Hello, We are currently using Apache Shiro 1.13.0 and planning to upgrade to 2.x. Following is our module.xml file (JBOSS module structure for jar reference on classpath).
As you can see, we have pax-shiro cdi and cdi-web used in our JSF based applications. As I don't see pax.shiro being upgraded after 2013, can you suggest any alternative option, or if we can remove pax shiro altogether? *JBOSS/customlib/shiro/module.xml* <?xml version="1.0" encoding="UTF-8"?> <module xmlns="urn:jboss:module:1.1" name="app.apache.shiro" > <resources> <resource-root path="shiro-core-1.13.0.jar" /> <resource-root path="shiro-web-1.13.0.jar" /> <resource-root path="pax-shiro-cdi-0.1.0.jar" /> <resource-root path="pax-shiro-cdi-web-0.1.0.jar" /> <resource-root path="pax-shiro-faces-0.1.0.jar" /> <resource-root path="encoder-1.2.3.jar"/> </resources> <dependencies> <module name="org.apache.commons.beanutils"/> <module name="org.apache.commons.collections"/> <module name="org.slf4j"/> <module name="javax.api" export="true"/> <module name="javax.faces.api" export="true" /> <module name="javax.enterprise.api" export="true" /> </dependencies> </module> *pax.shiro used in web.xml file* <context-param> <param-name>shiroEnvironmentClass</param-name> <param-value>org.ops4j.pax.shiro.cdi.web.CdiIniWebEnvironment</param-value> </context-param> *beans.xml* <interceptors> <class>org.ops4j.pax.shiro.cdi.interceptor.ShiroInterceptor</class> </interceptors> Thank you, -Mihir.