[OFBIZ-12713] Update Apache Shiro to 1.10.1

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 22.01.01
• Fix Version/s: 22.01.01
• Component/s: framework
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 20/Nov/22 10:19
• Updated: 20/Nov/22 10:32
• Resolved: 20/Nov/22 10:30

Description

This security release contains 5 fixes since the 1.10.0 release and is
available for Download now [1].

Bug

SHIRO-892 - No Guice binding for newly introduced ShiroFilterConfiguration
SHIRO-893 - NPE caused by lack of default ShiroFilterConfiguration

Test

SHIRO-895 - Work around Guice 4’s Java 17 compatibliity for Java
17-based tests

Dependency upgrade

SHIRO-894 - EasyMock 5.0.1 for Java 17 compatibility
SHIRO-896 - HSQLDB 2.7.1

Behavior Changes

As of 1.10.1, the Guice injection will be fixed as we introduced a
regression with 1.10.0 when using Guice with
binder().requireExplicitBindings();.

Download

Release binaries (.jars) are also available through Maven Central and
source bundles through Apache distribution mirrors.

For more information on Shiro, please read the documentation [2].

-The Apache Shiro Team

[1] http://shiro.apache.org/download.html
[2] http://shiro.apache.org/documentation.html