All repos — GH Trending Explorer

The easiest, most secure way to use WireGuard and 2FA.

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

sbondCo / Watcharr

Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.

pocketbase / pocketbase

Open Source realtime backend in 1 file

zitadel / zitadel

ZITADEL - Identity infrastructure, simplified for you.

pocket-id / pocket-id

The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.

openfga / openfga

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

tinyauthapp / tinyauth

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

authelia / authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Permify / permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

cerbos / cerbos

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

rest-sh / restish

Restish is a CLI for interacting with REST-ish HTTP APIs with some nice features built-in

zalando / go-keyring

Cross-platform keyring interface for Go

thecodearcher / limen

Modern, composable authentication for Go

cli / oauth

A library for performing OAuth Device flow and Web application flow in Go client apps.

caigee-cmd / cli2api

Self-hosted OpenAI-compatible API for Qoder CLI login,workbuddy, with SQLite multi-account routing

mmqz / cpa-multi-plugins

CPA (CLIProxyAPI) plugins for CodeBuddy (CN+Intl) / WorkBuddy / Trae (Intl+CN+SOLO CN) / Qoder (Intl+CN). Multi-platform OAuth providers with check-in, quota tracking, and credit lifecycle management.

ngthaihoc / CMP30HXmodtoGEN2

This project is inspired by CMP40HX-Unlock. If you find it useful, please consider giving a star to both the original author and this repository.

apache / casbin

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

oauth2-proxy / oauth2-proxy

Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.

self-hosted security devops

open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

go-resty / resty

Simple HTTP, REST, and SSE client library for Go

dexidp / dex

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

golang-jwt / jwt

Go implementation of JSON Web Tokens (JWT).

teamhanko / hanko

Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

fleetdm / fleet

Open device management

grpc-ecosystem / go-grpc-middleware

Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.

letsencrypt / boulder

An ACME-based certificate authority, written in Go.

unkeyed / unkey

The Developer Platform for Modern APIs

prest / prest

Instant REST and MCP APIs for PostgreSQL and MySQL, on existing or new databases. CRUD, custom SQL routes, auth and ACL without writing a backend. Low-code, ⚡ realtime, high-performance. Native MySQL support since v2.5.

smallstep / cli

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

istio / community

Istio governance material.

glauth / glauth

A lightweight LDAP server for development, home use, or CI

Agent-Field / agentfield

Build, run and scale AI agents like API and microservices

supabase / auth

A JWT based API for managing users and issuing JWT tokens

ory / ladon

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

square / certstrap

Tools to bootstrap CAs, certificate requests, and signed certificates.

kubernetes-sigs / aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

bank-vaults / bank-vaults

A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

greenpau / caddy-security

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

ghostunnel / ghostunnel

A simple TLS proxy with mutual authentication for securing non-TLS services.

authgear / authgear-server

Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

authorizerdev / authorizer

Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.

dghubble / gologin

Go login handlers for authentication providers (OAuth1, OAuth2)

zitadel / oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

daptin / daptin

Self-hosted application server for schema-driven APIs, identity, files, automation, integrations, realtime, metering, and protocols.

FairwindsOps / rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

centrifugal / centrifuge

Real-time messaging library for Go. The simplest way to add feature-rich and scalable WebSocket support to your application. The core of Centrifugo server.