I'm working on integrating Struts2 with Shiro. I haven't used Shiro in any projects yet, so my knowledge is pretty limited, although I have downloaded and examined the quick start application and have read quite a bit of the documentation on the web site [all the main sections and am going over some of the web integration and spring integration examples although I don't think they suite my needs].
I would really like to see this work done by Alan Cabrera ( http://grokbase.com/t/shiro/dev/10a7bd7pbn/struts2-integration), it mentions a "sandbox" but I couldn't find this on the shiro site or github... It was back in 2010. What I'm looking to do, or think I should be doing is creating a custom SessionDAO. I'll have a user login and store the User in the sessions as "shiro-user" then it should be simply a matter of using Struts2's thread local to get at it [ActonContext.getContext().getSession()] where ever there would be direct access to the HTTPSession. I am partial to programmatic configuration over the ini file (I just want to get a feel for things and the IDE will help me there a bit, afterwards I can get lazy). For various reasons I would rather use shiro as per the non-web examples (filtering based on url is not required), the security checks will be done in the code. To simplify setup I've started off by using the shiro.ini that is part of "Apache Shiro :: Samples :: Quick Start". Any advice? A link to that sturts2-shiro integration done by Alan would be interesting too.
