Note that even though the Shiro integration project is hosted by Apache Aries it isn’t directly coupled to the Aries JAX-RS Whiteboard implementation. It is purely integrated through the JAX-RS Whiteboard specification and therefore would work with any compliant implementation.
Feel free to take a look and let me know of any improvements you’d be interested in seeing. For now it just does a really basic login/logout supports the Shiro Authorization annotations, and lets you use the programmatic permissions API. Best Regards, Tim > On 23 Nov 2018, at 16:30, Raymond Auge <[email protected]> wrote: > > Since JB and Tim have been working out how to get Aries JAX-RS setup in > Karaf, one possibly nice solution would be to just drop in the shiro (1.4.0) > integration that Tim Ward wrote for the JAX-RS Whiteboard [1]. > > Sincerely, > - Ray > > [1] > https://github.com/apache/aries-jax-rs-whiteboard/tree/master/integrations/shiro > > <https://github.com/apache/aries-jax-rs-whiteboard/tree/master/integrations/shiro> > > On Fri, Nov 23, 2018 at 11:09 AM Steinar Bang <[email protected] > <mailto:[email protected]>> wrote: > I'm in the process of trying to move from my use of Shiro 1.3.1 to > provide authentication and authorization to a webapp, to Shiro 1.4.x. > > Problems so far: > 1. shiro-core requires spring-beans in a manifest.mf import-package, in > addition to being an extra dependency, spring-beans and its > dependencies aren't OSGi bundles, so karaf needs to wrap them > 2. Classloader issues, because Shiro 1.4.x uses reflection to create > classes > > Details can be provided if of interest, but I imaging anyone who's tried > usign Shiro 1.4.x have quickly encountered the classloader issue...:-) > > I have been pondering how to proceed with this. Some possible > approaches: > 1. Try to satisify all the runtime dependencies that the classes that > currently won't load, requires (I'm not sure if this is even > possible?) > 2. Slurp all of shiro-core into my bundle (not a desirable approach, > since I would like to have pluggable realms) > 3. Create a new bundle wrapping shiro-core, and adding a DS component > that instantates and exposes a SecurityManager service > 4. Other...? > > Thanks! > > > Steinar > > > > > -- > Raymond Augé <http://www.liferay.com/web/raymond.auge/profile> (@rotty3000) > Senior Software Architect Liferay, Inc. <http://www.liferay.com/> (@Liferay) > Board Member & EEG Co-Chair, OSGi Alliance <http://osgi.org/> (@OSGiAlliance)
