JSON Web Token vs Keycloak vs Spring Security

Get Advice Icon

Need advice about which tool to choose?Ask the StackShare community!

JSON Web Token

656
364
+ 1
0
Keycloak

739
1.3K
+ 1
102
Spring Security

551
587
+ 1
6
Manage your open source components, licenses, and vulnerabilities
Learn More
Pros of JSON Web Token
Pros of Keycloak
Pros of Spring Security
    Be the first to leave a pro
    • 33
      It's a open source solution
    • 24
      Supports multiple identity provider
    • 17
      OpenID and SAML support
    • 12
      Easy customisation
    • 10
      JSON web token
    • 6
      Maintained by devs at Redhat
    • 3
      Easy to use
    • 3
      Java integration

    Sign up to add or upvote prosMake informed product decisions

    Cons of JSON Web Token
    Cons of Keycloak
    Cons of Spring Security
      Be the first to leave a con
      • 7
        Okta
      • 6
        Poor client side documentation
      • 5
        Lack of Code examples for client side
        Be the first to leave a con

        Sign up to add or upvote consMake informed product decisions

        161
        243
        158
        7.9K
        193
        28.9K
        - No public GitHub repository available -

        What is JSON Web Token?

        JSON Web Token is an open standard that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed.

        What is Keycloak?

        It is an Open Source Identity and Access Management For Modern Applications and Services. It adds authentication to applications and secure services with minimum fuss. No need to deal with storing users or authenticating users. It's all available out of the box.

        What is Spring Security?

        It is a framework that focuses on providing both authentication and authorization to Java applications. The real power of Spring Security is found in how easily it can be extended to meet custom requirements.

        Need advice about which tool to choose?Ask the StackShare community!

        What companies use JSON Web Token?
        What companies use Keycloak?
        What companies use Spring Security?

        Sign up to get full access to all the companiesMake informed product decisions

        What tools integrate with JSON Web Token?
        What tools integrate with Keycloak?
        What tools integrate with Spring Security?

        Sign up to get full access to all the tool integrationsMake informed product decisions

        What are some alternatives to JSON Web Token, Keycloak, and Spring Security?
        OAuth2
        It is an authorization framework that enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf.
        Passport
        It is authentication middleware for Node.js. Extremely flexible and modular, It can be unobtrusively dropped in to any Express-based web application. A comprehensive set of strategies support authentication using a username and password, Facebook, Twitter, and more.
        Postman
        It is the only complete API development environment, used by nearly five million developers and more than 100,000 companies worldwide.
        Postman
        It is the only complete API development environment, used by nearly five million developers and more than 100,000 companies worldwide.
        Stack Overflow
        Stack Overflow is a question and answer site for professional and enthusiast programmers. It's built and run by you as part of the Stack Exchange network of Q&A sites. With your help, we're working together to build a library of detailed answers to every question about programming.
        See all alternatives