Fork me on GitHub
pac4j

The Java security framework to protect all your web applications and web services

Getting started Documentation

Implementations

Ready to use for most frameworks and tools

Spring Web MVC (Spring Boot) J2E Spring Webflux (Spring Boot) Shiro Spring Security (Spring Boot) CAS server Syncope Knox Play 2.x/3.x Vertx Spark Java Ratpack JAX-RS Dropwizard Javalin Pippo Undertow Lagom Akka HTTP Jooby

Supported mechanisms

The same security concepts, whatever the implementation

Authentication

OpenID Connect SAML CAS OAuth HTTP LDAP SQL JWT MongoDB IP address Kerberos REST API

Authorization

Roles Anonymous Remember-me Fully authenticated CORS CSRF HTTP Security headers

Advanced

OpenID Federation EUDI Wallet/eIDAS 2.0

Supported by

The consulting company specializing in CAS and pac4j NLnet foundation