Skip to content

Tag: Apache Shiro (en)

“Edit this page on Github” using Freemarker in JBake

Another challenge we (the Apache Shiro Team) faced with our new JBake website was to re-re-add the “edit this page on GitHub” link at the bottom of the page. But it can be done with a workaround as long as the related bug is not solved.

Screenshot of the Apache Shiro website with a "Edit this page on GitHub" link at the bottom (footer).
Screenshot of the Apache Shiro website with a “Edit this page on GitHub” link at the bottom (footer).

Apache Shiro: implementing new password hashing algorithms

As an Apache Shiro PMC member, I have occasionally contact to cryptographic functions. For example, Shiro 1.x allows hashed passwords in your shiro.ini configuration.

Now, everyone should know by now that just hashing (and salting) a password is not a good protection against brute force attacks. Even with hundreds or thousands of iterations, such a password can be prone to brute force attacks nowadays. This it is not a surprise that Lez Hazlewood (the original creator of Apache Shiro) had the idea to add an bcrypt implementation.