lt;/a&gt;] - Create
a BCrypt Hash implementation&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-337&quot;&gt;SHIRO-337&lt;/a&gt;] - adding
support for CDI&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-789&quot;&gt;SHIRO-789&lt;/a&gt;] - Also
add cookie SameSite option to Spring&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-898&quot;&gt;SHIRO-898&lt;/a&gt;] - Migrate
Jakarta EE support from FlowLogix to Shiro&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;improvements&quot;&gt;Improvements&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-216&quot;&gt;SHIRO-216&lt;/a&gt;] - Add
@Documented to Shiro authorization annotations&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-398&quot;&gt;SHIRO-398&lt;/a&gt;] -
Inconsistent name for session validation interval property in different
implementations&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-478&quot;&gt;SHIRO-478&lt;/a&gt;] - Upgrade
dependencies on trunk&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-551&quot;&gt;SHIRO-551&lt;/a&gt;] -
DelegatingSubject should implement toString()&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-671&quot;&gt;SHIRO-671&lt;/a&gt;] - Add
support for javax.annotation.security.RolesAllowed, PermitAll, and
DenyAll&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-679&quot;&gt;SHIRO-679&lt;/a&gt;] - Shiro
modules have split packages&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-708&quot;&gt;SHIRO-708&lt;/a&gt;] - Remove
deprecated shiro-cas module&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-740&quot;&gt;SHIRO-740&lt;/a&gt;] -
SslFilter with HTTP Strict Transport Security (HSTS)&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-750&quot;&gt;SHIRO-750&lt;/a&gt;] - Migrate
to jakarta APIs&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-764&quot;&gt;SHIRO-764&lt;/a&gt;] - Add
IpFilter for restricting access IP ranges&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-770&quot;&gt;SHIRO-770&lt;/a&gt;] - Remove
Base64&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-771&quot;&gt;SHIRO-771&lt;/a&gt;] - Add
OpenJDK-OpenJ9 travis builds&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-795&quot;&gt;SHIRO-795&lt;/a&gt;] - Disable
session path rewriting by default&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-804&quot;&gt;SHIRO-804&lt;/a&gt;] - Avoid
conflicts with spring boot aop&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-806&quot;&gt;SHIRO-806&lt;/a&gt;] - Remove
deprecated DefaultLdapContextFactory&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-807&quot;&gt;SHIRO-807&lt;/a&gt;] - Remove
deprecated getLdapContext(String username, String password)&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-811&quot;&gt;SHIRO-811&lt;/a&gt;] - Convert
AuthorizationFilterTest to using Mockito&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-836&quot;&gt;SHIRO-836&lt;/a&gt;] - Delete
jsecurty-sample.jks&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-838&quot;&gt;SHIRO-838&lt;/a&gt;] - Create
SHA512-Hashes&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-840&quot;&gt;SHIRO-840&lt;/a&gt;] - Java 17
compatibility&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-846&quot;&gt;SHIRO-846&lt;/a&gt;] -
Creation of site takes very long time&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-848&quot;&gt;SHIRO-848&lt;/a&gt;] -
Relative Path in pom.xml is not needed&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-850&quot;&gt;SHIRO-850&lt;/a&gt;] - The
profile name jdk19-plus is misleading&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-851&quot;&gt;SHIRO-851&lt;/a&gt;] -
Handling properties for compile/enconding vs. default configurations of
plugins&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-852&quot;&gt;SHIRO-852&lt;/a&gt;] -
Configuration for maven-release-plugin prepationGoal should be changed&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-853&quot;&gt;SHIRO-853&lt;/a&gt;] -
Versions of maven-surefire/failsafe/report plugin are not in sync&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-854&quot;&gt;SHIRO-854&lt;/a&gt;] -
Konfiguration includes/excludes maven-failsafe-plugin can be reduced to
default&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-860&quot;&gt;SHIRO-860&lt;/a&gt;] - update
logback to 1.2.10&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-862&quot;&gt;SHIRO-862&lt;/a&gt;] - Replace
Google Analytics with Matomo for new Javadocs&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-871&quot;&gt;SHIRO-871&lt;/a&gt;] -
