2 个仓库
Sequences of security filters used to intercept and validate requests before they reach application controllers.
Distinct from Identity Request Interception: Focuses on the chain of security filters rather than just specific identity callbacks.
Explore 2 awesome GitHub repositories matching software engineering & architecture · Security Filter Chains. Refine with filters or upvote what's useful.
本项目是用于在 Java Web 应用程序中部署 Apache Shiro 安全框架的参考实现和代码示例集合。它作为实现身份验证、授权和用户身份管理的演示。 该实现具有分布式会话管理功能,可协调多个服务器实例之间的用户状态以实现高可用性。它还包括第三方 OAuth2 集成示例,支持外部账号身份验证,以及授予对多个相关应用程序访问权限的单点登录 (SSO) 支持。 该项目涵盖了广泛的安全功能,包括具有动态 URL 权限和资源访问限制的基于角色的访问控制。它还演示了用于请求拦截、并发登录控制和敏感数据加密的安全过滤器的使用。
Uses a chain of security filters to enforce authentication and authorization on incoming HTTP requests.
Shiro is a Java security framework that provides an identity and access manager for implementing authentication, authorization, cryptography, and session management. It serves as a security layer to verify user identities and enforce role-based access control for protected system resources. The project features a pluggable realm architecture that decouples security logic from identity data and a standalone session management system that tracks user state independently of the underlying servlet container. It includes an integrator for external identity providers using federation protocols such
Uses sequenced filter chains to intercept web requests and enforce security constraints before they reach the application.