Security in the Grails-app: Acegi or Shiro

Question

I am developing a Grails-based web application and I need to choose one of these two authentication frameworks . In your opinion, what criteria favor the choice of Acegi and what criteria favor the choice for Apache Shiro?

Answer 1

I tried both, and in my speech, Acegi is finer-grained and much better documented. It offers many features: URL, annotation or database to protect the application, you get additional authentication SSO, Facebook, etc. I think Shiro is good for small projects, but the Shiro documentation is still missing a lot of what you need outside of you. Therefore, I feel that it depends on your project. If I choose based on my current experience, I will go for Acegi.

Answer 2

I would also like to note that Springsource officially supports the "Spring Security Plugin" , so other things being equal, the "Spring Security Plugin" is the best choice for me.

Answer 3

, . . , . . , , "".

- , :

SpringSecurity

Answer 4

Spring . . , . , Facebook Open Graph , (, - )... facebook, . , ... , ... . ! .

, , Spring , ... .

(By the way, I sent more than one question on the topic Spring Security + Facebook Connect or Facebook Graph plugin. No one received an answer ... in fact, it was recommended to try using Shiro or the Nimble plugin. Nimble is based on Shiro and supports almost everything that you needed, in addition to all the users, roles, permissions, group service, encoded from the very beginning. Agile was too much for my needs, so I'm stuck with Shiro)