by For those unfamiliar, Apache Shiro—a Java Security framework—performs authorization, authentication, and session management (along with many other functions) to help build more secure applications. This post will show you how to use JAX-RS to build a simple Java REST application.

If you need to get other information out of the access token, cast the user principal to an OktaJwtPrincipal and use the getClaim() method: A JAX-RS Application class defines the metadata and components associated with an application.

In this tutorial, I’ve shown you how to secure a simple JAX-RS application with Apache Shiro and Okta.

Related Articles