dromara/Sa-Token
Sa Token
Sa-Token is a Java-based authentication and authorization framework designed to manage user sessions, permissions, and identity verification within web applications and microservice architectures. It provides a centralized security layer that enforces access control policies and identity validation across distributed service environments and API gateways.
The framework distinguishes itself through its support for cross-domain single sign-on and its ability to function as an OAuth2 identity provider. It manages user session lifecycles by applying configurable rules for single or multi-login requirements and synchronizes authentication states across multiple servers and independent application instances using external, persistent storage.
Beyond core identity management, the project covers a broad range of security capabilities including role-based access control and interceptor-based enforcement. It integrates with diverse web frameworks through an adapter-based approach, allowing for consistent security enforcement regardless of the underlying application architecture.
Features
- Authentication and Authorization - Provides a comprehensive framework for managing user authentication, session lifecycles, and access control permissions in Java applications.
- Identity Providers - Implements custom identity provider services using standard authorization protocols.
- OAuth2 Providers - Implements standard OAuth2 authorization protocols to secure inter-service communication and manage user access across diverse platforms.
- Role-Based Access Control - Enforces access control by evaluating user permissions against defined roles and security policies.
- Single Sign-On - Supports cross-domain single sign-on by sharing authentication tokens through secure centralized storage.
- Cross-Domain Authentication - Enables secure authentication across multiple domains by sharing tokens through centralized storage.
- Microservices Security - Enforces centralized identity verification and access control policies across distributed microservice architectures and API gateways.
- Session Management - Coordinates user login states and authentication sessions across multiple domains and microservices.
- Session Management Systems - Synchronizes user login states and authentication tokens across multiple servers and independent application instances.
- Token-Based Authentication - Implements stateless authentication using cryptographically signed tokens to verify user identity without server-side state.
- Authentication Login Handlers - Manages active user sessions across devices with configurable rules for single or multi-login requirements.
- Distributed Authentication Strategies - Centralizes authentication and session management across microservices to ensure consistent security enforcement.
- Session Management Policies - Manages the lifecycle of active login sessions with configurable policies for concurrent access.
- External Database Persistence - Persists authentication session data in external databases to ensure continuity across multiple application instances.
- Session Authentication - Maintains persistent user login states across application restarts and various devices.
- Web Framework Integrations - Provides adapters and middleware to integrate authentication logic with various web frameworks and server runtimes.
- Java 项目 - Listed in the “Java 项目” section of the Great Open Source Project awesome list.
- Inter-Service Authentication - Validates identity and access permissions during inter-service communication and at the gateway level.
- Request Interceptors - Hooks into the request lifecycle to validate user identity and permissions before accessing protected resources.
