Awesome Open Source
Awesome Open Source

The spring-security-pac4j project is a bridge from pac4j to Spring Security (reactive) to push the pac4j security context into the Spring Security security (reactive) context.
It's based on the pac4j security engine. It's available under the Apache 2 license.

spring-webflux-pac4j JDK pac4j Spring security Operating philosophy Usage of Lombok Status
version >= 10 17 v6 v6 Bridge only Yes In development
version >= 9 17 v5 v6 Bridge only No Production ready
version >= 8 11 v5 v5 Standalone security library No Production ready
version >= 6 11 v5 v5 Standalone security library No Production ready
version >= 5 8 v4 v5 Standalone security library No Production ready

Since version 8 (working as a bridge only), it must be used with a pac4j security library:

  • the jakartaee-pac4j (Spring 6) or javaee-pac4j (Spring 5) implementation (which has similar filters as spring-security-pac4j version <= 7.x)
  • if you use Spring MVC, the spring-webmvc-pac4j implementation version >= 7 (Spring 6) or version < 7 (Spring 5)
  • if you use Spring Webflux, the spring-webflux-pac4j implementation version >= 2 (Spring 6) or version < 2 (Spring 5)

While it is always better to directly use a pac4j security library alone, this bridge can be used to keep legacy software and avoid full migration.


1) Add the required dependencies

2) Install, configure and use the pac4j security library

You must refer to the documentation of the pac4j security library you use: jakartaee-pac4j or spring-webmvc-pac4j or spring-webflux-pac4j.


Spring security boot demo with pac4j JEE filters: spring-security-pac4j + jakartaee-pac4j: spring-security-jee-pac4j-boot-demo.

Spring Security boot demo with pac4j SpringMVC: spring-security-pac4j + spring-webmvc-pac4j: spring-security-webmvc-pac4j-boot-demo.

Spring Security reactive boot demo with pac4j Spring Webflux: spring-security-pac4j + spring-webflux-pac4j: spring-security-webflux-pac4j-boot-demo.


The latest released version is the Maven Central, available in the Maven central repository. The next version is under development.

See the release notes. Learn more by browsing the pac4j documentation and the spring-security-pac4j Javadoc.

See the migration guide as well.

Need help?

You can use the mailing lists or the commercial support.

Alternatives To Spring Security Pac4j
Select To Compare

Alternative Project Comparisons
Related Awesome Lists
Top Programming Languages

Get A Weekly Email With Trending Projects For These Topics
No Spam. Unsubscribe easily at any time.
Java (411,965
Security (32,261
Mongodb (32,028
Spring (28,747
Authentication (27,096
Sql (22,956
Twitter (21,518
Spring Boot (17,015
Oauth (14,309
Login (14,011
Facebook (13,787
Jwt (10,345
Authorization (5,948
Ldap (3,625
Openid (1,949
Spring Security (1,942
Logout (1,711
Cas (1,598
Saml (1,231
Openid Connect (724
Social Login (416