> There's a strong need for a decent manual! Here's what we have thus far:
http://incubator.apache.org/shiro/reference.html And it's always being added to. Here's the part on configuration: http://incubator.apache.org/shiro/configuration.html Externalizing configuration from web.xml is covered here: http://incubator.apache.org/shiro/web.html (oddly enough, the Confluence exports are not formatting code blocks correctly. Try the wiki version for a nicer look and feel until the export/template stuff is fixed: https://cwiki.apache.org/confluence/display/SHIRO/Reference) I hope that helps! The new site template that will be in place for the 1.0 release will make this stuff easier to find, I promise ;) Also, any time you have any suggestions for the documentation, please let us know! > But it still would be great if you could consider java config style > This is a thing worth placing in the issue tracker. But isn't it there > already? Nope, not yet - we haven't had a request for it yet. But that's ok - please feel free to add one if you like. But that begs the question - if you can do this via Spring's (or Guice's) Java Config, why not just use that to configure Shiro? Part of the reason we don't have an XML config option is that typically Guice and Spring can do this stuff in a more sophisticated way than what we would come up with on our own (and who wants to maintain something that complex in a security framework ;) ?) - Les