ActiveDirectoryRealm - append suffix only if missing from username&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-872&quot;&gt;SHIRO-872&lt;/a&gt;] - fix
Reproducible Builds issues&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-884&quot;&gt;SHIRO-884&lt;/a&gt;] - fix
source jar Reproducible Builds issue&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-885&quot;&gt;SHIRO-885&lt;/a&gt;] - Use
OWASP Java Encoder with OSGi manifest&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-889&quot;&gt;SHIRO-889&lt;/a&gt;] - Provide
Jakarta jar modules&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-890&quot;&gt;SHIRO-890&lt;/a&gt;] - Avoid
another proxy creator when @EnableAspectJAutoProxy enabled&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-900&quot;&gt;SHIRO-900&lt;/a&gt;] -
Refactor of root POM (and update groovy to apache)&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;tests&quot;&gt;Tests&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-776&quot;&gt;SHIRO-776&lt;/a&gt;] - JUnit
update to version 5&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-777&quot;&gt;SHIRO-777&lt;/a&gt;] - Remove
PowerMock and update the enforcer exclusion list&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;wishe&quot;&gt;Wishe&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-780&quot;&gt;SHIRO-780&lt;/a&gt;] - NOTICE
files of shiro components don&amp;#8217;t match NOTICE in source code repository&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;tasks&quot;&gt;Tasks&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-39&quot;&gt;SHIRO-39&lt;/a&gt;] - JEE
integration&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-573&quot;&gt;SHIRO-573&lt;/a&gt;] - Remove
shiro-cas from master (2.0)&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-768&quot;&gt;SHIRO-768&lt;/a&gt;] - Remove
the shiro-all module&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-793&quot;&gt;SHIRO-793&lt;/a&gt;] -
deleteMe cookie should use the defined &quot;sameSite&quot;&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-805&quot;&gt;SHIRO-805&lt;/a&gt;] -
Spelling&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-841&quot;&gt;SHIRO-841&lt;/a&gt;] -
NullPointerException from SessionsSecurityManager.start()&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-849&quot;&gt;SHIRO-849&lt;/a&gt;] - Add
support for JCache&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-904&quot;&gt;SHIRO-904&lt;/a&gt;] - Make
JDK 11 base compatibility in Shiro 2.0&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;dependency_upgrades&quot;&gt;Dependency upgrades&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-765&quot;&gt;SHIRO-765&lt;/a&gt;] - Upgrade
to Apache Pom Parent 23&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-785&quot;&gt;SHIRO-785&lt;/a&gt;] - Upgrade
to maven-bundle-plugin 5.1.1&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-786&quot;&gt;SHIRO-786&lt;/a&gt;] - Upgrade
to Spring 5.2.8.RELEASE and Spring boot 2.3.2.RELEASE&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-828&quot;&gt;SHIRO-828&lt;/a&gt;] -
aspectj-maven-plugin 1.14.0&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-842&quot;&gt;SHIRO-842&lt;/a&gt;] -
shiro-web depends on older log4j&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-878&quot;&gt;SHIRO-878&lt;/a&gt;] - Update
Spring Dependencies to 5.2.20&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-882&quot;&gt;SHIRO-882&lt;/a&gt;] - Upgrade
to apache pom parent 26&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-886&quot;&gt;SHIRO-886&lt;/a&gt;] - Upgrade
to commons configuration 2.8.0&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;question&quot;&gt;Question&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-784&quot;&gt;SHIRO-784&lt;/a&gt;] - Error
creating bean with name
&apos;org.apache.shiro.spring.web.config.ShiroWebFilterConfiguration&apos;:
Unsatisfied dependency expressed through field &apos;filterMap&apos;;&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;dependency&quot;&gt;Dependency&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-881&quot;&gt;SHIRO-881&lt;/a&gt;] - pom.xml
in samples/web may lack dependency&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>1.11.0 available with fix CVE-2023-22602</title>
<link href="https://shiro.apache.org/blog/2023/01/13/apache-shiro-1110-released.html"/>
<id>https://shiro.apache.org/blog/2023/01/13/apache-shiro-1110-released.html</id>
<updated>2023-01-13T00:00:00Z</updated>
<author>
<name>Brian Demers</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.11.0.
