[OFBIZ-12275] Upgrade Apache Shiro to 1.7.1

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Implemented
• Affects Version/s: Trunk
• Assignee: Jacques Le Roux
• Reporter: Xin Wang
• Created: 04/Jul/21 11:50
• Updated: 11/Jan/22 09:36
• Resolved: 04/Jul/21 17:20

Description

As stated by comment, after upgrading Shiro to latest version, an EntityCrypto exception will be triggered when loading data.

After some investigation, I found that the default padding scheme of ECB mode in Shiro is different between v1.4.1 and v1.7.1, i.e.:

v1.4.1 getPaddingSchemeName() output: PKCS5Padding

v1.7.1 getPaddingSchemeName() output: NoPadding

After specifying padding scheme explicitly, EntityCrypto exception does not raise anymore.

I'll create a pull request in GitHub.

Issue Links

• links to: GitHub Pull Request #309