[JOC-1145] End support for Shiro authentication - SOS JIRA

XML

Word

Printable

Current Situation

The JS7 initial releases ship with Apache Shiro.
Support for Shiro is considered deprecated due to a standstill in feature development and delayed resolution of vulnerabilities in Shiro.

Features

Authentication services are replaced
- by the built-in functionality of JS7 Identity Services to manage and to authenticate users, see ~~JOC-1148~~
- by built-in support for LDAP Directory Servers, see ~~JOC-1147~~
- by support for use of a HashiCorp Vault server, see ~~JOC-1146~~
Authorization services are replaced
- by the built-in functionality of JS7 Identity Services,
- by the mapping of membership in security groups of LDAP Directory Servers to roles defined with JS7 Identity Services.

Maintainer Notes

Support for Shiro authentication is deprecated with release 2.1.0, will be unsupported with release 2.2.0 and will be removed with release 2.4.0.

is related to

JOC-1316 Remove Shiro from JOC Cockpit

SET-210 Remove Shiro related files and configurations from JOC Cockpit setup

requires functional consideration of

JOC-1146 Add support for use of HashiCorp® Vault authentication service

JOC-1193 Add support for use of Keycloak® authentication service

JOC-1147 Add support for built-in LDAP authentication

JOC-1148 Add support for built-in user authentication

(1 requires functional consideration of, 1 mentioned in, 1 Wiki Page)