This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release solves 3 issues since the 1.11.0 release and is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://issues.apache.org/jira/projects/SHIRO/versions/12352377&quot;&gt;Jira, Release 1.11.0&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release includes classifiers for the Jakarta namespace.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;cve_2023_22602&quot;&gt;&lt;a href=&quot;https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22602&quot;&gt;CVE-2023-22602&lt;/a&gt;&lt;/h3&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;When using Apache Shiro before 1.11.0 together with Spring Boot 2.6+, a specially crafted HTTP request may cause an authentication bypass.
The authentication bypass occurs when Shiro and Spring Boot are using different pattern-matching techniques. Both Shiro and Spring Boot &amp;lt; 2.6 default to Ant style pattern matching.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;&lt;strong&gt;Mitigation:&lt;/strong&gt; Update to Apache Shiro 1.11.0, or set the following Spring Boot configuration value:&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;listingblock&quot;&gt;
&lt;div class=&quot;content&quot;&gt;
&lt;pre class=&quot;highlightjs highlight&quot;&gt;&lt;code class=&quot;language-properties hljs&quot; data-lang=&quot;properties&quot;&gt;spring.mvc.pathmatch.matching-strategy = ant_path_matcher&lt;/code&gt;&lt;/pre&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;&lt;strong&gt;Credit:&lt;/strong&gt;
Apache Shiro would like to thank v3ged0ge and Adamytd for reporting this issue.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;bug&quot;&gt;Bug&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-903&quot;&gt;SHIRO-903&lt;/a&gt;] - Shiro must use ant pattern matching with Spring&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-899&quot;&gt;SHIRO-899&lt;/a&gt;] - Jakarta 9+ fails with Shiro native sessions&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;improvement&quot;&gt;Improvement&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-889&quot;&gt;SHIRO-889&lt;/a&gt;] - Provide Jakarta jar modules&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>Apache Shiro 1.10.1 available</title>
<link href="https://shiro.apache.org/blog/2022/11/19/apache-shiro-1101-released.html"/>
<id>https://shiro.apache.org/blog/2022/11/19/apache-shiro-1101-released.html</id>
<updated>2022-11-19T00:00:00Z</updated>
<author>
<name>Benjamin Marwell</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.10.1.
This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release solves 5 issues since the 1.10.0 release and is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&amp;amp;version=12352460&quot;&gt;Jira, Release 1.10.1&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release does not include classifiers for the Jakarta namespace, yet.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;bug&quot;&gt;Bug&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-892&quot;&gt;SHIRO-892&lt;/a&gt;] - No Guice binding for newly introduced ShiroFilterConfiguration&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-893&quot;&gt;SHIRO-893&lt;/a&gt;] - NPE caused by lack of default ShiroFilterConfiguration&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;test&quot;&gt;Test&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-895&quot;&gt;SHIRO-895&lt;/a&gt;] - Work around Guice 4&amp;#8217;s Java 17 compatibliity for Java 17-based tests&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;dependency_upgrade&quot;&gt;Dependency upgrade&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-894&quot;&gt;SHIRO-894&lt;/a&gt;] - EasyMock 5.0.1 for Java 17 compatibility&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-896&quot;&gt;SHIRO-896&lt;/a&gt;] - HSQLDB 2.7.1&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;behavior_changes&quot;&gt;Behavior Changes&lt;/h3&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;As of 1.10.1, the Guice injection will be fixed as we introduced a regression with 1.10.0 when using Guice with &lt;code&gt;binder().requireExplicitBindings();&lt;/code&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>1.10.0 available with fix CVE-2022-40664</title>
<link href="https://shiro.apache.org/blog/2022/10/10/apache-shiro-1100-released.html"/>
<id>https://shiro.apache.org/blog/2022/10/10/apache-shiro-1100-released.html</id>
<updated>2022-10-10T00:00:00Z</updated>
<author>
<name>Brian Demers</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Shiro team is pleased to announce the release of Apache Shiro version 1.10.0.
