angusdevgo / Seep-Reverse-Lab

Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.

zitadel / zitadel

Open-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, and SCIM with multi-tenancy.

logto-io / logto

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

goauthentik / authentik

The authentication glue you need.

fleetdm / fleet

Open device management

juspay / hyperswitch

Open-source, self-hostable payments infrastructure in Rust that connects to many payment processors and offers routing, vault, and reconciliation modules.

openfga / openfga

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

dromara / Sa-Token

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

tinyauthapp / tinyauth

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

erduo1998-cell / agent-motion

Agent-driven Three.js talking-head video production. Source available for noncommercial use; commercial use requires written authorization.

issuerd / issuerd

Fast, Keycloak-compatible IAM with DPoP and CIBA

googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

doorkeeper-gem / doorkeeper

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

cerbos / cerbos

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

greenpau / caddy-security

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

panva / oauth4webapi

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

unkeyed / unkey

The Developer Platform for Modern APIs

supabase / supabase-py

Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.

supabase / auth

A JWT based API for managing users and issuing JWT tokens

northpolesec / santa

A binary and file access authorization system for macOS.

AnmuProtocol / landing-page

Public site for **Anmu** (安幕). This package is a single page. It explains the protocol to someone who has not opened a campaign record: a fixed-supply token, a zero-knowledge authorization, a public payment, and two launch products. English and Chinese.

soumarcelino / Samsung-D2-Hidden-OTP-QR-Gate-to-Download-Mode

Samsung D2 Reboot Device: the hidden OTP/QR authorization screen that gates Download/Odin Mode (reverse-engineered docs)

hexclave / hexclave

The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.

Permify / permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

panva / node-oidc-provider

OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

oauthlib / oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

casdoor / awesome-auth

Awesome list for authentication and authorization

stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

pig-mesh / pig

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

permitio / opal

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

apache / shiro

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management

ovh / the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

FairwindsOps / rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

casosorg / casos

CasOS: a cloud operating system built on Kubernetes, Live Demo: https://demo.casos.net

apache / casbin-Casbin.NET

An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)

yezz123 / authx

Ready-to-use and customizable Authentications and Oauth2 management for FastAPI ✨

auth0 / auth0.js

Auth0 headless browser sdk

FairwindsOps / rbac-lookup

Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster

usnistgov / OSCAL

Open Security Controls Assessment Language (OSCAL)

hyundaimotorgroup / hmg-role

hmg-Role is an authorization management system that provides centralized access control for enterprise applications.

PostgREST / postgrest

Serves a RESTful JSON API directly from an existing PostgreSQL database, with authorization delegated to database roles.

apache / casbin

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

coorasse / cancancan

The authorization Gem for Ruby on Rails.

zoontek / react-native-permissions

An unified permissions API for React Native on iOS, Android and Windows.

apache / casbin-node-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

apache / casbin-jcasbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

pac4j / pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

ory / ladon

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

onury / accesscontrol

Role and Attribute based Access Control for Node.js

ruby-oauth / oauth2

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

authorizerdev / authorizer

Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.

xuxueli / xxl-sso

A distributed single-sign-on framework.（单点登录框架XXL-SSO）

mainmatter / ember-simple-auth

A library for implementing authentication/authorization in Ember.js applications.

apache / casbin-pycasbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

ueberauth / ueberauth

An Elixir Authentication System for Plug-based Web Applications

aserto-dev / topaz

Cloud-native authorization for modern applications and APIs

php-casbin / php-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

apache / casbin-rs

An authorization library that supports access control models like ACL, RBAC, ABAC in Rust