dromara/Sa-Token

Health v2 · maintenance only

Adoption not part of the score

19071 stars · 2912 forks observed · 2026-10-12

What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-19, confidence 0.98

Sa-Token is a lightweight Java authentication and authorization library that provides login, permission, SSO, OAuth2 and token management out of the box. It integrates seamlessly with Spring Boot, Spring MVC, WebFlux and other Java web frameworks.

Use cases

• implement login authentication in a Java web application
• manage user permissions and role-based access control
• enable single sign‑on across multiple services or domains
• protect REST APIs with token‑based authentication
• handle distributed session management in microservice architectures
• integrate OAuth2 login with third‑party identity providers

When to choose

• You need a simple, opinionated auth solution for a Java/Spring project
• You require built‑in SSO, OAuth2 and JWT support without extra libraries
• Your system runs on multiple JVM services and needs shared session state
• You prefer a framework that works out of the box with Spring Boot starters

When to avoid

• Your application is not Java based or runs on non‑JVM languages
• You need a full‑featured policy engine or attribute‑based access control beyond basic role checks
• You require a standalone identity provider rather than an embedded library

Facets

library · maturity active

auth authorization middleware security web-development backend jvm sso oauth2 jwt distributed-session microservices spring-boot-starter web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dromara/Sa-Token")