# xuxueli/xxl-sso

A distributed single-sign-on framework.（单点登录框架XXL-SSO）

Repository: https://github.com/xuxueli/xxl-sso
Canonical: https://ross.abutalabs.com/products/xxl-sso
Homepage: http://www.xuxueli.com/xxl-sso/
Language: Java
License: GPL-3.0
License Family: copyleft
Topics: sso, authorization, spring-boot, java, authentication, distributed, xxl-sso
Last push: 2026-08-07T21:01:03+00:00

## Health v2 (maintenance only)
Score: 93/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 96, release rhythm 84, longevity 100
- inputs: {"age_days": 3086, "days_push": 26, "days_rel": 26, "gap_med": 31, "n_releases_24m": 10}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2011, forks 830 (observed 2026-08-28T04:06:05.104111+00:00)

## What it is
XXL-SSO is a lightweight, distributed single sign-on (SSO) framework for Java/Spring applications. It supports login, permission, and role authentication across web, native (front-end separated), and CAS cross-domain scenarios with pluggable login-state storage such as Redis.

## Use cases
- implement single sign-on across multiple internal applications
- add login authentication to a spring boot app with annotations
- share login sessions across microservices with redis
- support token-based login for mobile apps and front-end/back-end separation
- set up a CAS-style cross-domain unified login center
- add role and permission checks to web endpoints

## When to choose
- you need SSO across multiple Java/Spring systems with minimal dependencies
- you want annotation or API based login, permission, and role checks
- you need both cookie-based web login and token-based native login
- you prefer a lightweight self-hosted alternative to heavier SSO solutions

## When to avoid
- your stack is not JVM/Spring based
- you need full-featured enterprise IAM with OAuth2/OIDC/SAML federation
- you cannot accept the GPL-3.0 license
- you need managed cloud identity services

## Facets
- artifact type: framework
- maturity: active
- function: auth, authorization, middleware
- domain: security, web-development, backend, developer-tools
- platform: jvm, self-hosted
- tags: sso, single-sign-on, cas, distributed-session, spring-mvc, webflux, token-authentication, session-management, spring-boot

## Member repositories
- xuxueli/xxl-sso (main) score 93

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:05.104111+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:01:06.954179+00:00, confidence not recorded.
  - readme: https://github.com/xuxueli/xxl-sso (fetched 2026-08-28T04:06:05.104111+00:00, sha c243e3d108c0)
  - homepage: http://www.xuxueli.com/xxl-sso/ (fetched 2026-08-29T10:41:01.433827+00:00, sha 2756ff572c16)
- Data as of 2026-08-30T08:39:29.467469+00:00.