This is an automated email from the ASF dual-hosted git repository.
lprimak pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/shiro-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 34abccf1f update Nov 9
34abccf1f is described below
commit 34abccf1f1ece668d4dc12c17a2288ef45680ff4
Author: lprimak <[email protected]>
AuthorDate: Mon Nov 9 21:08:17 2026 -0600
update Nov 9
---
.well-known/security.txt | 2 +-
documentation.html | 3 +
download.html | 13 ++
documentation.html => external-interfaces.html | 192 ++++++++++++++-----------
feed.xml | 2 +-
security-reports.html | 21 ++-
sitemap.xml | 120 ++++++++--------
support.html | 47 ++++++
team.html | 142 +++++++++++++++---
9 files changed, 375 insertions(+), 167 deletions(-)
diff --git a/.well-known/security.txt b/.well-known/security.txt
index 21078f1a4..455e84aa2 100644
--- a/.well-known/security.txt
+++ b/.well-known/security.txt
@@ -1,5 +1,5 @@
Contact: mailto:[email protected]
-Expires: 2027-10-27T00:05:44Z
+Expires: 2027-11-10T03:07:31Z
Preferred-Languages: en
Canonical: https://shiro.apache.org/.well-known/security.txt
Policy: https://shiro.apache.org/security-reports.html
\ No newline at end of file
diff --git a/documentation.html b/documentation.html
index babb55815..756edb6d1 100644
--- a/documentation.html
+++ b/documentation.html
@@ -269,6 +269,9 @@
<li>
<p><a href="reference.html">Reference Manual</a> - comprehensive reference
covering all Shiro concepts and features</p>
</li>
+<li>
+<p><a href="external-interfaces.html">External Interfaces</a> - Java API,
configuration, web and command line interfaces</p>
+</li>
</ul>
</div>
</div>
diff --git a/download.html b/download.html
index 6d920216a..b397c3e6c 100644
--- a/download.html
+++ b/download.html
@@ -230,6 +230,19 @@
For older releases, please visit our <a href="release-archive.html">release
archive</a>.</p>
</div>
</div>
+</div>
+<div class="sect1">
+<h2 id="release_process">Release process</h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>Releases are built, signed and published by a committer acting as release
manager, following the <a
href="https://www.apache.org/legal/release-policy.html">ASF release policy</a>
and the project’s <a href="performing-a-release.html">Performing a
Release</a> guide.
+A release candidate is staged, voted on by the PMC on the <code>dev</code>
mailing list, and only then published as the official source release, with
binary artifacts on Maven Central.
+Each release is signed with the release manager’s PGP key and
accompanied by a SHA-512 checksum.
+To verify a download, import the <a
href="https://downloads.apache.org/shiro/KEYS">KEYS</a> file, check the
<code>.asc</code> signature and compare the checksum, as described in the <a
href="https://www.apache.org/info/verification.html">ASF verification guide</a>.
+Release notes are published with each release on <a
href="https://github.com/apache/shiro/releases">GitHub Releases</a> and on the
project blog.
+Which release lines are supported is described on the <a
href="support.html#supported-versions">support page</a>.</p>
+</div>
+</div>
</div></p>
diff --git a/documentation.html b/external-interfaces.html
similarity index 66%
copy from documentation.html
copy to external-interfaces.html
index babb55815..3cc079b2c 100644
--- a/documentation.html
+++ b/external-interfaces.html
@@ -18,28 +18,29 @@
<html lang="en">
<head>
<meta charset="utf-8"/>
- <title>Apache Shiro Documentation | Apache Shiro</title>
+ <title>Apache Shiro External Interfaces | Apache Shiro</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
- <meta name="description" content="Apache Shiro documentation hub with
guides, tutorials, and reference materials for authentication, authorization,
session management, and cryptography.">
- <meta property="og:description" content="Apache Shiro documentation hub
with guides, tutorials, and reference materials for authentication,
authorization, session management, and cryptography.">
- <meta name="keywords" content='documentation,reference,manual,guides'>
+ <meta name="description" content="The external software interfaces of
Apache Shiro: the Java API, configuration formats, web and framework
integration points, and the command line tools.">
+ <meta property="og:description" content="The external software interfaces
of Apache Shiro: the Java API, configuration formats, web and framework
integration points, and the command line tools.">
