Repository Index

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java

Java JWT: JSON Web Token for Java and Android

• jwt
• java
• java-jwt
• jjwt

Distributed Peer-to-Peer Web Search Engine and Intranet Search Appliance

• decentralized
• p2p
• p2p-network
• privacy

Library for OpenAPI 3 with spring-boot

• openapi3
• spring-boot
• springdoc-openapi
• swagger-ui

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

• ssh
• bastion-host
• java
• javascript

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included

• tls
• truststore
• certificate
• keystore

OpenIG is an open-source identity gateway (reverse-proxy) that secures, routes, and manages web traffic. It enables authentication, access control, and integration with identity providers, delivering single sign-on and API security for web and cloud applications.

• sso
• reverse-proxy
• rewrite
• openam

Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code

• android-application
• webview-xss
• application-security
• vulnerable-application

Webapplication Honeypot

JSON Web Token implementation for Java according to RFC 7519. Easily create, parse and validate JSON Web Tokens using a fluent API.

• java
• jwt
• java-jwt
• json-web-token

Native Shamir Secret Sharing. Securely split & restore secrets on iOS, Android, and Web with a single Capacitor plugin.

• capacitor
• capacitor-android
• capacitor-ios
• capacitor-plugin