Files
releases/docs/website/content/integrations/springsecurity-api.md
T
Charlie Egan 612b93af1f docs: Revise language SDK content (#6811)
In the OPA ecosystem, there are a number of language SDKs for different
general purpose languages, mostly integrating with the REST API. This PR
highlights these at the start of the OPA ecosystem page, adds some other
projects for completeness and clarifies the owner where more than one
SDK for a language exists.

Signed-off-by: Charlie Egan <charlie@styra.com>
2024-06-11 13:34:03 +01:00

31 lines
1.3 KiB
Markdown

---
title: Authorization for Spring Security
labels:
layer: network
category: application
software:
- java
code:
- https://github.com/open-policy-agent/contrib/tree/master/spring_authz
- https://github.com/Bisnode/opa-spring-security
- https://github.com/build-security/opa-java-spring-client
- https://github.com/massenz/jwt-opa
- https://github.com/eugenp/tutorials/tree/master/spring-security-modules/spring-security-opa
tutorials:
- https://github.com/open-policy-agent/contrib/blob/master/spring_authz/README.md
- https://github.com/massenz/jwt-opa#web-server-demo-app
- https://www.baeldung.com/spring-security-authorization-opa
inventors:
- styra
- build-security
- bisnode
- alertavert
docs_features:
rest-api-integration:
note: |
OPA Spring Security uses the REST API to query OPA about authz decisions.
See an example application in OPA's
[contrib repo](https://github.com/open-policy-agent/contrib/tree/main/spring_authz).
---
Spring Security provides a framework for securing Java applications. These integrations provide simple implementations for Spring Security that use OPA for making API authorization decisions. They provide support for both traditional Spring Security (MVC), as well as an implementation for Spring Reactive (Web Flux).