ddd4j-javalin Auth

Overview

Covers Sa-Token, Shiro, OIDC/Keycloak, SubjectProvider, route protection, 401/403, and cleanup uniformly. Confirm the maintenance line with ddd4j-javalin-version-selection first, then read the current branch source.

When to Use

• Integrating Sa-Token, Apache Shiro, or OIDC/Keycloak authentication with ddd4j-javalin routes on 6.7.x, 7.1.x, or 7.2.x.
• Implementing a SubjectProvider and mapping the framework identity to AuthPrincipal with explicit role/permission rules.
• Wiring route protection with explicit 401/403 semantics instead of framework defaults.
• Binding the request Subject at request start and cleaning it up on success, exception, and async terminal states.
• Choosing exactly one primary authentication framework per service and registering it as a lifecycle participant.

When NOT to Use

Do not use this skill when: