Just FYI, if you use war which have cxf endpoint and Shiro servlet filters, you can still deploy that war into JBoss FUSE 6, as JBoss FUSE 6
leverage Pax Web, so can play the role as a servlet container, though you may need do a little bit extra work to OSGi-fy your war,
take a look at  &  to get more details.
Thanks. It would be nice if there is a more slim solution without the need of packaging everything to a war. Are there no plans of writing a Shiro CXF interceptor? Peter
I'll really would like to reopen your question since i am interested in using shiro + CXF but i do not build a war and do not use any application server.
I know that is possible to add custom CXF interceptors and filters and maybe this would be the solution
Did you found any other solution to this?
Do you guys found any solution for Securing CXF restful with Apache Shiro.