This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release solves 7 issues since the 1.9.1 release and is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://issues.apache.org/jira/projects/SHIRO/versions/12351946&quot;&gt;Jira, Release 1.10.0&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;cve_2022_40664&quot;&gt;CVE-2022-40664&lt;/h3&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Credit:
Apache Shiro would like to thank Y4tacker for reporting this issue.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;bug&quot;&gt;Bug&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-512&quot;&gt;SHIRO-512&lt;/a&gt;] - Race condition in Shiro&amp;#8217;s web container session timeout handling&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-887&quot;&gt;SHIRO-887&lt;/a&gt;] - FormAuthenticationFilter trims passwords which start and/or end with one or more space character(s)&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;improvement&quot;&gt;Improvement&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-891&quot;&gt;SHIRO-891&lt;/a&gt;] - fix source jar Reproducible Builds issue&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-884&quot;&gt;SHIRO-884&lt;/a&gt;] - fix source jar Reproducible Builds issue&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-885&quot;&gt;SHIRO-885&lt;/a&gt;] - Use OWASP Java Encoder with OSGi manifest&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-890&quot;&gt;SHIRO-890&lt;/a&gt;] - Avoid another proxy creator when @EnableAspectJAutoProxy enabled&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-891&quot;&gt;SHIRO-891&lt;/a&gt;] - Allow for direct configuration of ShiroFilter through WebEnvironment&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;dependency_upgrade&quot;&gt;Dependency upgrade&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;Many dependency updates&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;behavior_changes&quot;&gt;Behavior Changes&lt;/h3&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;As of 1.10.0, Shiro may filter a request multiple times, e.g. when including or forwarding requests.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This behavior can be reverted by setting the following property: &lt;code&gt;shiro.filterOncePerRequest=true&lt;/code&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>Ongoing work on the Jakarta namespace transition</title>
<link href="https://shiro.apache.org/blog/2022/06/30/jakarta-work.html"/>
<id>https://shiro.apache.org/blog/2022/06/30/jakarta-work.html</id>
<updated>2022-06-30T00:00:00Z</updated>
<author>
<name>Richard Zowalla</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro team is pleased to announce the ongoing work on the javax &amp;#8594; jakarta namespace transition!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;We aim to provide first jakarta artifacts of Shiro with the release of &lt;strong&gt;1.10.0&lt;/strong&gt; going the same route as other Apache projects by using relocations. The resulting jakarta artifacts are later distributed via Maven classifiers.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;feedback_appreciated&quot;&gt;Feedback appreciated!&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;We need &lt;strong&gt;your&lt;/strong&gt; help in testing our relocated artifacts. Feel free to try &lt;a href=&quot;https://repository.apache.org/content/groups/snapshots/org/apache/shiro/&quot;&gt;our nightly snapshots&lt;/a&gt;, to &lt;a href=&quot;/issues.html&quot;&gt;open an issue&lt;/a&gt;, or to write us a message to the &lt;a href=&quot;/mailing-lists.html&quot;&gt;developer&amp;#8217;s mailing list&lt;/a&gt;!&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>1.9.1 available with fix CVE-2022-32532</title>
<link href="https://shiro.apache.org/blog/2022/06/28/apache-shiro-191-released.html"/>
<id>https://shiro.apache.org/blog/2022/06/28/apache-shiro-191-released.html</id>
<updated>2022-06-28T00:00:00Z</updated>
<author>
<name>Brian Demers</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Shiro team is pleased to announce the release of Apache Shiro version 1.9.1.
