Deprecated API

Contents

• Deprecated Classes
• Deprecated Fields
• Deprecated Methods

Deprecated Classes

Class and Description
org.apache.shiro.web.servlet.IniShiroFilter in 1.2 in favor of using the ShiroFilter
org.apache.shiro.web.config.WebIniSecurityManagerFactory use Shiro's Environment mechanisms instead.

Deprecated Fields

Field and Description
org.apache.shiro.web.mgt.DefaultWebSecurityManager.HTTP_SESSION_MODE
org.apache.shiro.web.mgt.DefaultWebSecurityManager.NATIVE_SESSION_MODE

Deprecated Methods

Method and Description
org.apache.shiro.web.env.EnvironmentLoader.determineWebEnvironmentClass(ServletContext) This method is not longer used by Shiro, and will be removed in future versions, use EnvironmentLoader.determineWebEnvironment(ServletContext) or EnvironmentLoader.determineWebEnvironment(ServletContext)
org.apache.shiro.web.mgt.DefaultWebSecurityManager.getSessionMode()
org.apache.shiro.web.mgt.DefaultWebSubjectFactory.newSubjectInstance(PrincipalCollection, boolean, String, Session, ServletRequest, ServletResponse, SecurityManager) since 1.2 - override DefaultWebSubjectFactory.createSubject(org.apache.shiro.subject.SubjectContext) directly if you need to instantiate a custom Subject class.
org.apache.shiro.web.mgt.DefaultWebSecurityManager.setSessionMode(String) since 1.2
org.apache.shiro.web.servlet.OncePerRequestFilter.shouldNotFilter(ServletRequest) in favor of overriding OncePerRequestFilter.isEnabled(javax.servlet.ServletRequest, javax.servlet.ServletResponse) for custom behavior. This method will be removed in Shiro 2.0.