+ <meta name="keywords"
content='documentation,api,interfaces,configuration,security'>
<meta name="generator" content="JBake">
<meta name="google-site-verification"
content="QIax6uT5UX3enoU0G8Pz2pXbQ45KaQuHZ3nCh9V27mw">
<meta name="google-site-verification"
content="ecFap6dWJgS_GCCtxmJQJ_nFYQhM6EgSpBPZDU7xsCE">
<meta name="google-site-verification"
content="gBTYOG8lMfNb_jrWrH3kFbudpEs_WrAJ2lb2-zLRaso"/>
<meta name="msvalidate.01" content="0B57EB46CBFAD8FD45008D2DB6B6C68C">
- <meta property="og:title" content="Apache Shiro Documentation | Apache
Shiro"/>
+ <meta property="og:title" content="Apache Shiro External Interfaces |
Apache Shiro"/>
<meta property="og:type" content="article"/>
<meta name="twitter:card" content="summary" />
<meta name="twitter:site" content="@ApacheShiro" />
- <meta property="article:modification_time" content="2010-03-18T00:00:00Z"/>
+ <meta property="article:modification_time" content="2026-11-09T00:00:00Z"/>
<meta property="article:tag" content='documentation'/>
- <meta property="article:tag" content='reference'/>
- <meta property="article:tag" content='manual'/>
- <meta property="article:tag" content='guides'/>
+ <meta property="article:tag" content='api'/>
+ <meta property="article:tag" content='interfaces'/>
+ <meta property="article:tag" content='configuration'/>
+ <meta property="article:tag" content='security'/>
<meta property="og:locale" content="en_US" />
- <meta property="og:url"
content='https://shiro.apache.org/documentation.html'/>
+ <meta property="og:url"
content='https://shiro.apache.org/external-interfaces.html'/>
<meta property="og:image" content='images/shiro-featured-image.png'/>
<meta property="og:image:width" content='1200'/>
<meta property="og:image:height" content='628'/>
@@ -203,7 +204,7 @@
</nav>
<div class="page-header">
- <h1>Apache Shiro Documentation</h1>
+ <h1>Apache Shiro External Interfaces</h1>
</div>
@@ -226,109 +227,130 @@
</table>
</div>
+<div id="toc" class="toc">
+<div id="toctitle">Table of Contents</div>
+<ul class="sectlevel1">
+<li><a href="#java_api">Java API</a></li>
+<li><a href="#configuration_interfaces">Configuration interfaces</a></li>
+<li><a href="#web_interfaces">Web interfaces</a></li>
+<li><a href="#framework_integrations">Framework integrations</a></li>
+<li><a href="#command_line_tools">Command line tools</a></li>
+<li><a href="#compatibility">Compatibility</a></li>
+</ul>
+</div>
+<div id="preamble">
+<div class="sectionbody">
+<div class="paragraph">
+<p>This page describes every external software interface of the released
Apache Shiro artifacts, and points to the detailed documentation for each.
+Shiro is a library embedded in an application; it does not open network ports
or run as a service of its own.</p>
+</div>
+</div>
+</div>
<div class="sect1">
-<h2 id="introduction">Introduction</h2>
+<h2 id="java_api">Java API</h2>
<div class="sectionbody">
<div class="paragraph">
-<p>This page serves as the central hub for all Apache Shiro documentation.
Whether you are just getting started or looking for detailed reference
material, you will find links to the appropriate resources here.</p>
+<p>The public Java API is the primary interface.
+Types and packages in the released artifacts are documented in the <a
href="https://shiro.apache.org/static/current/apidocs/">API documentation</a>
(also available at <a
href="https://javadoc.io/doc/org.apache.shiro">javadoc.io</a>).
+The main entry points are:</p>
+</div>
+<table class="tableblock frame-all grid-all stretch">
+<colgroup>
+<col style="width: 25%;">
+<col style="width: 75%;">
+</colgroup>
+<thead>
+<tr>
+<th class="tableblock halign-left valign-top">Interface</th>
+<th class="tableblock halign-left valign-top">Purpose</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock"><code>org.apache.shiro.SecurityUtils</code>,
<code>Subject</code></p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Obtain the
current user and perform authentication, authorization and session operations.
+See <a href="architecture.html">Architecture</a> and <a
href="authentication.html">Authentication</a>.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock"><code>SecurityManager</code>, <code>Realm</code>,
<code>AuthenticationStrategy</code>, <code>CredentialsMatcher</code></p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Extension
points for credential verification and data sources.
