Hi, Maxim,

I believe you are hitting the “hardened by default” changes in 3.x
See https://shiro.apache.org/migration-guide.html#security-behavior-changes for 
more information.
Or you can manually update your security configuration to include /** = anon at 
the end although I would not recommend this in production.

> On Sep 2, 2026, at 10:15 PM, Maxim Solodovnik <[email protected]> wrote:
> 
> Hello All,
> 
> I'm trying to migrate org.wicketstuff:wicketstuff-shiro to Shiro v3
> The build is green, all looks good
> 
> BUT :)
> for whatever reason examples are not working :(
> What I can see is
> 
> Many blocks like
> ```
> DEBUG [org.apache.shiro.web.filter.authc.NoAccessFilter] - Blocking
> access to request: '/account/login'
> ```
> And "Too many redirects" in the browser
> 
> Maybe someone can help to update `shiro-example-*` too some working state? :)
> 
> My migration branch is here: https://github.com/wicketstuff/core/pull/1543
> 
> I was able to make `wicket-shiro-example-realm` working
> Others are broken :(
> 
> I was trying to debug `wicket-shiro-example-spring-hibernate-native`
> (it has DEBUG/TRACE logs)
> without any luck :(
> 
> I would appreciate your help :)
> 
> -- 
> Best regards,
> Maxim

Reply via email to