spring-authorization-server
Ory Hydra
spring-authorization-server | Ory Hydra | |
---|---|---|
13 | 37 | |
4,723 | 15,101 | |
0.6% | 0.8% | |
9.4 | 9.1 | |
4 days ago | 10 days ago | |
Java | Go | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
spring-authorization-server
-
Spring + VueJS: What's the best way to implement security?
I use this https://github.com/spring-projects/spring-authorization-server for smaller projects or experimentations. Keeps all the moving parts without going to a 3rd party.
-
Spring Security OAuth2 Login
In this section we will use Spring Authorization Server to build an authorization server.In addition, we will also customize the access_token and custom user information endpoints.
-
Any good free authorization server solutions?
You can spin one up in Spring (Java) fairly quickly and boilerplate - Main page and Getting Started Guide.
-
Spring Authorization Server
Is Spring Authorization Server ready for production? Does it only use OAuth 2.1? We currently use `org.springframework.security.oauth.boot:spring-security-oauth2-autoconfigure` in our apps with OAuth2 JWT with grant types `password`, and `refresh_token`. If we update our authorization server with Spring Authorization Server, do we have to change all functionalities? Can we use OAuth2 or do we have to start using OAuth2.1?
-
Spring security new Authorization server (0.3.1) - part 1
At the moment of writing this it seems like the documentation is also in the early stages, although I wouldn't expect too much from the documentation later on either if it was to be judged by the docs for the rest of the spring security. You can find the official docs here.
-
Spring Security WebSecurityConfigurerAdapter deprecated
Your example is pretty unconventional though — it seems like you're sort of rolling your own authorization server which will make things difficult. The project has been diligent about removing support for "issuing" JWTs and things like that. If you asked a maintainer about your current approach they'd probably point you to https://spring.io/projects/spring-authorization-server.
-
Spring security auth
It has becone so boilerplate, Spring is actually helping Take a look at: Spring Auth Server
-
Any good resources to learn JWT based authorization with spring?
Spring Auth Server
-
How to make multiple apps redirect to same login page hosting Google OAuth and make it redirect to corresponding app upon successful authentication?
Most of the time, and most examples, will be about using OAuth as a client. But in your case you want to have your own OAuth and Open ID server which will be federated with Facebook and Google. All that means is that you will then have an OAuth server that is also someone else's client, such that your apps authenticate with your server which then uses their servers to actually identify users. This will also come in handy later if you want to set up permissions and what not. Besides Keycloak you might want to look into WSO2 IS or Auth0. Keycloak and WSO2 IS can be run locally, while Auth0 is a cloud service. I'd go with either Keycloak or Auth0. If you go the Spring Authorization Server route, they rolled up an example of federation on the project's Github page. Oauth can be pretty complicated though so I'd suggest that you start off with a ready-made solution. If you stick to Spring Oauth2 Client and avoid things like using Keycloak's specific adapter, it should be easy enough to swap OAuth servers later on. Regarding SAML, I've never used it. I think OAuth is way more prevalent in web development. Here's a comparison, I found it informative. You mentioned tutorials... I bought this course on Udemy last year and it was pretty nice. I browsed some tutorials, and I think this is what you need if you go with Keycloak, assuming you're using Keycloak on the server. If you want to authenticate users on the frontend (running on the browser), you'll want a PKCE flow example.
-
Keycloak: Open-Source Identity and Access Management
Spring has an oauth2 authorization server that is currently in early release: https://github.com/spring-projects/spring-authorization-serv...
I'm building something with it currently and it's quite nice, especially if you are already familiar with spring security. Documentation is quite sparse tho.
Ory Hydra
- Show HN: Open-source OAuth2 server Ory Hydra now 6x faster
-
🚀 Top 12 Open Source Auth Projects Every Developer Should Know 🔑
OAuth Server - Hydra
-
Ask HN: Freelancer? Seeking freelancer? (July 2023)
For examples of my work see my contributions to Ory Hydra https://github.com/ory/hydra.
I'd be more than happy to talk about how I can bring value to your project. Let's have a conversation!
- Show HN: Open-Source OAuth2/OIDC Server Ory Hydra 2.1.2 Release
- Open Source OAuth2/OIDC Server Ory Hydra v2.1.2 Released
-
Ory Hydra VS boruta-server - a user suggested alternative
2 projects | 22 May 2023
-
Are there any OIDC Provider libraries for Golang?
Another package you might want to consider is ORY Hydra. https://github.com/ory/hydra
-
Advice me user and oauth2
Check this project: https://github.com/ory/hydra
-
Show HN: Kinde – auth, feature flags and billing (Q3) in one integration
> 10k M2M tokens for $250/month sounds like a really bad deal if I can just spin up https://github.com/ory/hydra that can easily handle 10k requests per second.
Spinning one up is easy, sure. Making sure it's production ready, is not so much.
-
Tailscale – Introducing Custom OIDC
Have not tried Dex so can't speak to that.
https://github.com/ory/hydra
What are some alternatives?
Keycloak - Open Source Identity and Access Management For Modern Applications and Services
casdoor - An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA and RADIUS [Moved to: https://github.com/casdoor/casdoor]
keycloak-ui - keycloak-ui repo is moved.
IdentityServer - The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core
zitadel - ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.
Spring Security - Spring Security
dex - OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
oidc-client-ts - OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
Ory Kratos - Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market!
a12n-server - An open source lightweight OAuth2 server
node-oidc-provider - OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js