Search code examples
spring-bootsingle-sign-onjwtspring-security-oauth2spring-security-saml2

Is Spring Boot SSO based on JWT?

I was wondering if Spring Boot SSO implementation is based on JWT or keeps the session open in the server memory?

Thanks in advance.

Solution

  • The answer would depend on which Spring implementation you are referring to

    I would discuss more on the latter i.e. OAuth and in that you have multiple options. You can use the in-memory token store to debug and test it out, but for production implementations, you can use different token stores. JWT and JDBC are pretty popular in my experience.