spring-attic/spring-security-oauthArchived
Spring Security Oauth
Ce projet est un framework de sécurité OAuth pour les applications web Java. Il fournit un ensemble d'outils pour ajouter l'authentification et l'autorisation aux applications Spring en utilisant des protocoles d'autorisation déléguée standardisés.
La bibliothèque implémente les standards OAuth 1.0a et OAuth 2.0. Pour OAuth 2.0, elle inclut des implémentations à la fois pour le côté client, afin de demander des jetons d'accès et consommer des ressources protégées, et pour le côté fournisseur, afin d'émettre des jetons d'accès et gérer les autorisations.
Le framework couvre les flux d'autorisation API, la sécurisation de la communication entre les applications et la gestion des permissions d'accès aux données via un système basé sur des jetons.
Features
- OAuth Protocol Implementations - Provides a complete framework managing authentication and authorization flows for both OAuth 1.0a and 2.0.
- OAuth 1.0 Authenticators - Implements the OAuth 1.0a protocol to secure communication between consumers and providers.
- OAuth 1.0 Authentication Strategies - Integrates OAuth 1.0 authentication mechanisms to secure communication within Spring-based applications.
- OAuth 2.0 Authorization Flows - Implements standard OAuth 2.0 protocol flows for exchanging authorization codes and tokens.
- OAuth 2.0 Client Implementations - Provides a client implementation for requesting access tokens and consuming protected resources from OAuth 2.0 providers.
- OAuth 2.0 Authorization Servers - Implements an authorization server to issue access tokens and manage authorization grants per the OAuth 2.0 standard.
- OAuth Authentication - Provides a comprehensive security library for adding OAuth 1.0a and 2.0 authentication and authorization to Java applications.
- Delegated Server Authorization - Implements token acquisition processes that allow third-party applications to access resources on behalf of a user.
- OAuth Token Validators - Includes dedicated validators to check the validity and expiration of OAuth credentials within the request pipeline.
- Token-Based Authentication - Verifies identity using unique string tokens passed in request headers instead of session cookies.
- Token-based Authorization - Controls how third-party applications access protected resources using bearer tokens in HTTP headers.
- Web Application Security - Provides security middleware for Spring web applications to manage authentication and data access permissions.
- Request Filtering Middleware - Provides a chain of filters to intercept and validate OAuth tokens before requests reach the application.
