Home
AuthForge is a production-grade authentication and authorization starter kit built on modern Java 21, Spring Boot 3.2+, and Spring Security 6. It provides enterprise identity foundations out-of-the-box, eliminating boilerplate and securing microservices with industry best practices.
- Stateless Token Management: HMAC-SHA256 JWT tokens with automatic refresh token rotation and database-backed revocation.
- Two-Factor Authentication (2FA): Time-based One-Time Passwords (TOTP) compliant with Google Authenticator and standard RFC 6238 authenticators.
- Social OAuth2 Identity: Seamless login via Google and GitHub with unified user profile synchronization.
- DoS Protection: IP-based rate limiting on sensitive authentication endpoints powered by Bucket4j token-bucket algorithms.
- Zero-Downtime Feature Flags: Toggle identity subsystems (OAuth2, 2FA, rate limiting, SMTP verification) via environment variables without rebuilding code.
- 100% Test Coverage & Zero SonarQube Debt: Exhaustive unit and integration test suite verified by JaCoCo.
