It provides a comprehensive set of concepts and components. It is available for most frameworks/tools and supports most authentication/authorization mechanisms. It is licensed under the Apache 2 license.

JEE • Spring Web MVC (Spring Boot) • Spring Webflux (Spring Boot) • Apache Shiro • Spring Security (Spring Boot)

CAS server • Syncope • Apache Knox

Play 2.x • Vertx • Spark Java • Ratpack • JAX-RS • Dropwizard

Javalin • Pippo • Undertow • Lagom • Akka HTTP • Jooby

OAuth (Facebook, Twitter, Google...) - SAML - CAS - OpenID Connect - HTTP - Google App Engine - Kerberos (SPNEGO/Negotiate)

LDAP - SQL - JWT - MongoDB - CouchDB - IP address - REST API

Roles - Anonymous/remember-me/(fully) authenticated - Profile type, attribute

CORS - CSRF - Security headers - IP address, HTTP method

The latest released version is the , available in the Maven central repository. The next version is under development.

Read the documentation for more information.

You can use the mailing lists or the commercial support.

The CAS and pac4j consulting company