+See <a href="realm.html">Realms</a>.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock"><code>Authorizer</code>, permissions, annotations
(<code>@RequiresAuthentication</code>, <code>@RequiresPermissions</code>,
<code>@RequiresRoles</code>)</p></td>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">Authorization checks. See <a
href="authorization.html">Authorization</a>.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock"><code>SessionManager</code>, <code>SessionDAO</code></p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Session
management and persistence. See <a href="session-management.html">Session
Management</a>.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock"><code>CipherService</code>, <code>Hash</code>,
<code>HashService</code>, <code>PasswordService</code></p></td>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">Cryptography. See <a
href="cryptography.html">Cryptography</a>.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock"><code>CacheManager</code></p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Caching of
authentication and authorization data. See <a
href="caching.html">Caching</a>.</p></td>
+</tr>
+</tbody>
+</table>
</div>
-<div class="sect2">
-<h3 id="new_to_shiro">New to Shiro?</h3>
+</div>
+<div class="sect1">
+<h2 id="configuration_interfaces">Configuration interfaces</h2>
+<div class="sectionbody">
<div class="paragraph">
-<p>If you are new to Apache Shiro, we recommend reading these resources in
order:</p>
+<p>Configuration is supplied by the application’s operator and is
trusted input.
+See <a href="configuration.html">Configuration</a> for the full reference.</p>
</div>
<div class="ulist">
<ul>
<li>
-<p><a href="https://www.infoq.com/articles/apache-shiro">Application Security
with Apache Shiro</a> - full intro article on InfoQ.com</p>
+<p>The INI format (<code>shiro.ini</code>), including the <code>[main]</code>,
<code>[users]</code>, <code>[roles]</code> and <code>[urls]</code> sections.</p>
</li>
<li>
-<p><a href="10-minute-tutorial.html">10 Minute Tutorial</a> - quick hands-on
introduction</p>
+<p>Programmatic configuration through the Java API, and Spring, Spring Boot,
Guice, CDI and Jakarta EE configuration.</p>
</li>
<li>
-<p><a href="webapp-tutorial.html">Beginner’s Webapp Tutorial</a> -
step-by-step guide to enable Shiro in a web application</p>
-</li>
-<li>
-<p><a href="https://start.flowlogix.com">Flowlogix Starter</a> - generate
Jakarta EE projects with Shiro support</p>
+<p>Java system properties and environment settings documented for individual
features.</p>
</li>
</ul>
</div>
-<div class="paragraph">
-<p>Once you understand the basics, explore the <a
href="guides.html">Guides</a> page for a complete learning path.</p>
</div>
</div>
+<div class="sect1">
+<h2 id="web_interfaces">Web interfaces</h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>The web modules integrate through standard Jakarta Servlet mechanisms.
+They consume HTTP requests (path, headers, cookies, form parameters) from
untrusted clients, apply the configured filter chains and cookie handling, and
produce redirects and responses.
+See <a href="web.html">Web Support</a>, <a href="web-features.html">Web
Features</a>, <a href="jakarta-ee.html">Jakarta EE</a> and the <a
href="security-model.html">security model</a> for the trust assumptions that
apply.</p>
+</div>
</div>
</div>
<div class="sect1">
-<h2 id="apache_shiro_reference_and_api">Apache Shiro Reference and API</h2>
+<h2 id="framework_integrations">Framework integrations</h2>
<div class="sectionbody">
-<div class="sect2">
-<h3 id="reference_manual">Reference Manual</h3>
-<div class="ulist">
-<ul>
-<li>
-<p><a href="reference.html">Reference Manual</a> - comprehensive reference
covering all Shiro concepts and features</p>
-</li>
-</ul>
-</div>
+<div class="paragraph">
+<p>Optional modules integrate Shiro with Spring, Spring Boot, Guice, CDI, EJB,
JAX-RS, AspectJ, Quartz and JCache.
