Securing Spring Boot API using Apache Shiro

The purpose of this story is to explain how to secure a Spring Boot API using the Apache Shiro security framework.

If you are not a Medium member, then click here to read for free.

· Prerequisites
· Overview
∘ What is Apache Shiro?
∘ Why use Apache Shiro?
· Getting Started
∘ Set up Spring Boot Project
∘ Core Implementation
∘ Practical Examples
· Test the REST APIs:
· Conclusion
· References

Prerequisites

This is the list of all the prerequisites:

• Spring Boot 3+
• Maven 3.6.3 or later
• Java 21 or higher
• PostgreSQL
• IntelliJ IDEA, Visual Studio Code, or another IDE
• Postman / insomnia or any other API testing tool.

Overview

What is Apache Shiro?

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session…