dromara/lamp-cloud
Lamp Cloud
Lamp Cloud is a multi-tenant SaaS backend framework built on Java and Spring Cloud that provides a complete foundation for building enterprise-grade administration systems. Its core identity centers on supporting multiple tenant isolation strategies—including database-per-tenant, schema-per-tenant, and shared-table modes—that can be switched without altering business code, alongside a role-based access control system enforced at the gateway layer across all microservices.
The framework distinguishes itself through comprehensive tenant lifecycle management tools that allow creating, configuring, and initializing tenants with their own data sources and administrators, while also enabling per-tenant assignment of applications, menus, views, and data permissions. It supports both microservice and monolithic deployment from the same codebase, includes distributed transaction coordination via Seata, and provides automatic code generation from database schemas that produces controller, service, mapper, and frontend files to accelerate CRUD development.
Additional capabilities include distributed task scheduling across clusters, file storage integration with multiple backends such as FastDFS and MinIO, multi-channel notifications through email and SMS, consistent form validation across frontend and backend, and audit logging of user and system activity for security monitoring. The framework also addresses common microservice challenges with cache stampede prevention and protection against XSS and SQL injection attacks.
Features
- Pluggable Tenant Isolation Schemes - Switches between database-per-tenant, schema-per-tenant, or shared-table isolation without changing business code.
- Multi-Tenant SaaS Frameworks - Provides a complete multi-tenant SaaS backend framework with multiple isolation strategies.
- Tenant Lifecycle Managers - Provides tools to create, configure, initialize, and administer tenants including their data sources and administrators.
- Per-Tenant Resource Assignments - Assigns applications, menus, views, buttons, fields, and data permissions to specific tenants.
- Configurable Tenant Isolation Modes - Supports non-tenant, column-based, and datasource-based isolation, letting each deployment choose the right data separation strategy.
- Role-Based Access Controls - Enforces permissions through a self-developed RBAC system with gateway-level authentication and data-level rules.
- Role-Based Access Control - Enforces fine-grained access control through roles, resources, and data permissions across the application.
- Dual-Mode Deployments - Runs the same codebase as either a microservice or a monolithic application to fit different deployment needs.
- Database Schema Code Generators - Generates controller, service, mapper, and frontend files from database tables to accelerate CRUD development.
- Mapper Code Generators - Produces controller, service, mapper, and frontend files from database tables to accelerate CRUD development.
- Full-Stack Code Generators - Creates visual code generation for both frontend and backend, reducing manual boilerplate for admin panel development.
- CRUD Application Generators - Generates single-table, master-detail, and tree-structure pages with minimal configuration to speed up development.
- Pluggable File and Message Backends - Supports multiple file storage backends and messaging channels through pluggable interfaces.
- Cross-Stack Form Validators - Applies the same validation rules on both client and server to ensure data integrity across the stack.
- Multi-Provider Object Storage - Supports switching between local storage, FastDFS, MinIO, and various cloud object storage services dynamically.
- File Store Backends - Uploads and retrieves files from FastDFS, MinIO, or other storage systems through a unified interface.
- Distributed Transaction Coordinators - Coordinates commits and rollbacks across multiple services using Seata to maintain data consistency.
- Cross-Stack Validation Rules - Applies the same validation rules on both frontend and backend to ensure data integrity.
- Distributed Recurring Task Scheduling - Runs cron jobs across a cluster with a distributed scheduler, ensuring each task executes exactly once.
- User Action Audit Logging - Logs login events, operation actions, and API calls for security monitoring and compliance.
