• Stars
    star
    398
  • Rank 104,811 (Top 3 %)
  • Language
    Java
  • License
    Apache License 2.0
  • Created over 11 years ago
  • Updated 8 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Security library for Play framework 2 in Java and Scala: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...

The play-pac4j project is an easy and powerful security library for Play framework v2 web applications and web services which supports authentication and authorization, but also logout and advanced features like CSRF protection. It can work with Deadbolt. It's based on the pac4j security engine. It's available under the Apache 2 license.

JDK Play version pac4j version play-pac4j version Modules (Java & Scala) Usage of Lombok Status
17 3.0 6.x 12.0.x-PLAY3.0 play-pac4j_2.13 play-pac4j_3 Yes Production ready
17 2.9 6.x 12.0.x-PLAY2.9 play-pac4j_2.13 play-pac4j_3 Yes Production ready
17 2.8 6.x 12.0.x-PLAY2.8 play-pac4j_2.12 play-pac4j_2.13 Yes Production ready
11 2.8 5.x 11.0.x-PLAY2.8 play-pac4j_2.12 play-pac4j_2.13 No Production ready
11 2.8 4.x 10.x play-pac4j_2.12 play-pac4j_2.13 No Production ready
8 2.7 4.x 9.x play-pac4j_2.11 play-pac4j_2.12 play-pac4j_2.13 No Production ready

Main concepts and components:

  1. A client represents an authentication mechanism. It performs the login process and returns a user profile. An indirect client is for UI authentication while a direct client is for web services authentication:

▸ OAuth - SAML - CAS - OpenID Connect - HTTP - Google App Engine - Kerberos - LDAP - SQL - JWT - MongoDB - CouchDB - IP address - REST API

  1. An authorizer is meant to check authorizations on the authenticated user profile(s) or on the current web context:

▸ Roles - Anonymous / remember-me / (fully) authenticated - Profile type, attribute - CORS - CSRF - Security headers - IP address, HTTP method

  1. A matcher defines whether the security must be applied and can be used for additional web processing

  2. The Secure annotation and the Security trait protect methods while the SecurityFilter protects URLs by checking that the user is authenticated and that the authorizations are valid, according to the clients and authorizers configuration. If the user is not authenticated, it performs authentication for direct clients or starts the login process for indirect clients

  3. The CallbackController finishes the login process for an indirect client

  4. The LogoutController logs out the user from the application and triggers the logout at the identity provider level

  5. The Pac4jScalaTemplateHelper can be used to get the user profile(s) from a Twirl template.

Usage

2) Define:

- the callback configuration, only for web applications

Demos

Two demo webapps: play-pac4j-java-demo & play-pac4j-scala-demo are available for tests and implement many authentication mechanisms: Facebook, Twitter, form, basic auth, CAS, SAML, OpenID Connect, JWT...

Test them online: http://play-pac4j-java-demo.herokuapp.com and http://play-pac4j-scala-demo.herokuapp.com.

Versions

The latest released version is the Maven Central, available in the Maven central repository. The next version is under development.

See the release notes. Learn more by browsing the pac4j documentation and the play-pac4j_2.12 Javadoc / play-pac4j_2.13 Javadoc / play-pac4j_3 Javadoc.

See the migration guide as well.

Need help?

You can use the mailing lists or the commercial support.

More Repositories

1

pac4j

Security engine for Java (authentication, authorization, multi frameworks): OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
2,317
star
2

spring-security-pac4j

Bridge from the pac4j security library to Spring Security (reactive)
Java
268
star
3

spark-pac4j

Security library for Sparkjava: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
156
star
4

spring-webmvc-pac4j

Security library for Spring Web MVC: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
130
star
5

vertx-pac4j

Security library for Vert.x: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
120
star
6

buji-pac4j-demo

Shiro webapp using the buji-pac4j bridge and the javaee-pac4j security library
Java
79
star
7

play-pac4j-scala-demo

Play Scala demo to test the play-pac4j security library
Scala
55
star
8

jax-rs-pac4j

Security library for JAX-RS and Jersey
Java
47
star
9

play-pac4j-java-demo

Play Java demo to test the play-pac4j security library
Java
44
star
10

jee-pac4j

Security library for JEE: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
42
star
11

spring-webmvc-pac4j-boot-demo

Spring Boot demo to test the spring-webmvc-pac4j security library
Java
41
star
12

spring-security-webmvc-pac4j-boot-demo

Spring Security boot demo using spring-security-pac4j + spring-webmvc-pac4j
Java
41
star
13

undertow-pac4j

Security library for Undertow: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
38
star
14

spark-pac4j-demo

Demo webapp to test the spark-pac4j library for Sparkjava
Java
36
star
15

javalin-pac4j

Security library for Javalin: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
34
star
16

http4s-pac4j

Security library for http4s
Scala
32
star
17

spring-security-jee-pac4j-boot-demo

Spring Security boot demo using spring-security-pac4j + javaee-pac4j
Java
32
star
18

vertx-pac4j-demo

Vertx demo to test the vertx-pac4j security library
Java
27
star
19

dropwizard-pac4j

A Dropwizard bundle for securing REST endpoints using pac4j
Java
23
star
20

lagom-pac4j

Security library for Lagom
Java
21
star
21

ratpack-pac4j-demo

Demo webapp to test the ratpack-pac4j library for Ratpack
Java
20
star
22

jee-pac4j-demo

JEE demo to test the jee-pac4j security library
Java
17
star
23

spring-webmvc-pac4j-demo

Spring Web MVC demo to test the spring-webmvc-pac4j security library
Java
11
star
24

dropwizard-pac4j-demo

Dropwizard demo to test the dropwizard-pac4j security library
Java
8
star
25

undertow-pac4j-demo

Demo webapp to test the undertow-pac4j library for Undertow
Java
7
star
26

ratpack-pac4j

pac4j security library for Ratpack: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
6
star
27

http4s-pac4j-demo

Http4s demo to test the http4s-pac4j security library
Scala
5
star
28

casserverpac4j

CAS server for pac4j demos
CSS
5
star
29

jooby-pac4j-demo

Jooby webapp demo to test the jooby-pac4j security module
Java
5
star
30

jee-pac4j-cdi-demo

JavaEE demo using JSF and CDI to test the jee-pac4j security library
HTML
3
star
31

knox-pac4j-demo

Knox demo to test the gateway-provider-security-pac4j
Shell
3
star
32

lagom-pac4j-java-demo

Lagom demo to test the lagom-pac4j security library
Java
2
star
33

spring-webflux-pac4j

Security library for Spring Webflux: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
Java
2
star
34

spring-security-webflux-pac4j-boot-demo

Spring Security reactive boot demo using spring-security-pac4j + spring-webflux-pac4j
Java
2
star
35

lagom-pac4j-scala-demo

Lagom Pac4j Demo Scala
Scala
2
star