Authentication-Flows is a framework that focuses on providing all flows of authentication to Java applications built on Spring Security. It saves from the application developer all the bother in developing and maintaining the code such as create account, forgot password, etc. Like a Spring project, the real power of Authentication-Flows is found in how easily it can be extended to meet custom requirements

it is completely secured. It uses a key-store (KS) to encrypt the passwords. In addition, this KS is used to encrypt the data that is sent to the user upon registration, account-locking, etc. This KS is customizable by the customer

Features

• Comprehensive and secured support for all flows
• Full integration with Spring Security
• Using crypto package to secure and encrypt all data that is passed in the URLs, to avoid MITM attacks
• protection from account harvesting
• support REST (in addition to Spring MVC)
• and more...

Flows:

• User Registration (self enrollment)
• Activation of new accounts
• Forgot Password
• Change Password by user request
• Change Password - forces if password is expired
• Account lock-out after pre-configured failed login attempts

Quick Start

<dependencies>
   	<dependency>
   		<groupId>com.ohadr</groupId>
       	<artifactId>authentication-flows</artifactId>
       	<version>2.1-RELEASE</version>
   	</dependency>
</dependencies>