+Each integration is documented on its own page linked from the <a
href="documentation.html">documentation hub</a> and in the <a
href="reference.html">reference manual</a>.</p>
</div>
-<div class="sect2">
-<h3 id="guides_important_shiro_concepts">Guides - important Shiro
concepts:</h3>
-<div class="ulist">
-<ul>
-<li>
-<p><a href="10-minute-tutorial.html">10 Minute Tutorial</a></p>
-</li>
-<li>
-<p><a href="webapp-tutorial.html">Beginner’s Webapp Tutorial: a
step-by-step tutorial to enable Shiro in a web application</a></p>
-</li>
-<li>
-<p><a href="java-authentication-guide.html">Authentication Guide</a></p>
-</li>
-<li>
-<p><a href="java-authorization-guide.html">Authorization Guide</a></p>
-</li>
-<li>
-<p><a href="realm.html">Realm Guide</a></p>
-</li>
-<li>
-<p><a href="migration-guide.html">Migration Guide: Upgrading from Shiro 1.x to
2.x and 3.x</a></p>
-</li>
-<li>
-<p>Community-contributed <a href="articles.html">Articles</a></p>
-</li>
-</ul>
</div>
</div>
-<div class="sect2">
-<h3 id="current_release">Current Release</h3>
+<div class="sect1">
+<h2 id="command_line_tools">Command line tools</h2>
+<div class="sectionbody">
<div class="paragraph">
-<p>Apache Shiro 3.0.1 (<a href="download.html">Download</a>)</p>
+<p>The command line hasher (<code>shiro-tools-hasher</code>) hashes passwords
and data from the command line.
+See <a href="command-line-hasher.html">Command Line Hasher</a>.</p>
</div>
-<div class="ulist">
-<ul>
-<li>
-<p><a href="https://javadoc.io/doc/org.apache.shiro">API</a> (Javadoc - Hosted
on javadoc.io)</p>
-</li>
-<li>
-<p><a href="https://github.com/apache/shiro/tree/shiro-root-3.0.1/">Browse
Source</a> (GitHub tag)</p>
-</li>
-<li>
-<p><a href="static/latest/">Maven Static Site</a></p>
-</li>
-</ul>
</div>
</div>
-<div class="sect2">
-<h3 id="upgrading">Upgrading?</h3>
+<div class="sect1">
+<h2 id="compatibility">Compatibility</h2>
+<div class="sectionbody">
<div class="paragraph">
-<p>If you are upgrading from an earlier version of Shiro, see the <a
href="migration-guide.html">Migration Guide</a> for important changes and
upgrade instructions.</p>
-</div>
-<h2 id="Lendahandwithdocumentation">Lend a hand with documentation</h2>
-
-<p>While we hope this documentation helps you with the work you're doing with
Apache Shiro, the community is improving and expanding the documentation all
the time. If you'd like to help the Shiro project, please consider correcting,
expanding, or adding documentation where you see a need. Every little bit of
help you provide expands the community and in turn improves Shiro. </p>
-
-<p>The easiest way to contribute your documentation is to submit a
pull-request by clicking on the <code>Edit</code> link below, or send it to the
<a href="mailing-lists.html" title="Mailing Lists">User Mailing List</a>.</p>
+<p>Supported release lines are listed on the <a
href="support.html#supported-versions">support page</a>.</p>
</div>
</div>
</div>
@@ -355,7 +377,7 @@
</div>
<div class="d-flex justify-content-end col-md-4" id="editThisPage">
- <input type="hidden" id="ghEditPage"
value="https://github.com/apache/shiro-site/edit/main/src/site/content/documentation.adoc"/>
+ <input type="hidden" id="ghEditPage"
value="https://github.com/apache/shiro-site/edit/main/src/site/content/external-interfaces.adoc"/>
</div>
<div class="d-flex col-md-2 justify-content-end" style="position:
relative">
diff --git a/feed.xml b/feed.xml
index 4ff0f0b32..e2b84347e 100644
--- a/feed.xml
+++ b/feed.xml
@@ -4,7 +4,7 @@
<subtitle>Simple. Java. Security.</subtitle>
<link href="https://shiro.apache.org/"/>
<link rel="self" href="https://shiro.apache.org/feed.xml" />
- <updated>2026-10-27T00:05:44Z</updated>
+ <updated>2026-11-10T03:07:32Z</updated>
<author>
<name>Les Hazlewood</name>
diff --git a/security-reports.html b/security-reports.html
index f553b41cf..d3670bd8a 100644
--- a/security-reports.html
+++ b/security-reports.html
@@ -230,7 +230,11 @@
<div id="toctitle">Table of Contents</div>
<ul class="sectlevel1">
<li><a href="#reporting_a_vulnerability">Reporting a vulnerability</a></li>
-<li><a href="#vulnerability_handling_process">Vulnerability Handling
Process</a></li>
+<li><a href="#vulnerability_handling_process">Vulnerability Handling
Process</a>
+<ul class="sectlevel2">
+<li><a href="#response_timeframe">Response timeframe</a></li>
+</ul>
+</li>
<li><a href="#apache_shiro_vulnerability_reports">Apache Shiro Vulnerability
Reports</a>
<ul class="sectlevel2">
<li><a href="#cve_2026_58301">CVE-2026-58301</a></li>
@@ -301,11 +305,26 @@ We cannot accept regular bug reports or other queries at
this address.</p>
</li>
</ul>
</div>
+<div class="sect2">
+<h3 id="response_timeframe">Response timeframe</h3>
+<div class="paragraph">
+<p>The security team acknowledges every report sent to <a
href="mailto:[email protected]">[email protected]</a> within
<strong>14 days</strong>.