This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release solves 6 issues since the 1.9.1 release and is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://issues.apache.org/jira/projects/SHIRO/versions/12351487&quot;&gt;Jira, Release 1.9.1&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;cve_2022_32532&quot;&gt;CVE-2022-32532&lt;/h3&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with &lt;code&gt;.&lt;/code&gt; in the regular expression are possibly vulnerable to an authorization bypass.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Credit:
Apache Shiro would like the thank 4ra1n for reporting this issue.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;bug&quot;&gt;Bug&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-829&quot;&gt;SHIRO-829&lt;/a&gt;] -
beanPostProcessor and FactoryBean cause aop to fail in the same
Configuration&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-845&quot;&gt;SHIRO-845&lt;/a&gt;] -
Dependencies for test-jars missing&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;improvement&quot;&gt;Improvement&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-871&quot;&gt;SHIRO-871&lt;/a&gt;] - ActiveDirectoryRealm - append suffix only if missing from username&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-872&quot;&gt;SHIRO-872&lt;/a&gt;] - fix Reproducible Builds issues&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-883&quot;&gt;SHIRO-883&lt;/a&gt;] - Add support for case insensitive regex path matching&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;dependency_upgrade&quot;&gt;Dependency upgrade&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-878&quot;&gt;SHIRO-878&lt;/a&gt;] - Update Spring Dependencies to 5.2.20&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-882&quot;&gt;SHIRO-882&lt;/a&gt;] - Upgrade to apache pom parent 26&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-881&quot;&gt;SHIRO-881&lt;/a&gt;] - pom.xml in samples/web may lack dependency&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>Apache Shiro 1.9.0 Released</title>
<link href="https://shiro.apache.org/blog/2022/03/22/apache-shiro-190-released.html"/>
<id>https://shiro.apache.org/blog/2022/03/22/apache-shiro-190-released.html</id>
<updated>2022-03-22T21:39:37Z</updated>
<author>
<name>Benjamin Marwell</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Shiro team is pleased to announce the release of Apache Shiro version 1.9.0.
This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This release solves 20 issues since the 1.8.0 release and is available for download now.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;breaking_changes&quot;&gt;Breaking changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;We fixed [&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-829&quot;&gt;SHIRO-829&lt;/a&gt;] by changing the class signature of the class &lt;code&gt;ShiroFilterFactoryBean&lt;/code&gt;:&lt;/p&gt;
&lt;div class=&quot;listingblock&quot;&gt;
&lt;div class=&quot;content&quot;&gt;
&lt;pre class=&quot;highlightjs highlight&quot;&gt;&lt;code class=&quot;language-diff hljs&quot; data-lang=&quot;diff&quot;&gt;-public class ShiroFilterFactoryBean implements FactoryBean, BeanPostProcessor {
+public class ShiroFilterFactoryBean implements FactoryBean&amp;lt;AbstractShiroFilter&amp;gt;, BeanPostProcessor {&lt;/code&gt;&lt;/pre&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;and the method signature of &lt;code&gt;public Class&amp;lt;?&amp;gt; getObjectType&lt;/code&gt;:&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;listingblock&quot;&gt;
&lt;div class=&quot;content&quot;&gt;
&lt;pre class=&quot;highlightjs highlight&quot;&gt;&lt;code class=&quot;language-diff hljs&quot; data-lang=&quot;diff&quot;&gt;- public Class getObjectType() {
- return SpringShiroFilter.class;
+ public Class&amp;lt;?&amp;gt; getObjectType() {
