Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. It can be used to secure any application – from the command line applications, mobile applications to the largest web and enterprise applications. Shiro also supports some auxiliary features, such as web application security, unit testing, and multithreading support, but these exist to reinforce the above four primary concerns. The framework landscape has changed quite a bit since 2003, so there should still be a compelling reason to use Shiro today.
Source: https://thehackernews.com/2012/02/application-security-with-apache-shiro.html