+After acknowledging, the PMC keeps the reporter informed of progress while it
confirms the issue, develops and tests a fix, and prepares a release.
+The reporter is credited in the published advisory unless they ask not to be.
+Please do not disclose the vulnerability publicly until the fix is released
and the advisory is published.
+Reports are triaged against the <a href="security-model.html">security
model</a>, which lists what is and is not considered a vulnerability.</p>
+</div>
+<div class="paragraph">
+<p>Fixed vulnerabilities are published on this page, with affected versions,
mitigations and CVE identifiers.
+Only the most recent release line receives all security fixes; see <a
href="support.html#supported-versions">Supported versions</a>.
+Fixes for older release lines that are out of scope for the open source
project are available through <a href="commercial-support.html">commercial
support</a>.</p>
+</div>
<div class="paragraph">
<p>A <a href="https://www.apache.org/security/committers.html">more detailed
description of the process</a> has been written for committers. Reporters of
security vulnerabilities may also find it useful.</p>
</div>
</div>
</div>
+</div>
<div class="sect1">
<h2 id="apache_shiro_vulnerability_reports">Apache Shiro Vulnerability
Reports</h2>
<div class="sectionbody">
diff --git a/sitemap.xml b/sitemap.xml
index 70ad7d6b3..97904ea49 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -1,5 +1,13 @@
<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9
http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
+ <url>
+ <loc>https://shiro.apache.org/team.html</loc>
+ <lastmod>2026-11-09</lastmod>
+ </url>
+ <url>
+ <loc>https://shiro.apache.org/external-interfaces.html</loc>
+ <lastmod>2026-11-09</lastmod>
+ </url>
<url>
<loc>https://shiro.apache.org/migration-guide.html</loc>
<lastmod>2026-01-19</lastmod>
@@ -9,11 +17,11 @@
<lastmod>2026-01-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/security-model.html</loc>
+ <loc>https://shiro.apache.org/dependency-chain.html</loc>
<lastmod>2026-01-03</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/dependency-chain.html</loc>
+ <loc>https://shiro.apache.org/security-model.html</loc>
<lastmod>2026-01-03</lastmod>
</url>
<url>
@@ -28,22 +36,6 @@
<loc>https://shiro.apache.org/10-minute-tutorial.html</loc>
<lastmod>2016-10-23</lastmod>
</url>
- <url>
- <loc>https://shiro.apache.org/terminology.html</loc>
- <lastmod>2010-03-18</lastmod>
- </url>
- <url>
- <loc>https://shiro.apache.org/jsp-tag-library.html</loc>
- <lastmod>2010-03-18</lastmod>
- </url>
- <url>
- <loc>https://shiro.apache.org/graduation-resolution.html</loc>
- <lastmod>2010-03-18</lastmod>
- </url>
- <url>
- <loc>https://shiro.apache.org/configuration.html</loc>
- <lastmod>2010-03-18</lastmod>
- </url>
<url>
<loc>https://shiro.apache.org/roadmap.html</loc>
<lastmod>2010-03-18</lastmod>
@@ -57,7 +49,7 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/authorizer.html</loc>
+ <loc>https://shiro.apache.org/configuration.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -69,7 +61,7 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/authorization.html</loc>
+ <loc>https://shiro.apache.org/authorizer.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -89,11 +81,7 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/community.html</loc>
- <lastmod>2010-03-18</lastmod>
- </url>
- <url>
- <loc>https://shiro.apache.org/authorization-features.html</loc>
+ <loc>https://shiro.apache.org/authorization.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -109,15 +97,11 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/events.html</loc>
- <lastmod>2010-03-18</lastmod>
- </url>
- <url>
- <loc>https://shiro.apache.org/commercial-support.html</loc>
+ <loc>https://shiro.apache.org/community.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/authenticator.html</loc>
+ <loc>https://shiro.apache.org/authorization-features.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -133,51 +117,51 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/command-line-hasher.html</loc>
+ <loc>https://shiro.apache.org/events.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/authentication.html</loc>
+ <loc>https://shiro.apache.org/commercial-support.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/webapp-tutorial.html</loc>
+ <loc>https://shiro.apache.org/authenticator.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/spring-framework.html</loc>