+ return AbstractShiroFilter.class;&lt;/code&gt;&lt;/pre&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;While we do not expect to break any builds or runtimes, these changes are (strictly speaking) breaking changes as they introduce Generics to this class.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;all_changes&quot;&gt;All changes&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;You can learn more on &lt;a href=&quot;https://issues.apache.org/jira/projects/SHIRO/versions/12350639&quot;&gt;Jira, Release 1.9.0&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;bug&quot;&gt;Bug&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-829&quot;&gt;SHIRO-829&lt;/a&gt;] -
beanPostProcessor and FactoryBean cause aop to fail in the same
Configuration&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-845&quot;&gt;SHIRO-845&lt;/a&gt;] -
Dependencies for test-jars missing&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;improvement&quot;&gt;Improvement&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-804&quot;&gt;SHIRO-804&lt;/a&gt;] - Avoid
conflicts with spring boot aop&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-836&quot;&gt;SHIRO-836&lt;/a&gt;] - Delete
jsecurty-sample.jks&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-838&quot;&gt;SHIRO-838&lt;/a&gt;] - Create
SHA512-Hashes&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-846&quot;&gt;SHIRO-846&lt;/a&gt;] -
Creation of site takes very long time&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-848&quot;&gt;SHIRO-848&lt;/a&gt;] -
Relative Path in pom.xml is not needed&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-850&quot;&gt;SHIRO-850&lt;/a&gt;] - The
profile name jdk19-plus is misleading&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-851&quot;&gt;SHIRO-851&lt;/a&gt;] -
Handling properties for compile/enconding vs. default configurations of
plugins&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-852&quot;&gt;SHIRO-852&lt;/a&gt;] -
Configuration for maven-release-plugin prepationGoal should be changed&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-853&quot;&gt;SHIRO-853&lt;/a&gt;] -
Versions of maven-surefire/failsafe/report plugin are not in sync&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-854&quot;&gt;SHIRO-854&lt;/a&gt;] -
Konfiguration includes/excludes maven-failsafe-plugin can be reduced to
default&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-860&quot;&gt;SHIRO-860&lt;/a&gt;] - update
logback to 1.2.10&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-862&quot;&gt;SHIRO-862&lt;/a&gt;] - Replace
Google Analytics with Matomo for new Javadocs&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;task&quot;&gt;Task&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-841&quot;&gt;SHIRO-841&lt;/a&gt;] -
NullPointerException from SessionsSecurityManager.start()&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-867&quot;&gt;SHIRO-867&lt;/a&gt;] - Skip Deployment of integration-test and samples artifacts&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;dependency_upgrade&quot;&gt;Dependency upgrade&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-828&quot;&gt;SHIRO-828&lt;/a&gt;] -
aspectj-maven-plugin 1.14.0&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-842&quot;&gt;SHIRO-842&lt;/a&gt;] -
shiro-web depends on older log4j&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-843&quot;&gt;SHIRO-843&lt;/a&gt;] - Update
maven-project-info-reports&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-844&quot;&gt;SHIRO-844&lt;/a&gt;] - Update
maven-javadoc-plugin to 3.3.1&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation.&lt;/a&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>The new Apache Shiro website is live!</title>
<link href="https://shiro.apache.org/blog/2022/02/09/new-shiro-website.html"/>
<id>https://shiro.apache.org/blog/2022/02/09/new-shiro-website.html</id>
<updated>2022-02-09T15:43:22Z</updated>
<author>
<name>Benjamin Marwell</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Shiro team is pleased to announce the release of the new Apache Shiro website!&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;new_technology_stack&quot;&gt;New technology stack&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The new website is built using &lt;a href=&quot;https://jbake.org/&quot;&gt;jbake&lt;/a&gt; now.
Before that, we used &lt;a href=&quot;https://github.com/lhazlewood/scms&quot;&gt;SCMS&lt;/a&gt; to build the site, which we did not maintain anymore.
