>>>>> Brian Demers <brian.demers-re5jqeeqqe8avxtiumw...@public.gmane.org>:
> Possibly SHIRO-712 <https://issues.apache.org/jira/browse/SHIRO-712>, but > I'd like to make sure we are capturing the use-case too. > Your example seems like a bit of a highbred of DI and the INI. I'm > guessing you want everything except the `[urls]` section outside of the INI > file? Yes. But, except for the Realm and SessionDAO, mostly because I had to. All of the configuration by reflection failed in the OSGi class loader. It may be that the stuff the karaf people are doing in shiro, will fix the OSGi classloader issues...? I haven't tried doing config from the INI, since shiro 1.3.1. But Realm and SessionDAO I _do_ want to get from injection. This is how I do cross-webapp login inside karaf. I'm also pondering the possibility of replacing the JDBC realm with LDAP without the webapps seeing any difference. That would be kind of cool: it would be possible to select a JDBC realm or an LDAP realm just by juggeling karaf features. I do something similar today to choose between derby testdatabases and PostgreSQL production databases. I also juggle to select if a webapp should pull in authservice or if it should expect authservice to be present before loading.