AhmadHassan-BTed / ShopifyAutoAuth

Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.

youpi-pg / YouPI-PG

A self-hosted UPI & COD payment gateway with zero per-transaction platform fees, universal JavaScript checkout integration, dynamic QR payments, WhatsApp OTP authentication, and automated payment verification.

mikeroyal / Self-Hosting-Guide

A large curated guide covering self-hosting tools, hardware, and setup walkthroughs for running software on your own servers.

logto-io / logto

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

YuuLuo / a7c2-service-preload

Research on A7C II service authentication, Jiritsu path resolution, and preload-based code execution.

ExpertDetach / pwfauth-resp-python-client

Console tour of the official pwfauth Python package: license keys, the heartbeat kill switch, moving a license to a new PC, trials and user accounts.

casdoor / casdoor

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

ComposioHQ / composio

Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.

justcallmekoko / ESP32Marauder

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

sbondCo / Watcharr

Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.

pocketbase / pocketbase

Open Source realtime backend in 1 file

speedydivid / TokenForge

Context window optimization for AI coding agents. Sandboxes tool output (98% reduction), persists session memory via SQLite + FTS5, and enforces routing across 17 platforms through MCP + hooks. Works with Claude Code, Gemini CLI, VS Code Copilot, OpenCode, Codex CLI.

better-auth / better-auth

The most comprehensive authentication framework

zitadel / zitadel

ZITADEL - Identity infrastructure, simplified for you.

tinyauthapp / tinyauth

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

homarr-labs / homarr

A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.

cifertech / ESP32-DIV

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32

fail2ban / fail2ban

Daemon to ban hosts that cause multiple authentication errors

git-ecosystem / git-credential-manager

Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.

ixartz / SaaS-Boilerplate

🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing

trailbaseio / trailbase

An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, MCP and admin UI built on Rust, SQLite (PG) & Wasmtime.

IBM / mcp-context-forge

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.

yuezk / GlobalProtect-openconnect

A GlobalProtect VPN client for Linux and macOS, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc.

dromara / MaxKey

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

Anil-matcha / awesome-muse-connectors

A source-backed catalog of Meta Muse integrations and community connector skills, with capability, authentication, and permission notes.

christiaangoossens / hass-oidc-auth

OpenID Connect authentication provider for Home Assistant

issuerd / issuerd

Fast, Keycloak-compatible IAM with DPoP and CIBA

authelia / authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

Mr-xn / Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

stratumauth / app

📱 Two-Factor Authentication (2FA) client for Android + Wear OS

maxcountryman / flask-login

Flask user session management.

awslabs / agentcore-samples

Amazon Bedrock Agentcore accelerates AI agents into production with the scale, reliability, and security, critical to real-world deployment.

oauthlib / oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

voidauth / voidauth

Single Sign-On for Your Self-Hosted Universe

supabase / supabase-py

Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.

ovh / the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

scito / extract_otp_secrets

Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.

zalando / go-keyring

Cross-platform keyring interface for Go

apify / proxy-chain

TypeScript/Node.js implementation of a proxy server (think Squid) with support for SSL, HTTP/HTTPS, SOCKS5, authentication, and upstream proxy chaining.

mangoszero / server

Mangos ZERO is a server for World of Warcraft. The server serves full world content including authentication & scripts support. Compatible with World of Warcraft clients 1.12.1-1.12.3 - Report all issues at https://www.getmangos.eu/bug-tracker/mangos-zero/

AzureAD / microsoft-authentication-library-for-python

Microsoft Authentication Library (MSAL) for Python makes it easy to authenticate to Microsoft Entra ID. General docs are available here https://learn.microsoft.com/entra/msal/python/ Stable APIs are documented here https://msal-python.readthedocs.io. Questions can be asked on www.stackoverflow.com with tag "msal" + "python".

netheril96 / securefs

Filesystem in userspace (FUSE) with transparent authenticated encryption

passwordless-id / webauthn

Webauthn / passkeys helper library to make your life easier. Client side, server side and demo included.

TickLabVN / biopass

An alternative to Windows Hello/Howdy

Yubico / java-webauthn-server

Server-side Web Authentication library for Java https://www.w3.org/TR/webauthn/#rp-operations

thecodearcher / limen

Modern, composable authentication for Go

casdoor / awesome-auth

Awesome list for authentication and authorization

mu-zi-lee / magpie-our-free-model

Our Free Model 的 Magpie 适配插件：整合免费模型池、EAC 授权与多账号渠道，支持自动服务管理及免登录的 Cloudflare 临时远程控制台。｜Magpie integration for Our Free Model with free model pools, EAC authentication, multiple account providers, automatic service management, and an accountless Cloudflare temporary remote console.

slywalker2006 / dsh-passwords

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.

drJhonatan00 / Pulse

Pulse is a lightweight, responsive Progressive Web App designed to track, visualize, and analyze release downloads and repository metrics across GitHub. Built with vanilla JavaScript and styled with a sleek dark-mode design system, Pulse provides instant insights into your release assets without requiring authentication or backend infrastructure.

drJhonatan00 / FaceGuard

Enterprise-ready, privacy-first real-time face recognition authentication using client-side AI and a zero-dependency PHP flat-file storage engine.

WallabyDesigns / Larust

Larust is a Laravel-inspired web framework for Rust, bringing familiar routing, ORM, validation, authentication, templates, and CLI tooling to a compiled, type-safe Rust stack.

google / GoogleSignIn-iOS

Enables iOS and macOS apps to sign in with Google.

heartcombo / devise

Flexible authentication solution for Rails with Warden.

apache / casbin

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

wasp-lang / open-saas

A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.

oauth2-proxy / oauth2-proxy

Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.

go-resty / resty

Simple HTTP, REST, and SSE client library for Go

jwtk / jjwt

Java JWT: JSON Web Token for Java and Android