base / commerce-payments
Onchain authorization and capture for trust-minimized commerce.
base / commerce-payments
juspay / hyperswitch
Open source, composable payments platform | PCI compliant | SaaS and Self-host options | Enables connectivity to multiple payment, payout, fraud, vault and tokenization providers | Uplifts authorization with intelligent routing and revenue recovery | Reduce payment processing costs with cost observability | Reduces payment ops with reconciliation
goauthentik / authentik
The authentication glue you need.
apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
dromara / Sa-Token
✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
googleapis / google-api-nodejs-client
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
varvet / pundit
Minimal authorization through OO design and pure Ruby classes
tinyauthapp / tinyauth
The tiniest OpenID Certified™ authorization and authentication server you have ever seen.
authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
stalniy / casl
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
fleetdm / fleet
Open device management
hexclave / hexclave
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
pig-mesh / pig
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
coorasse / cancancan
The authorization Gem for Ruby on Rails.
doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
permitio / opal
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
unkeyed / unkey
The Developer Platform for Modern APIs
cerbos / cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
apache / shiro
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
zoontek / react-native-permissions
An unified permissions API for React Native on iOS, Android and Windows.
panva / node-oidc-provider
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
oauthlib / oauthlib
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
zenstackhq / zenstack
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
apache / casbin-jcasbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Java
supabase / supabase-py
Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.
supabase / auth
A JWT based API for managing users and issuing JWT tokens
pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
ory / ladon
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.
onury / accesscontrol
Role and Attribute based Access Control for Node.js
greenpau / caddy-security
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
ovh / the-bastion
Authentication, authorization, traceability and auditability for SSH accesses.
jwt-dotnet / jwt
Jwt.Net, a JWT (JSON Web Token) implementation for .NET
ruby-oauth / oauth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
authorizerdev / authorizer
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
xuxueli / xxl-sso
A distributed single-sign-on framework.（单点登录框架XXL-SSO）
mainmatter / ember-simple-auth
A library for implementing authentication/authorization in Ember.js applications.
apache / casbin-pycasbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Python
angusdevgo / Seep-Reverse-Lab
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
ueberauth / ueberauth
An Elixir Authentication System for Plug-based Web Applications
FairwindsOps / rbac-manager
A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.
casosorg / casos
CasOS: a cloud operating system built on Kubernetes, Live Demo: https://demo.casos.net
aserto-dev / topaz
Cloud-native authorization for modern applications and APIs
apache / casbin-Casbin.NET
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
php-casbin / php-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .
yezz123 / authx
Ready-to-use and customizable Authentications and Oauth2 management for FastAPI ✨
apache / casbin-rs
An authorization library that supports access control models like ACL, RBAC, ABAC in Rust
apache / ranger
Apache Ranger - Centralized, fine-grained authorization and auditing across data and AI platforms
auth0 / auth0.js
Auth0 headless browser sdk
AthenZ / athenz
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.
FairwindsOps / rbac-lookup
Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster
dromara / dante-cloud
🐉 Dante Cloud 是支持阻塞式与响应式服务并行的微服务云原生基座和面向AI Agent开发的智能基座，基于领域驱动模型（DDD）设计，以高质量代码与低安全漏洞为核心，高度模块化、组件化，覆盖IoT设备认证、国家等保三级、接口国密数字信封加密等多层次安全体系，并提供多租户解决方案。独创“一套代码实现微服务和单体架构灵活切换”，赋能企业级智能应用构建。🔝🔝点个star 持续关注更新！
usnistgov / OSCAL
Open Security Controls Assessment Language (OSCAL)
sscarduzio / elasticsearch-readonlyrest-plugin
Free Elasticsearch security plugin and Kibana security plugin: super-easy Kibana multi-tenancy, Encryption, Authentication, Authorization, Auditing