+ <loc>https://shiro.apache.org/webapp-tutorial.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/java-annotations-list.html</loc>
+ <loc>https://shiro.apache.org/spring-framework.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/documentation.html</loc>
+ <loc>https://shiro.apache.org/java-annotations-list.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/web.html</loc>
+ <loc>https://shiro.apache.org/command-line-hasher.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/spring-boot.html</loc>
+ <loc>https://shiro.apache.org/authentication.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/powered-by-shiro.html</loc>
+ <loc>https://shiro.apache.org/web.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/developers.html</loc>
+ <loc>https://shiro.apache.org/spring-boot.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/cas.html</loc>
+ <loc>https://shiro.apache.org/powered-by-shiro.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/authentication-features.html</loc>
+ <loc>https://shiro.apache.org/documentation.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -193,15 +177,15 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/developer-resources.html</loc>
+ <loc>https://shiro.apache.org/developers.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/caching.html</loc>
+ <loc>https://shiro.apache.org/cas.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/articles.html</loc>
+ <loc>https://shiro.apache.org/authentication-features.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -213,11 +197,15 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/cachemanager.html</loc>
+ <loc>https://shiro.apache.org/developer-resources.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/architecture.html</loc>
+ <loc>https://shiro.apache.org/caching.html</loc>
+ <lastmod>2010-03-18</lastmod>
+ </url>
+ <url>
+ <loc>https://shiro.apache.org/articles.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -237,23 +225,23 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/adoption.html</loc>
+ <loc>https://shiro.apache.org/cachemanager.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/session-management-features.html</loc>
+ <loc>https://shiro.apache.org/architecture.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/how-to-contribute.html</loc>
+ <loc>https://shiro.apache.org/session-management-features.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/cryptography-features.html</loc>
+ <loc>https://shiro.apache.org/how-to-contribute.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/about.html</loc>
+ <loc>https://shiro.apache.org/adoption.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -273,7 +261,11 @@
<lastmod>2010-03-18</lastmod>
</url>
<url>
- <loc>https://shiro.apache.org/core.html</loc>
+ <loc>https://shiro.apache.org/cryptography-features.html</loc>
+ <lastmod>2010-03-18</lastmod>
+ </url>
+ <url>
+ <loc>https://shiro.apache.org/about.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
<url>
@@ -292,6 +284,22 @@
<loc>https://shiro.apache.org/guice.html</loc>
<lastmod>2010-03-18</lastmod>
</url>
+ <url>
+ <loc>https://shiro.apache.org/core.html</loc>
+ <lastmod>2010-03-18</lastmod>
+ </url>
+ <url>
+ <loc>https://shiro.apache.org/terminology.html</loc>
+ <lastmod>2010-03-18</lastmod>
+ </url>
+ <url>
+ <loc>https://shiro.apache.org/jsp-tag-library.html</loc>
+ <lastmod>2010-03-18</lastmod>
+ </url>
+ <url>
+ <loc>https://shiro.apache.org/graduation-resolution.html</loc>
+ <lastmod>2010-03-18</lastmod>
+ </url>
<url>
<loc>https://shiro.apache.org/blog/2026/08/apache-shiro-301-released.html</loc>
<lastmod>2026-08-24</lastmod>
@@ -576,10 +584,6 @@
<loc>https://shiro.apache.org/release-archive.html</loc>
<lastmod>2022-06-28</lastmod>
</url>
- <url>
- <loc>https://shiro.apache.org/team.html</loc>
- <lastmod>2023-02-08</lastmod>
- </url>
<url>
<loc>https://shiro.apache.org/concurrency.html</loc>
<lastmod>2023-02-08</lastmod>
diff --git a/support.html b/support.html
index 0d5e60aad..fce266357 100644
--- a/support.html
+++ b/support.html
@@ -257,6 +257,53 @@
</div>
</div>
<div class="sect1">
+<h2 id="scope_of_support">Scope of support</h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>Community support is provided on a best-effort basis by volunteers through
the <a href="mailing-lists.html">mailing lists</a> and <a
href="https://github.com/apache/shiro/discussions">GitHub Discussions</a>.
+Commercial support is offered by third parties such as Flow Logix and Yupiik,
see <a href="commercial-support.html">Commercial Support</a>.
