Search code examples
grailsgrails-pluginshironimble

What makes nimble better than shiro?


What makes nimble a better choice than shiro?

I'm trying to decide between nimble and shiro for a new grails project right now and I'm curious what makes nimble the better choice.


Solution

  • I'm currently working with Nimble and this is what I've found so far:

    Unless you are planning on using alot of the SSO / Social connectors (Facebook etc.) then it might be easier to just roll your own using shiro. Nimble kind of forces you into their schema. Of course, if you are not too worried about serious deep-level permissions issues then I say go for it.

    One thing I wish someone had told me: Nimble uses a "most permissive" scheme. If a user is a member of a group that has access to a resource (i.e. controller/action combo) then you cannot remove that permission from the user itself. This can lead to some issues if you are wanting tight control over your app.

    Another annoying thing about Nimble is that documentation is few and far between.

    Best of luck!