Skip to content

🔒 To protect your web application based on Spring MVC

Notifications You must be signed in to change notification settings

watertreestar/tidy-defender

Repository files navigation

defender

Very lightweight authentication and authorization framework to protect your web application. Use Servlet Filter to authenticate visitor ,and the method level authorization depends on Spring AOP.

Principle

defender意为守卫,是一个非常轻量级的认证和授权框架,参考了shiro的设计结构,基于Filter和切面,Filter用作认证,Aspect切面主要用于权限的校验

该项目主要是参考了shiro,虽然使用过shiro但是对于内部的了解依然不是特别深刻,「纸上得来终得浅,绝知此事需恭行」.于是就想做一个简单的能够实现 认证和授权的framework.

Features

  • [] 基于session的认证
  • [] 基于jwt的认证
  • [] Spring AOP实现授权
  • [] session支持强制下线
  • [] 支持restful资源授权
  • [] 密码加密验证
  • [] Spring Boot Starter支持

Installing

Get started

License

About

🔒 To protect your web application based on Spring MVC

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages