Microservices Platform

This project is a comprehensive enterprise architecture for building multi-tenant distributed systems, implemented as a Spring Cloud microservices platform. It provides a complete framework for managing microservices, focusing on multi-tenant data architecture and centralized identity provision.

The platform is distinguished by its integrated approach to identity and security, utilizing an OAuth2 identity provider to manage single sign-on, role-based access control, and JWT token issuance across distributed services. It further separates organizational boundaries through multi-tenant data isolation, ensuring that resources and data are logically or physically partitioned between different tenants.

The system covers a broad surface of distributed capabilities, including service governance through API gateway routing and circuit breaking, and data coordination via distributed transactions and locking mechanisms. It also includes a distributed observability stack for request tracing and centralized logging, alongside real-time search engine synchronization and asynchronous event-driven messaging.

The development workflow is supported by automation tools for application code generation and platform-specific binary packaging.

Features

Data Tenant Isolators - Provides multi-tenant data isolation to ensure organizations' resources are logically or physically partitioned.
Application Data Isolation - Implements software-level mechanisms to isolate tenant data and resources using logical or physical boundaries.
Multi-Tenant Architectures - Implements an enterprise multi-tenant architecture for isolating data and resources across distributed microservices.
Database Sharding - Implements architectural patterns for partitioning large datasets across multiple database nodes for horizontal scalability.
Multi-Tenant Data Management - Ships a framework for structural management and isolation of multi-tenant data within microservices.
Centralized Configuration Management - Provides a unified system for managing environment-specific overlays and global defaults across all microservices.
Distributed Locks - Coordinates synchronized access to shared resources across a cluster using Redis or Zookeeper to prevent race conditions.
Centralized API Gateways - Ships a centralized API gateway to route incoming network traffic to appropriate backend microservices.
Spring Cloud Microservice Orchestrations - Implements a comprehensive Spring Cloud platform for orchestrating multi-tenant distributed services.
Service Governance - Coordinates service discovery, registration, and load balancing to maintain stability in microservices environments.
Centralized Identity Management - Consolidates and manages authentication policies and diverse login methods across the platform.
Organizational Data Scoping - Restricts data modification and visibility based on the user's organizational permissions and hierarchy.
Identity Providers - Provides a centralized identity provider for unified authentication and authorization across multiple applications.
Microservices Security - Provides a centralized security authority to manage authentication and authorization across all microservices.
OAuth2 Integration - Provides a unified security server using OAuth2 for authentication and single sign-on across microservices.
Permission-Based Access Control - Implements a security model that restricts API and resource access based on granular user permissions.
Traffic Governance - Implements advanced traffic governance including rate limiting and circuit breaking to ensure service stability.
Role-Based Access Control - Restricts resource and API access by mapping users to roles and permissions via a centralized system.
Header Token Validations - Verifies user identities via tokens in HTTP headers to secure backend API endpoints.
Single Sign-On - Provides a unified login mechanism that allows users to authenticate once for multiple independent services.
User Identity Management - Centralizes account management and identity data lifecycle across a distributed microservices architecture.
User Profile Retrieval - Extracts authenticated user profiles and tenant identities from the request context for application logic.
Distributed Data Coordination - Ensures consistency across services through the integration of distributed transactions, locking, and search synchronization.
Distributed ID Generators - Provides algorithms for creating globally unique identifiers across a cluster to avoid collisions without a central sequence.
Centralized Configuration Stores - Implements a centralized store for distributing application settings and environment parameters across microservices.
Distributed Transaction Patterns - Ensures data consistency across services using asynchronous messaging and eventual consistency patterns.
Dynamic Service Discovery - Manages dynamic registration and discovery of service endpoints to enable communication in a distributed system.
Event Driven Messaging - Provides abstractions for decoupling services through asynchronous message delivery and pub-sub patterns.
Centralized Logging Systems - Provides infrastructure for aggregating and managing logs from distributed system components into a unified system.
Observability Stacks - Provides a full observability stack for collecting metrics, logs, and traces across distributed nodes.
Distributed Request Tracing - Captures timing and processing data across backend operations to debug distributed request flows.
API Traffic Governance - Implements API stability controls including rate limiting and circuit breaking at the gateway level.
Token and Session Management - Manages the lifecycle of user sessions, including logout processes and token refreshing.
Search Engine Synchronization - Synchronizes database records with search engines in real-time to enable high-performance querying.
Log Tenant Isolation - Segments log data into distinct organizational boundaries to ensure tenant privacy.
Object Storage Integrations - Provides standardized interfaces for integrating and managing external cloud object storage backends.
Search Index Synchronization - Streams database changes to a search index in real-time to provide near real-time search capabilities.
Search Index Management - Automates the lifecycle of search indices, including creation, rotation, and deletion via scheduled tasks.
Search Index Synchronizers - Synchronizes database binary log changes in real-time to maintain consistency with search engine indices.
Full Text Indexing - Implements full-text indexing and retrieval of data across microservices via a dedicated search engine.
Universal Search Executions - Enables querying data across the entire platform with built-in support for result highlighting and sorting.
Message Queues - Integrates message queues for asynchronous task buffering and reliable event-driven workflow execution.
Message Brokers - Uses message brokers as an architectural pattern to facilitate asynchronous communication and decoupling.
Dynamic Route Management - Allows for the modification and update of gateway routing rules at runtime without restarting services.
Automatic Token Refreshes - Automatically extends active sessions by refreshing authentication tokens to prevent unexpected logouts.
Multi-Grant Authentications - Validates user identities using diverse methods such as passwords, authorization codes, and phone numbers.
Multi-Grant Type Flows - Supports various OAuth2 authorization flows including password, authorization code, and multi-factor combinations.
User Session Termination - Invalidates authentication tokens to terminate user sessions and block further requests.
Multi-User Support - Supports multiple independent user identity systems within a single authorization center.
Code Generators - Provides tools for automating the creation of boilerplate business module code and class structures.
Distributed Cluster Coordination - Provides mechanisms for synchronizing state and scheduling distributed jobs across multiple compute nodes.
Distributed File Systems - Provides a unified interface for storing and retrieving unstructured files across a distributed cluster of servers.
Microservice Development Platforms - Provides integrated toolsets for developing and deploying distributed microservices including automated code generation.
Rate Limiting and Circuit Breaking - Protects distributed services from overloading and cascading failures using rate limiting and circuit breakers.
Application Performance Monitoring - Tracks runtime errors and performance bottlenecks in distributed software using metrics dashboards.
Distributed Observability Systems - Provides a unified environment for tracking request flows and aggregating logs across microservices to monitor performance.
Exception Handling - Implements a global advice mechanism to process application errors consistently across all API endpoints.

thinkgem/jeesite

8,044View on GitHub

Jeesite is a full-stack low-code development framework designed for building enterprise administrative portals using Spring Boot, MyBatis, and Vue. It functions as a comprehensive platform for creating administrative dashboards with integrated role-based access control and organizational data permission systems. The framework distinguishes itself through a combination of automated CRUD code generation and an integrated RAG platform that connects large language models to enterprise data via vector stores. It further incorporates a BPMN-based workflow engine to automate complex business process

dotnetcore/Util

4,610View on GitHub

Util is a comprehensive development framework for .NET designed to implement layered architectures and domain driven design. It provides a toolkit of base classes and tools for building full stack applications, specifically focusing on the creation of backend admin frameworks and management interfaces. The project distinguishes itself through a boilerplate generator that produces the necessary types and classes to standardize repetitive architectural patterns. It also includes a micro-frontend orchestrator that enables the splitting of large frontend modules into independent projects for sepa

apache/dubbo-spring-boot-project

5,389View on GitHub

This project is an integration framework that bootstraps Apache Dubbo remote procedure call services within Spring Boot applications. It serves as a microservice communication framework that enables the implementation of RPC services, service discovery, and distributed governance through automated configuration. The project distinguishes itself by providing a cross-language RPC bridge, allowing services written in different languages to communicate via standards such as gRPC and Protobuf. It further enables the exposure of backend microservices as REST endpoints using the Triple protocol for

apereo/cas

11,347View on GitHub

This project is an open-source identity provider and single sign-on platform that centralizes user authentication for multiple web applications and services. It functions as a multi-protocol authentication gateway, verifying user identities and issuing tokens through the CAS protocol as well as industry standards including SAML, OAuth2, and OpenID Connect. The system acts as a federated identity server, allowing authentication to be delegated to external third-party or corporate identity providers. It distinguishes itself through identity attribute governance, which manages which specific use

zlt2000microservices-platform

Features