Vigil is a Spring Boot starter for application-owned JWT authentication. Read system boundaries before integrating it into an application.
- Authentication guide — configure JWTs, cookies, Spring Security, tenants, and reset tokens.
- Async and streaming security — preserve stateless authentication across MVC redispatches.
- Configuration reference — every
vigil.*property and its defaults. - Compatibility reference — certified platform and dependency versions.
- System boundaries — understand ownership and extension points before integrating.
- Java API contract — public services, SPIs, and compatibility expectations.
- Step-up proof decision — why approvals are opaque and server-consumed.
- Security model — security controls, threat assumptions, and secret-handling rules.
- Step-up authorization — one-time authorization proofs and personal PIN integration.
- Deployment and operations — production configuration, key rotation, and multi-instance requirements.
- Testing and verification — local gates and integration coverage.
- Release policy — compatibility, versioning, and publication controls.
The root README is the concise package landing page. This index is the canonical navigation surface for repository documentation.