基于Shiro的Web应用安全框架设计研究

Research on Design of Web Application Security Framework Based on Shiro

随着信息化系统越来越完善,系统用户量激增,而用户权限在维护和管理当中复杂性也越来越强,促使之前的访问控制方式以及系统认证也得到进一步优化和改进,以满足当前系统的运行需求。笔者结合Apache Shiro以及Ehcache技术,设计并实现基于Shiro的Web应用安全框架。

As the information system is becoming more and more perfect,the number of users is increasing,and the complexity of user rights in maintenance and management is becoming more and more complex.The previous mode of access control and system authentication have been further optimized and improved to meet the operating requirements of the current system.Based on Apache Shiro and Ehcache technology,the author designs and implements a Web application security framework based on Shiro.