For cloudflare api security backend on java spring boot, the first results are hs-web/hsweb-framework (This project is a general-purpose Spring Boot enterprise backend and admin framework rather than an API security gateway or Cloudflare edge protection integration), alipay/sofa-boot (This project is a Spring Boot extension framework focused on class loader isolation and enterprise service orchestration rather than API security, Cloudflare integration, or edge protection) and dunglas/mercure (Mercure is a Go-based real-time message broker rather than a Java Spring Boot backend solution for API security and edge protection). auth0/node-jsonwebtoken and sqshq/piggymetrics round out the shortlist. Compare the match explanations and check the project documentation against your requirements.
Compare open-source Java Spring Boot API gateway repositories for securing backend services using Cloudflare API security features.
This project is a Spring Boot administrative framework and enterprise backend boilerplate designed for building management systems. It provides a foundation for enterprise-level applications using a reactive programming model and non-blocking data access patterns. The framework includes a reactive CRUD system for database operations and a role-based access control system to manage user accounts and administrative permissions. It further distinguishes itself with a centralized data dictionary for maintaining standardized labels and values across application modules. The system's broader capab
This project is a general-purpose Spring Boot enterprise backend and admin framework rather than an API security gateway or Cloudflare edge protection integration.
sofa-boot is a Spring Boot extension framework designed for enterprise service orchestration and middleware integration. It functions as a Java class loader isolator and Spring context manager, providing the mechanisms necessary to prevent dependency and bean conflicts within complex applications. The project differentiates itself by separating classes and contexts into distinct namespaces to resolve version conflicts between application libraries and middleware modules. It also acts as an enterprise middleware integrator, using standardized starters to automatically configure and connect app
This project is a Spring Boot extension framework focused on class loader isolation and enterprise service orchestration rather than API security, Cloudflare integration, or edge protection.
Mercure is an HTTP-based message broker and real-time pub/sub server that routes asynchronous data updates to authorized subscribers. It functions as a centralized hub that receives data via standard HTTP requests and broadcasts it to web clients using the Server-Sent Events protocol. The project distinguishes itself by replacing WebSockets with a unidirectional HTTP connection, leveraging HTTP/2 and HTTP/3 for multiplexed, low-latency delivery. It implements a secure access control layer using JSON Web Tokens and JSON Web Signatures to validate the identity of publishers and subscribers, and
Mercure is a Go-based real-time message broker rather than a Java Spring Boot backend solution for API security and edge protection.
This project is a Node.js library for implementing and managing JSON Web Tokens. It functions as a cryptographic token manager and authentication tool used to sign, verify, and decode tokens to securely transmit claims between parties. The library supports both symmetric and asymmetric signing algorithms, including HMAC and RSA. It enables the creation of digitally signed tokens using secrets or private keys, and provides mechanisms to validate token signatures and verify embedded claims such as expiration and issuer. The tool covers a range of identity and access capabilities, including sta
This Node.js library handles JSON Web Tokens, but it is implemented in JavaScript rather than Java Spring Boot and lacks the requested WAF, reactive web support, and Cloudflare edge protection capabilities.
PiggyMetrics is a demonstration project that illustrates a complete microservice architecture built with Spring Boot, Spring Cloud, and Docker, centered around a personal finance tracking application. It records incomes, expenses, and savings for individual accounts while computing spending statistics and time-series data to track cash flow dynamics over time. The project showcases a full Spring Cloud service mesh, including an API gateway for request routing, service discovery for dynamic instance location, and a centralized configuration server that manages application settings from a singl
This project is a microservice architecture demonstration for personal finance rather than a dedicated API security gateway or Cloudflare integration tool, making it the wrong category despite using Spring Boot and OAuth2.
PostgREST is a standalone web server that automatically transforms a PostgreSQL database into a RESTful API. It serves as an API gateway that translates HTTP requests into SQL queries, mapping the database schema directly to endpoints without the need for manual route definitions. The system utilizes a JWT authentication layer to validate user identities and map incoming web requests to specific database roles. This allows the server to delegate authorization and permission enforcement to the internal PostgreSQL role system. It includes a generator for OpenAPI specifications to provide stand
PostgREST is a Haskell-based web server that translates database schemas into REST APIs with JWT support, but it is not a Java Spring Boot backend solution for Cloudflare integration.
This project is a Spring Boot API starter kit and RESTful project skeleton designed for building backend services. It provides a foundational codebase that implements a layered service architecture and standardized directory structures to organize controllers, services, and data mappers. The project features a MyBatis CRUD boilerplate generator that automates the creation of models and controllers from database tables using customizable templates. It includes a security framework for protecting endpoints via interface signature authentication to verify user identity and request authorization.
This repository is a project skeleton and starter kit for building REST APIs with Spring Boot rather than an API security gateway or Cloudflare integration middleware.
Authboss is a modular authentication framework designed to manage user identity and account orchestration. It provides a comprehensive system for handling user registration, email verification, and the full lifecycle of user profiles. The framework distinguishes itself through a focused suite of security and identity tools, including multi-factor authentication via time-based passwords and SMS, and identity integration with external providers using OAuth1 and OAuth2 protocols. It also includes a dedicated account security manager that implements brute-force protection through credential-based
Authboss is an authentication and identity management framework written in Go rather than a Java Spring Boot API gateway integrating with Cloudflare edge protection.
This project is a collection of reference implementations and practical guides for building enterprise Java applications using the Spring Boot framework. It serves as a backend project gallery and implementation guide, providing a set of architectures for common server patterns. The repository distinguishes itself through a focus on distributed system design, offering examples for global unique identifier generation, distributed caching, and full-text search. It also includes templates and examples for creating custom Spring Boot starters to encapsulate shared dependencies and configurations
This repository provides general reference implementations and tutorials for Spring Boot distributed systems rather than serving as a dedicated API security gateway or integrating with Cloudflare edge protection.
Authlib is a comprehensive Python library for building and integrating OAuth 1.0, OAuth 2.0, and OpenID Connect clients and servers. It provides a unified set of tools to manage authentication and authorization flows, allowing applications to either act as a client connecting to external identity providers or as a provider issuing tokens and managing user identities. The project distinguishes itself through a full implementation of the JOSE standards, offering a suite of cryptographic tools for generating, signing, encrypting, and validating JSON Web Tokens, Signatures, Encryption, and Keys.
This repository is a Python-based authentication and OAuth library rather than a Java Spring Boot API security gateway integrated with Cloudflare.
Traefik is a cloud-native edge router and API gateway designed to manage service communication and traffic flow across distributed infrastructure. It functions as a dynamic service proxy that automatically discovers backend services and configures routing rules in real time, eliminating the need for manual restarts or complex configuration updates. By integrating directly with container orchestrators and service registries, it maintains a consistent state for network traffic, load balancing, and security policy enforcement. The project distinguishes itself through its deep integration with di
Traefik is a Go-based cloud-native edge router and reverse proxy with routing and middleware capabilities, but it does not provide the requested Java Spring Boot backend integration.
| Repository | Stars | Language | License | Last push |
|---|---|---|---|---|
| hs-web/hsweb-framework | 8.4K | Java | Apache-2.0 | |
| alipay/sofa-boot | 5.1K | Java | Apache-2.0 | |
| 5.3K |
| Go |
| AGPL-3.0 |
| auth0/node-jsonwebtoken | 18.2K | JavaScript | MIT |
| sqshq/piggymetrics | 13.9K | Java | MIT |
| begriffs/postgrest | 27.2K | Haskell | MIT |
| lihengming/spring-boot-api-project-seed | 9.7K | Java | — |
| volatiletech/authboss | 4.2K | Go | MIT |
| hansonwang99/spring-boot-in-action | 4.7K | Java | — |
| authlib/authlib | 5.3K | Python | BSD-3-Clause |