I'm not familiar with Shiro (just quickly look at it) but you may want to check friend: https://github.com/cemerick/friend#authorization This gives you things like friend/authorize