+Defects are tracked in <a href="https://github.com/apache/shiro/issues">GitHub
Issues</a>, and security vulnerabilities are reported privately as described on
the <a href="security-reports.html">Security Reports</a> page.</p>
+</div>
+</div>
+</div>
+<div class="sect1">
+<h2 id="supported-versions">Supported versions</h2>
+<div class="sectionbody">
+<table class="tableblock frame-all grid-all stretch">
+<colgroup>
+<col style="width: 25%;">
+<col style="width: 75%;">
+</colgroup>
+<thead>
+<tr>
+<th class="tableblock halign-left valign-top">Release line</th>
+<th class="tableblock halign-left valign-top">Support</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">3.x</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Supported.
Receives security fixes.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">2.x</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Receives
only critical security fixes.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">1.x</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">End of
life. No further releases or security fixes.</p></td>
+</tr>
+</tbody>
+</table>
+<div class="paragraph">
+<p>Please use the most recent release of a supported line.
+Fixes for older release lines that are out of scope for the open source
project are available through <a href="commercial-support.html">commercial
support</a>.
+When a release line stops receiving security fixes, the end of support is
announced on the <a href="mailing-lists.html">mailing lists</a> and on the <a
href="download.html">download page</a>, and this table is updated.
+Older releases remain available in the <a href="release-archive.html">release
archive</a>.</p>
+</div>
+</div>
+</div>
+<div class="sect1">
<h2 id="sponsorship">Sponsorship</h2>
<div class="sectionbody">
<div class="paragraph">
diff --git a/team.html b/team.html
index 5436b4df4..f16d6eaeb 100644
--- a/team.html
+++ b/team.html
@@ -20,7 +20,9 @@
<meta charset="utf-8"/>
<title>Apache Shiro Team | Apache Shiro</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
- <meta name="keywords" content='documentation,todo,lend-a-hand'>
+ <meta name="description" content="Apache Shiro project members, roles and
responsibilities, and how project governance works at the Apache Software
Foundation.">
+ <meta property="og:description" content="Apache Shiro project members,
roles and responsibilities, and how project governance works at the Apache
Software Foundation.">
+ <meta name="keywords" content='team,governance,roles,committers,pmc'>
<meta name="generator" content="JBake">
<meta name="google-site-verification"
content="QIax6uT5UX3enoU0G8Pz2pXbQ45KaQuHZ3nCh9V27mw">
<meta name="google-site-verification"
content="ecFap6dWJgS_GCCtxmJQJ_nFYQhM6EgSpBPZDU7xsCE">
@@ -28,10 +30,15 @@
<meta name="msvalidate.01" content="0B57EB46CBFAD8FD45008D2DB6B6C68C">
<meta property="og:title" content="Apache Shiro Team | Apache Shiro"/>
- <meta property="og:type" content="website"/>
- <meta property="article:tag" content='documentation'/>
- <meta property="article:tag" content='todo'/>
- <meta property="article:tag" content='lend-a-hand'/>
+ <meta property="og:type" content="article"/>
+ <meta name="twitter:card" content="summary" />
+ <meta name="twitter:site" content="@ApacheShiro" />
+ <meta property="article:modification_time" content="2026-11-09T00:00:00Z"/>
+ <meta property="article:tag" content='team'/>
+ <meta property="article:tag" content='governance'/>
+ <meta property="article:tag" content='roles'/>
+ <meta property="article:tag" content='committers'/>
+ <meta property="article:tag" content='pmc'/>
<meta property="og:locale" content="en_US" />
<meta property="og:url" content='https://shiro.apache.org/team.html'/>
<meta property="og:image" content='images/shiro-featured-image.png'/>
@@ -196,26 +203,119 @@
</div>
</nav>
- <div class="page-header">
- <h1>Apache Shiro Team</h1>
+ <div class="page-header">
+ <h1>Apache Shiro Team</h1>
+ </div>
+
+
+ <div class="admonitionblock tip">
+ <table>
+ <tbody>
+ <tr>
+ <td class="icon">
+ <div class="title">Handy Hint</div>
+ </td>
+ <td class="content">
+ <div class="title">Shiro v1 and v2 version end-of-life notice</div>
+ <div class="paragraph">
+ <p>As of February 28, 2024, Shiro v1 was superseded by v2.<p>
+ <p>As of June 29, 2026, Shiro v2 was superseded by v3.<p>
+ </div>
+ </td>
+ </tr>
+ </tbody>
+ </table>
</div>
+<div id="preamble">
+<div class="sectionbody">
<div class="paragraph">
-<p>TODO</p>
+<p>Apache Shiro is a top-level project of the <a
href="https://www.apache.org/">Apache Software Foundation</a> (ASF) and is
governed under the <a href="https://www.apache.org/foundation/governance/">ASF
governance model</a>.</p>
</div>
-<hr />
-
-<h2><a id="Lendahandwithdocumentation"></a>Lend a hand with documentation</h2>
-
-<p>While we hope this documentation helps you with the work you're doing with
Apache Shiro,
- the community is improving and expanding the documentation all the time.
