pac4j
Java için güvenlik motoru: OpenID Connect, SAML 2, CAS, OAuth, LDAP, JWT gibi protokollerle kimlik doğrulama ve yetkilendirme sağlar. Spring Boot, Jakarta EE, Play, Vert.x, Javalin ve JAX-RS gibi çerçevelerde aynı kavramlarla çalışır. Roller, CSRF koruması, CORS ve güvenlik başlıkları dahildir.
pac4j · Authentication & Identity
Common commercial products in this category: Auth0, Okta, AWS Cognito
- Aynı kavramlarla Spring Boot, Jakarta EE, Play, Vert.x, Javalin ve JAX-RS uygulamalarına kimlik doğrulama ekleyebilirsin.
- OpenID Connect, SAML 2, CAS, OAuth ve LDAP ile oturum açma akışları kurabilirsin.
- Rol ve kimlik doğrulama seviyelerine göre yetkilendirme kuralları tanımlayabilirsin.
- • No published release
- ↓ NegativeHacker News
Authentication bypass in pac4j-JWT using only the RSA public key
“Author here. We're the CodeAnt AI security research team. We've been auditing patch code in popular open-source packages - not scanning, not checking databases, but reading the actual fixes and asking: does this patch really close the vulnerability, or just the specific path…”
- • NeutralHacker News
Our AI code reviewer found a CVSS 10.0 authentication bypass in pac4j-JWT
“Author here. We built CodeAnt AI, an AI code reviewer that analyzes code the way a security researcher would, reasoning about what specs allow vs what code assumes. It flagged a logic gap in pac4j-jwt: a PlainJWT wrapped inside a JWE bypasses all signature verification.…”
Verified against README · Oct 29, 2026 · source