Download Apache Shiro

Related Content

Getting Started

Resources, guides and tutorials for new Shiro users.
Read More >>

10-Minute Shiro Tutorial

Try Apache Shiro for yourself in under 10 minutes.
Read More >>

Web App Tutorial

Step-by-step tutorial for securing a web application with Shiro.
Read More >>

Java Authentication Guide

Learn how Authentication in Java is performed in Shiro.
Read More >>

Java Authorization Guide

Learn how Shiro handles access control in Java.
Read More >>

Apache Shiro 1.5.3 is the current stable release (Java 1.8+ JVM).

To download Shiro please follow the instructions below.

Code Signatures

You may verify the authenticity of all artifacts below by using the PGP KEYS file.

Releases

Latest Stable Release (1.5.3)

1.5.3 Binary Distribution

Associated documentation can be found here

To download the files directly as one .jar file just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.5.3</version>
</dependency>
Required in all environments. Slf4j 's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.5.3</version>
</dependency>
Enables support for web-based applications.
shiro-servlet-plugin 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>1.5.3</version>
</dependency>
Servlet Fragment which configures Shiro's servlet filter.
shiro-jaxrs 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>1.5.3</version>
</dependency>
Enables support for JAX-RS applications.
shiro-aspectj 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.5.3</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Jasig CAS support.
NOTE:

Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Ehcache -based famework caching.
shiro-hazelcast 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Hazelcast -based famework caching.
shiro-features 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.5.3</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Google Guice integration.
shiro-quartz 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Quartz -based scheduling for Shiro native session validation.
shiro-spring 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.5.3</version>
</dependency>
Enables Spring Framework integration.
shiro-spring-boot-starter 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>1.5.3</version>
</dependency>
Spring Boot starter.
shiro-spring-boot-web-starter 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>1.5.3</version>
</dependency>
Spring Boot web starter.
shiro-tools-hasher Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed: 
 java -jar shiro-tools-hasher-1.5.3-cli.jar

1.5.3 Source Code Distribution

The source bundle requires JDK 1.8 and Maven 3.0.3+ to build:

zip (pgp , sha512 )

1.5.3 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.5.3 -b shiro-root-1.5.3

Previous Releases

1.4.2 Binary Distribution

Associated documentation can be found here

To download the files directly as one .jar file just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.4.2</version>
</dependency>
Required in all environments. Slf4j 's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.4.2</version>
</dependency>
Enables support for web-based applications.
shiro-servlet-plugin 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-servlet-plugin</artifactId>
  <version>1.4.2</version>
</dependency>
Servlet Fragment which configures Shiro's servlet filter.
shiro-jaxrs 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-jaxrs</artifactId>
  <version>1.4.2</version>
</dependency>
Enables support for JAX-RS applications.
shiro-aspectj 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.4.2</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Jasig CAS support.
NOTE:

Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Ehcache -based famework caching.
shiro-hazelcast 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Hazelcast -based famework caching.
shiro-features 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.4.2</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Google Guice integration.
shiro-quartz 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Quartz -based scheduling for Shiro native session validation.
shiro-spring 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.4.2</version>
</dependency>
Enables Spring Framework integration.
shiro-spring-boot-starter 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-starter</artifactId>
  <version>1.4.2</version>
</dependency>
Spring Boot starter.
shiro-spring-boot-web-starter 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring-boot-web-starter</artifactId>
  <version>1.4.2</version>
</dependency>
Spring Boot web starter.
shiro-tools-hasher Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed: 
 java -jar shiro-tools-hasher-1.4.2-cli.jar

1.4.2 Source Code Distribution

The source bundle requires JDK 1.6 and Maven 3.0.3+ to build:

zip (pgp , md5 , sha512 )

1.4.2 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.4.2 -b shiro-root-1.4.2

1.4.2 Binary Distribution

Associated documentation can be found here

To download the files directly as one .jar file just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.3.2</version>
</dependency>
Required in all environments. Slf4j 's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.3.2</version>
</dependency>
Enables support for web-based applications.
shiro-aspectj 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.3.2</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Jasig CAS support.
NOTE:

Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Ehcache -based famework caching.
shiro-hazelcast 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-hazelcast</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Hazelcast -based famework caching.
shiro-features 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.3.2</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Google Guice integration.
shiro-quartz 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Quartz -based scheduling for Shiro native session validation.
shiro-spring 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.3.2</version>
</dependency>
Enables Spring Framework integration.
shiro-tools-hasher Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed: 
 java -jar shiro-tools-hasher-1.3.2-cli.jar

1.3.2 Source Code Distribution

The source bundle requires JDK 1.6 and Maven 3.0.3+ to build:

zip (pgp , md5 , sha1 )

1.3.2 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.3.2 -b shiro-root-1.3.2

1.2.6 Binary Distribution

Associated documentation can be found here

To download the files directly as one .jar file just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.2.6</version>
</dependency>
Required in all environments. Slf4j 's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.2.6</version>
</dependency>
Enables support for web-based applications.
shiro-aspectj 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.2.6</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-cas 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-cas</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Jasig CAS support.
NOTE:

Shiro-CAS support is deprecated, support has been moved to the Apache Shiro based buji-pac4j project.
shiro-ehcache 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Ehcache -based famework caching.
shiro-features 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-features</artifactId>
  <version>1.2.6</version>
</dependency>
OSGi / Apache Karaf integration.
shiro-guice 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-guice</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Google Guice integration.
shiro-quartz 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Quartz -based scheduling for Shiro native session validation.
shiro-spring 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.2.6</version>
</dependency>
Enables Spring Framework integration.
shiro-tools-hasher Not Relevant A command-line program to perform hashing (MD5, SHA, etc) for files, streams and passwords. Note that this is a command line program and not intended to be used as a Maven/program dependency. It is intended to be downloaded and executed: 
 java -jar shiro-tools-hasher-1.2.6-cli.jar

1.2.6 Source Code Distribution

The source bundle requires JDK 1.6 and Maven 3.0.3+ to build:

zip (pgp , md5 , sha1 )

1.2.6 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.2.6 -b shiro-root-1.2.6

1.1.0

1.1.0 Binary Distribution

Associated documentation can be found here

To download the files directly as one .jar file just click the link in the "Artifact" column. If you would like acquire Shiro through Maven, then please use the markup listed under "Maven Usage"

Artifact Maven Usage Notes
shiro-all Not Recommended Includes all binary functionality for Shiro (without dependencies), useful in certain build environments (e.g. Ant). However, this is NOT recommended in Maven builds as it does not retain correct dependency metadata, which can lead to Maven working incorrectly. For Maven builds, it is highly recommended to specify individual modules listed below as you require them.
shiro-core 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-core</artifactId>
  <version>1.1.0</version>
</dependency>
Required in all environments. Slf4j 's slf4j-api jar and one of its binding jars is required. commons-beanutils is required only if using INI config.
shiro-web 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-web</artifactId>
  <version>1.1.0</version>
</dependency>
Enables support for web-based applications.
shiro-aspectj 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-aspectj</artifactId>
  <version>1.1.0</version>
</dependency>
Enables AspectJ support for Shiro AOP and Annotations.
shiro-ehcache 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-ehcache</artifactId>
  <version>1.1.0</version>
</dependency>
Enables Ehcache -based famework caching.
shiro-quartz 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-quartz</artifactId>
  <version>1.1.0</version>
</dependency>
Enables Quartz -based scheduling for Shiro native session validation.
shiro-spring 
<dependency>
  <groupId>org.apache.shiro</groupId>
  <artifactId>shiro-spring</artifactId>
  <version>1.1.0</version>
</dependency>
Enables Spring Framework integration.

1.1.0 Source Code Distribution

The 1.1.0 source bundle requires JDK 1.5+ and Maven 2.2+ to build:

zip (pgp , md5 , sha1 )

1.1.0 Git Source repository

The source can be cloned anonymously from Git with this command:

git clone https://github.com/apache/shiro.git
git checkout shiro-root-1.1.0 -b shiro-root-1.1.0
Name Apache Shiro Documentation
Version
Language
Badge
Last Updated 2021-07-05T12:45:44