How to secure a Shiro client application with CAS (using pac4j)

Here is your use case: your application already uses Shiro, you have defined URL rules in shiro.ini, it calls SecurityUtils.getSubject() and role checks in the code. Now you need to connect it to a CAS server, while keeping those authorization rules. Since the shiro-cas module was retired, Shiro no longer provides its own CAS client. So we can use pac4j for the authentication and pass the result to Shiro. This is the role of buji-pac4j. But there is a distinction to make: buji-pac4j is a bridg