dromara / Sa-Token
✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
dromara / Sa-Token
supertokens / supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
microg / GmsCore
Free implementation of Play Services
apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
jwtk / jjwt
Java JWT: JSON Web Token for Java and Android
pig-mesh / pig
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
auth0 / java-jwt
Java implementation of JSON Web Token (JWT)
apache / shiro
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
Loophole-LLC / Bastillion
Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
apache / casbin-jcasbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Java
risesoft-y9 / Digital-Infrastructure
数字底座是一款面向大型政府、企业数字化转型，基于身份认证、组织架构、岗位职务、应用系统、资源角色、数据目录、安全控制等功能构建的统一且安全的管理支撑平台。数字底座基于三员管理模式，具备微服务、多租户、容器化和国产化，支持用户利用代码生成器快速构建自己的业务应用，同时可关联诸多成熟且好用的内部生态应用。
Peergos / Peergos
A p2p, secure file storage, social network and application protocol
pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
a466350665 / smart-sso
SpringBoot SSO 单点登录 认证授权，OAuth2实现，支持跨域、分布式部署
FormidableLabs / react-native-app-auth
React native bridge for AppAuth - an SDK for communicating with OAuth2 providers
continew-org / continew-admin
🔥Almost最佳后端规范🔥页面现代美观，且专注设计与代码细节的高质量多租户中后台管理系统框架。开箱即用，持续迭代优化，持续提供舒适的开发体验。当前采用技术栈：SpringBoot v3.4.x (Java17)、Vue3 & ArcoDesign、TS、Vite5 、SaToken、MyBatisPlus、Redisson、FastExcel、CosId、JetCache、JustAuth、Crane4j、SpringDoc、Hutool 等。
xuxueli / xxl-sso
A distributed single-sign-on framework.（单点登录框架XXL-SSO）
dromara / MaxKey
Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。
GoogleCloudPlatform / java-docs-samples
Java and Kotlin Code samples used on cloud.google.com
spring-guides / tut-spring-security-and-angular-js
Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
mateaix / matecloud
🔥MateCloud是一款基于Spring Cloud Alibaba的微服务架构。目前已经整合Spring Boot 4.0.8、 SpringCloud 2025、Spring Cloud Alibaba 2025、Spring AI 2.0.1、Spring Security Oauth2、Feign、Dubbo、JetCache、RocketMQ等，支持多租户的低代码平台，Saas平台开发套件
murraco / spring-boot-jwt
JWT auth service using Spring Boot, Spring Security and MySQL
cloudfoundry / uaa
CloudFoundry User Account and Authentication (UAA) Server
bbottema / simple-java-mail
Simple API, Complex Emails (Jakarta Mail smtp wrapper)
apache / ranger
Apache Ranger - Centralized, fine-grained authorization and auditing across data and AI platforms
authorjapps / zerocode
zerocode-tdd is a community-developed, free, open-source, outcome-driven automated testing framework for Data Pipelines, ETL, REST API, Kafka(Data Streams), Databases and Load scenarios. all defined in simple JSON or YAML — with zero coding.
AthenZ / athenz
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.
dromara / dante-cloud
🐉 Dante Cloud 是支持阻塞式与响应式服务并行的微服务云原生基座和面向AI Agent开发的智能基座，基于领域驱动模型（DDD）设计，以高质量代码与低安全漏洞为核心，高度模块化、组件化，覆盖IoT设备认证、国家等保三级、接口国密数字信封加密等多层次安全体系，并提供多租户解决方案。独创“一套代码实现微服务和单体架构灵活切换”，赋能企业级智能应用构建。🔝🔝点个star 持续关注更新！
yushijinhun / authlib-injector
Build your own Minecraft authentication system.
apereo / java-cas-client
Apereo Java CAS Client
OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
AuthMe / AuthMeReloaded
The best authentication plugin for the Bukkit/Spigot API!
wso2 / product-is
Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
GrapheneOS / Auditor
Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.
ch4mpy / spring-addons
OAuth2 / OIDC for Spring backends of SPAs and mobile apps: the Spring Security beans the official starters leave to you (authorities, CORS, 2xx/401 for fetch, CSRF cookie, validated redirects, logout, one refresh flow at a time), as properties.
googleapis / google-oauth-java-client
Google OAuth Client Library for Java
membrane / api-gateway
API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.
JanssenProject / jans
The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.
bage2014 / study
Java全栈工程师学习笔记；Spring、shiro、CAS、oauth2单点登录；cache 、Redis; web 安全及解决思路；redis、mq、quartz、docker；Docker各种组件实践等；mybatis、spring、spring boot实践；分布式锁；基于分库分表等等；Java full-stack engineer study notes; Spring, shiro, CAS, oauth2 single sign-on; cache, Redis; web security and solutions; redis, mq, quartz, docker; Docker various component practices, etc.;
Hakky54 / mutual-tls-ssl
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
OtterMind / Nubase
🔥🔥🔥 Turn AI-written code into real apps. Nubase is an open-source, AI-native backend platform for AI Coding, agentic applications, and modern product teams: Memory, Database, Storage, and Auth in one self-hostable service.
firebase / firebase-admin-java
Firebase Admin Java SDK
xipki / xipki
XiPKI: Compact open source PKI (CA, OCSP responder, certificate protocols ACME, CMP, EST, SCEP), with full support of PQC MLDSA (Dilithium) and MLKEM (Kyber).
webauthn4j / webauthn4j
A portable Java library for WebAuthn(Passkeys) server side verification
Hakky54 / ayza
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
capawesome-team / capacitor-firebase
⚡️ Firebase plugins for Capacitor. Supports Android, iOS and the Web.
dogtagpki / pki
The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
Waffle / waffle
Enable drop-in Windows Single Sign On for popular Java web servers.
jchambers / java-otp
A one-time password (HOTP/TOTP) library for Java
Eleven617 / mall-ai-after-sales-platform
Trusted e-commerce AI after-sales platform — RAG, controlled tools, human confirmation, Java-authoritative writes, and observable workflows.
sashyo / minidauth
Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
nvxtien / emporia
Emporia is a microservices-based trading platform built with Spring Boot, React and PostgreSQL, featuring real-time market data, order management, execution strategies, and OAuth2 security.
hyundaimotorgroup / hmg-role
hmg-Role is an authorization management system that provides centralized access control for enterprise applications.
camilesing / DataPoly
An data service platform that turns SQL or Groovy scripts into RESTful APIs and MCP tools, with many data sources and built-in auth, rate limiting, firewall, and version rollback.数据服务平台：把 SQL / Groovy 脚本一键发布为 RESTful API 或 MCP 工具，支持多种数据源，内置鉴权、限流、防火墙与版本回滚。
hypnguyen1209 / log4j2-rce
Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2
AxonCog / OpenDreamCore
OpenDreamCore: A complete Minecraft engine & UI framework. YAML for UI, DreamLang for logic, server-side authority & hot-pluggable resources. Breaking the closed-source cycle to bring true creation freedom to the MC community.