- If you'd like to help the Shiro project, please consider correcting,
expanding, or adding documentation where you see a need.
- Every little bit of help you provide expands the community and in turn
improves Shiro. </p>
-
-<p>The easiest way to contribute your documentation is to submit a
pull-request by clicking on the <code>Edit</code> link below,
- or send it to the <a href="mailing-lists.html" title="Mailing Lists">User
Mailing List</a>.</p>
-
-<hr />
+</div>
+</div>
+<div class="sect1">
+<h2 id="project_members">Project members</h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>The current members of the project, including the committers and the
Project Management Committee (PMC), are listed by the ASF:</p>
+</div>
+<div class="ulist">
+<ul>
+<li>
+<p><a href="https://projects.apache.org/committee.html?shiro">Apache Shiro PMC
and committers</a></p>
+</li>
+<li>
+<p><a
href="https://people.apache.org/committers-by-project.html#shiro">Committers by
project</a></p>
+</li>
+</ul>
+</div>
+<div class="paragraph">
+<p>Only committers have write access to the source repository and other
sensitive project resources (release signing, the website, the security mailing
list).
+The PMC members additionally vote on releases and on adding new committers and
PMC members.</p>
+</div>
+</div>
+</div>
+<div class="sect1">
+<h2 id="roles_and_responsibilities">Roles and responsibilities</h2>
+<div class="sectionbody">
+<table class="tableblock frame-all grid-all stretch">
+<colgroup>
+<col style="width: 25%;">
+<col style="width: 75%;">
+</colgroup>
+<thead>
+<tr>
+<th class="tableblock halign-left valign-top">Role</th>
+<th class="tableblock halign-left valign-top">Responsibilities</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">User</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Uses
Shiro. Asks questions and gives feedback on the <a
href="mailing-lists.html">mailing lists</a> and in <a
href="https://github.com/apache/shiro/discussions">GitHub
Discussions</a>.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">Contributor</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Reports
defects and submits pull requests, following the <a
href="https://github.com/apache/shiro/blob/main/CONTRIBUTING.md">contributing
guide</a>. Contributors either have an <a
href="https://www.apache.org/licenses/icla.pdf">ICLA</a> on file with the ASF
or tick the license acknowledgment checkbox in the pull request
template.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p
class="tableblock">Committer</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Has write
access. Reviews and merges contributions, triages issues, takes part in
discussions, and may act as release manager.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p class="tableblock">PMC
member</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">A
committer who also takes part in project governance: votes on releases, new
committers and PMC members, handles private reports sent to the security team,
and is responsible to the ASF board for the health of the project.</p></td>
+</tr>
+<tr>
+<td class="tableblock halign-left valign-top"><p class="tableblock">PMC
chair</p></td>
+<td class="tableblock halign-left valign-top"><p class="tableblock">Officer of
the ASF who reports on the project’s status to the ASF board, and is the
administrative contact for the project.</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="sect1">
+<h2 id="granting_access">Granting access</h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>New committers are proposed by an existing committer and elected by a PMC
vote.
+Before elevated access is granted, the PMC reviews the candidate’s
sustained, public contributions, communication on the project’s lists,
and willingness to follow the <a
href="https://www.apache.org/foundation/policies/conduct.html">ASF Code of
Conduct</a>.
+New committers must file an <a
href="https://www.apache.org/licenses/icla.pdf">ICLA</a> with the ASF.
+Access to sensitive resources is limited to committers and removed when a
committer becomes inactive or leaves the project.
+See also <a href="https://www.apache.org/dev/new-committers-guide.html">the
ASF new committer guide</a> and the <a
href="https://www.apache.org/foundation/how-it-works.html">ASF "How it works"
documentation</a>.</p>
+</div>
+</div>
+</div>
+<div class="sect1">
+<h2 id="decision_making">Decision making</h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>Decisions are made on the public <code>dev</code> mailing list by
consensus, following the <a
href="https://www.apache.org/foundation/voting.html">ASF voting process</a>.
Releases require a PMC vote.</p>
+</div>
+</div>
+</div>
+ <hr />
</div>