# cosec | Ahoo Wang | Knowledge Base | Instagit

RBAC-based And Policy-based Multi-Tenant Reactive Security Framework  | 基于 RBAC 和策略的多租户响应式安全框架

GitHub Stars: 40

Repository: https://github.com/ahoo-wang/cosec

---

## Articles

### [How CoSec Handles IP-Based Regional Access Management: A Technical Deep Dive](/ahoo-wang/cosec/how-does-cosec-handle-ip-based-regional-access-management)

Discover how CoSec manages IP-based regional access. Learn how it enriches requests with geo data and enforces location-based access controls using the ipRegion attribute.

- Tags: technical-deep-dive
- Published: 2026-02-23

### [CoSec Security Extensions: JWT Authentication and OpenTelemetry Observability Explained](/ahoo-wang/cosec/what-security-extensions-does-cosec-provide-jwt-opentelemetry)

Explore CoSec Security Extensions for JWT authentication and OpenTelemetry observability. Enhance JVM application security and tracing with these powerful modules.

- Tags: deep-dive
- Published: 2026-02-23

### [How to Integrate CoSec with Spring MVC: Step-by-Step Filter Configuration](/ahoo-wang/cosec/how-can-i-integrate-cosec-with-spring-mvc)

Easily integrate CoSec with Spring MVC. Follow our step-by-step guide to configure filters and security beans for seamless integration with the ahoo-wang/cosec repository.

- Tags: how-to-guide
- Published: 2026-02-23

### [How CoSec Supports Multi-Tenancy: Architecture and Implementation Guide](/ahoo-wang/cosec/how-does-cosec-support-multi-tenancy)

Discover how CoSec supports multi-tenancy through tenant identifiers policy filtering and context propagation Explore the architecture and implementation with this comprehensive guide

- Tags: architecture
- Published: 2026-02-23

### [How the CoSec ActionMatcher Path Matcher Works: A Technical Deep Dive](/ahoo-wang/cosec/how-does-path-matcher-work-in-cosec-actionmatchers)

Explore the technical details of the CoSec ActionMatcher path matcher. Learn how it handles static and dynamic patterns, evaluates requests with Spring PathPattern, and stores URI variables in SecurityContext.

- Tags: deep-dive
- Published: 2026-02-23

### [What Are ActionMatchers in CoSec? A Guide to Request Authorization](/ahoo-wang/cosec/what-are-actionmatchers-in-cosec)

Discover ActionMatchers in CoSec and how they authorize HTTP requests by matching path patterns to policy rules. Learn to secure your applications effectively.

- Tags: how-to-guide
- Published: 2026-02-23

### [Complete Guide to Built-in ConditionMatchers in CoSec](/ahoo-wang/cosec/what-built-in-conditionmatchers-are-available-in-cosec)

Discover CoSec's 16 built-in ConditionMatchers for path matching, RBAC, rate limiting, and more. Learn how to leverage these powerful tools for enhanced security and control.

- Tags: getting-started
- Published: 2026-02-23

### [ConditionMatchers in CoSec: How Policy-Based Access Control Works](/ahoo-wang/cosec/what-are-conditionmatchers-in-cosec)

Discover ConditionMatchers in CoSec to understand how policy-based access control works. Learn how components inspect requests and contexts to satisfy policies.

- Tags: deep-dive
- Published: 2026-02-23

### [JSON Schema for CoSec Policies: Structure, Validation, and Examples](/ahoo-wang/cosec/what-is-json-schema-for-cosec-policies)

Discover the CoSec policies JSON schema defining metadata, conditional logic, and action matchers. Validate your policies using a Draft-07 compliant validator for robust security.

- Tags: api-reference
- Published: 2026-02-23

### [How Are Policies Defined in CoSec? The JSON Schema Explained](/ahoo-wang/cosec/how-are-policies-defined-in-cosec)

Discover how CoSec defines authorization policies using JSON documents validated against the CoSec Policy Schema. Learn about essential metadata and statement configurations for robust policy management.

- Tags: how-to-guide
- Published: 2026-02-23

### [How CoSec Handles Reactive Authorization Flows in Spring WebFlux](/ahoo-wang/cosec/how-does-cosec-authorization-system-handle-reactive-flows)

Discover how CoSec handles reactive authorization flows in Spring WebFlux. Learn about its non-blocking Mono approach for asynchronous security decisions.

- Tags: how-to-guide
- Published: 2026-02-23

### [How CoSec Manages Access Tokens and Refresh Tokens: JWT Implementation Guide](/ahoo-wang/cosec/how-does-cosec-manage-access-tokens-and-refresh-tokens)

Discover how CoSec implements JWTs for secure access and refresh token management. Learn about stateless architecture, token generation, and validation.

- Tags: how-to-guide
- Published: 2026-02-23

### [How CoSec Integrates with Social Authentication Providers: OAuth/OIDC Implementation Guide](/ahoo-wang/cosec/can-cosec-integrate-with-social-authentication-providers)

Learn how CoSec integrates with social authentication providers like Google and GitHub using OAuth/OIDC. This guide details the JustAuth integration for a flexible login experience.

- Tags: how-to-guide
- Published: 2026-02-23

### [How CoSec Handles Authentication: JWT, OAuth2, and Custom Providers](/ahoo-wang/cosec/how-does-cosec-handle-authentication)

Discover how CoSec handles authentication using JWT OAuth2 and custom providers. Explore its type-safe interface for transforming credentials into a CoSecPrincipal.

- Tags: deep-dive
- Published: 2026-02-23

### [How CoSec Policy-Based Authorization Works: Architecture and Implementation Guide](/ahoo-wang/cosec/how-does-cosec-policy-based-authorization-work)

Discover how CoSec policy-based authorization works through its declarative JSON/YAML configuration model, evaluating policies, statements, and conditions for robust access control.

- Tags: architecture
- Published: 2026-02-23

### [Main Modules of the CoSec Framework: Complete Architecture Guide](/ahoo-wang/cosec/what-are-main-modules-of-cosec-framework)

Explore the main modules of the CoSec framework including cosec-api, cosec-core, and cosec-jwt. Discover its complete architecture for reactive, multi-tenant, policy-driven security in JVM applications.

- Tags: architecture
- Published: 2026-02-23

### [What Programming Language Is CoSec Written In? A Complete Kotlin Analysis](/ahoo-wang/cosec/what-programming-language-is-cosec-written-in)

Discover what programming language CoSec is written in. This complete analysis explores Kotlin's role in the ahoo-wang/cosec repository and its key features.

- Tags: analysis
- Published: 2026-02-23

### [What Is CoSec and What Problem Does It Solve? A Guide to the Reactive Security Framework](/ahoo-wang/cosec/what-is-cosec-and-problem-it-solves)

Explore CoSec, a reactive security framework solving multi-tenant conditional permission challenges. Learn how CoSec uses RBAC and policy-based access control without blocking application threads.

- Tags: getting-started
- Published: 2026-02-23