dromara/Sa-Token

Health v2 · maintenance only

Adoption not part of the score

19005 stars · 2911 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Sa-Token is a lightweight, open-source Java authentication and authorization framework covering login authentication, permission checks, distributed sessions, SSO, OAuth2.0, JWT integration, and microservice gateway auth. It integrates out-of-the-box with Spring Boot, Solon, JFinal, and other common Java web frameworks.

Use cases

• add login authentication to a Spring Boot application
• implement role-based and permission-based access control in Java
• set up single sign-on (SSO) across multiple systems
• build an OAuth2.0 authorization server
• manage distributed sessions across microservices
• kick users offline or ban accounts programmatically
• secure gateway-level authentication in Spring Cloud
• integrate JWT-based token auth in a Java web app

When to choose

• you need a one-stop Java auth solution covering login, permissions, SSO, and OAuth2.0
• you want minimal configuration and simple static-call APIs for authentication
• you are building Spring Boot or microservice (Spring Cloud) applications needing unified auth
• you need session management features like kick-offline, account bans, and auto-renewal

When to avoid

• you are not working on the JVM/Java platform
• you need a standards-compliant implementation of Spring Security or Jakarta EE security specs
• your project requires fine-grained policy engines like OPA or Casbin-style ABAC

Facets

framework · maturity stable

auth authorization middleware security security web-development backend developer-tools jvm cross-platform java sso oauth2 jwt session-management microservices spring-boot token-authentication single-sign-on api-key spring

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dromara/Sa-Token")