Due to this change, the website can now be built using Apache Maven.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The new website allows us to use variables more easily throughout the site and to use &lt;a href=&quot;https://asciidoctor.org/&quot;&gt;asciidoctor&lt;/a&gt; everywhere.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The new site also uses &lt;a href=&quot;https://getbootstrap.com/&quot;&gt;bootstrap 5&lt;/a&gt; instead of bootstrap 3, which is much more mobile friendly and allows us to discard the jQuery library.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;screenshots&quot;&gt;Screenshots&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;dlist&quot;&gt;
&lt;dl&gt;
&lt;dt class=&quot;hdlist1&quot;&gt;Desktop site&lt;/dt&gt;
&lt;dd&gt;
&lt;p&gt;&lt;span class=&quot;image&quot;&gt;&lt;img src=&quot;2022-02-08T110829_screenshot.png&quot; alt=&quot;Apache Shiro website since January 2022&quot; width=&quot;480&quot; height=&quot;240&quot;&gt;&lt;/span&gt;&lt;/p&gt;
&lt;/dd&gt;
&lt;dt class=&quot;hdlist1&quot;&gt;Mobile site&lt;/dt&gt;
&lt;dd&gt;
&lt;p&gt;&lt;span class=&quot;image&quot;&gt;&lt;img src=&quot;2022-02-08T111522_screenshot_mobile.png&quot; alt=&quot;Apache Shiro mobile website&quot; width=&quot;270&quot; height=&quot;400&quot;&gt;&lt;/span&gt;&lt;/p&gt;
&lt;/dd&gt;
&lt;/dl&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;ongoing_restructuring&quot;&gt;Ongoing restructuring&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;In the future, we might move some pages to a &lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-858&quot;&gt;&lt;code&gt;/v1/&amp;lt;category&amp;gt;&lt;/code&gt; subfolder&lt;/a&gt;.
Of course the old URLs will be redirected.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The feed is also not working yet and will be made available later this month.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;feedback_appreciated&quot;&gt;Feedback appreciated!&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;If you have any suggestions regarding the site, feel free to &lt;a href=&quot;/issues.html&quot;&gt;open an issue&lt;/a&gt; or write us a message to the &lt;a href=&quot;/mailing-lists.html&quot;&gt;developer&amp;#8217;s mailing list&lt;/a&gt;!&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
<entry>
<title>Apache Shiro v1.8.0 released</title>
<link href="https://shiro.apache.org/blog/2021/v1.8.0.html"/>
<id>https://shiro.apache.org/blog/2021/v1.8.0.html</id>
<updated>2021-08-26T00:00:00Z</updated>
<author>
<name>Benjamin Marwell</name>
</author>
<content type="html">
&lt;div id=&quot;preamble&quot;&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Shiro team is pleased to announce the release of Apache Shiro version 1.8.0. This is a feature release for 1.x.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;changes_in_1_8_0&quot;&gt;Changes in 1.8.0&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;This changelog is also available &lt;a href=&quot;https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12350384&amp;amp;projectId=12310950&quot;&gt;on Jira&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;bug&quot;&gt;Bug&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-678&quot;&gt;SHIRO-678&lt;/a&gt;] - Strings
garbled when POST without JSESSIONID cookie&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-812&quot;&gt;SHIRO-812&lt;/a&gt;] - Key
value separator in config is broken with escape char&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-825&quot;&gt;SHIRO-825&lt;/a&gt;] -
Trailing slash in URI results in &quot;IllegalArgumentException: There is no
configured chain under the name/key&quot;&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect2&quot;&gt;
&lt;h3 id=&quot;improvement&quot;&gt;Improvement&lt;/h3&gt;
&lt;div class=&quot;ulist&quot;&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;[&lt;a href=&quot;https://issues.apache.org/jira/browse/SHIRO-216&quot;&gt;SHIRO-216&lt;/a&gt;] - Add
@Documented to Shiro authorization annotations&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;download&quot;&gt;Download&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Download and verification instructions are available &lt;a href=&quot;/download.html&quot;&gt;on our download page&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;div class=&quot;sect1&quot;&gt;
&lt;h2 id=&quot;documentation&quot;&gt;Documentation&lt;/h2&gt;
&lt;div class=&quot;sectionbody&quot;&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;For more information on &lt;a href=&quot;/documentation.html&quot;&gt;Shiro, please read the documentation&lt;/a&gt;.&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;Enjoy!&lt;/p&gt;
&lt;/div&gt;
&lt;div class=&quot;paragraph&quot;&gt;
&lt;p&gt;The Apache Shiro Team&lt;/p&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
</content>
</entry>
</feed>