Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| django-tastypie/django-tastypie Tastypie is a webservice API framework for Django that provides a convenient, highly customizable abstraction for creating REST-style inter… | 64 | 3947 | maintenance |
| tesseral-labs/tesseral Tesseral is open-source, multi-tenant authentication infrastructure designed for B2B SaaS applications, runnable as a cloud service or self… | 40 | 1138 | active |
| marmelab/shadcn-admin-kit A component kit for building admin applications with shadcn/ui, providing CRUD pages, data tables, forms, authentication, and dashboards. I… | 77 | 1133 | active |
| WordPress REST API The WordPress REST API, originally developed as the WP-API plugin and merged into WordPress core since version 4.7, exposes WordPress site … | 10 | 3918 | maintenance |
| genotrance/px Px is an HTTP/HTTPS proxy server that automatically handles NTLM and Kerberos proxy authentication, typically in corporate environments, us… | 84 | 1131 | active |
| painn-n/onchainsms A web dApp for sending public wallet-to-wallet notes on Robinhood Chain and Base, where each message is an EVM transaction embedding the re… | 55 | 1131 | active |
| steve-community/steve SteVe is an open-source OCPP server implementation in Java for managing EV charging stations, charge points, user data, and RFID card authe… | 91 | 1128 | active |
| bolkedebruin/rdpgw An open-source implementation of the Microsoft Remote Desktop Gateway protocol (MS-TSGU) written in Go, allowing official Microsoft RDP cli… | 76 | 1127 | active |
| cybercog/laravel-ban Laravel Ban is a PHP package that adds banning and blocking capabilities to any Laravel Eloquent model via traits and a BanService. It supp… | 59 | 1127 | stable |
| DoctorMcKay/node-steam-user SteamUser is a Node.js library that lets you communicate with Steam servers using the Steam client protocol, acting like a proper Steam cli… | 55 | 1124 | active |
| Miaomiaowu Suite Miaomiaowu is a lightweight, self-hosted Clash subscription management system for managing proxy nodes, generating subscriptions, and aggre… | 81 | 1122 | active |
| Sign-In with Ethereum (SIWE) A TypeScript library implementing Sign-In with Ethereum (EIP-4361), a standard message format for Ethereum accounts to authenticate with of… | 30 | 1122 | active |
| Biff Biff is an opinionated full-stack web framework for Clojure aimed at solo developers. It curates ecosystem libraries (XTDB, htmx, Malli) in… | 86 | 1119 | active |
| christiaangoossens/hass-oidc-auth A Home Assistant custom integration that adds OpenID Connect (OIDC) single sign-on authentication. It acts as a standards-compliant relying… | 97 | 1117 | active |
| crewjam/saml A Go library providing a partial implementation of the SAML standard for identity federation. It supports building both Service Providers (… | 57 | 1117 | stable |
| mebtte/cicada Cicada is a self-hosted, multi-user music streaming service distributed as a single binary with an embedded PWA frontend and bundled ffmpeg… | 95 | 1114 | active |
| joschan21/breadit Breadit is a fullstack Reddit clone built with Next.js 13 App Router, TypeScript, and Tailwind CSS. It demonstrates modern web patterns lik… | 30 | 1110 | active |
| RamonSilva20/mapos Map-OS is an open-source web application for managing service orders (ordens de serviço), built in PHP on the CodeIgniter framework. It pro… | 97 | 1109 | active |
| jaygajera17/E-commerce-project-springBoot A Java e-commerce web application built with Spring Boot, JSP, Spring Security, and Hibernate, structured as a layered MVC project with MyS… | 65 | 1109 | active |
| benjaminmayo/merchantkit MerchantKit is a Swift framework for iOS that simplifies managing In-App Purchases, including one-time purchases, consumables, and auto-ren… | 32 | 1109 | active |
| Shopify/shopify-api-ruby ShopifyAPI is a lightweight Ruby gem for accessing the Shopify Admin REST and GraphQL APIs, including OAuth token creation and webhook regi… | 66 | 1108 | active |
| wstrange/GoogleAuth GoogleAuth is a Java server-side library implementing the Time-based One-Time Password (TOTP) algorithm from RFC 6238, compatible with Goog… | 63 | 1107 | stable |
| dafthack/MSOLSpray MSOLSpray is a PowerShell-based password spraying tool for Microsoft Online (Azure AD/O365) accounts. It leverages Azure AD OAuth2 error co… | 32 | 1106 | stable |
| zhangyd-c/OneBlog OneBlog is a self-hosted Java blog system built with Spring Boot and Bootstrap, featuring a full admin backend and responsive public-facing… | 24 | 1105 | active |
| robbins23/daisyui-admin-dashboard-template DashWind is a free, MIT-licensed admin dashboard template built with React, Daisy UI, and Tailwind CSS. It ships with Redux Toolkit state m… | 23 | 1105 | active |
| caoqianming/django-vue-admin A full-stack admin platform built on RBAC permission control, with a Django + Django REST Framework backend and a Vue 2 + Element UI fronte… | 63 | 1104 | active |
| DSpace DSpace is an open-source digital asset management system that powers institutional repositories, providing durable access to digital resour… | 98 | 1102 | stable |
| burakorkmez/mern-chat-app A full-stack real-time chat application built with the MERN stack (MongoDB, Express, React, Node.js) and Socket.io. It serves as a companio… | 26 | 1102 | active |
| burakorkmez/fullstack-chat-app A full-stack real-time chat application built with the MERN stack, Socket.io, TailwindCSS, and Daisy UI. It includes JWT authentication, on… | 22 | 1101 | active |
| adtac/commento Commento is a lightweight, privacy-focused comments platform written in Go that you embed in your website to let readers comment. It suppor… | 32 | 3778 | maintenance |
| mpociot/teamwork A Laravel package that adds user-to-team associations with an invitation system via Eloquent models and migrations. It provides Team models… | 83 | 1098 | stable |
| phachon/mm-wiki MM-Wiki is a lightweight, self-hosted enterprise knowledge sharing and team collaboration wiki written in Go. It lets teams quickly build a… | 53 | 3776 | maintenance |
| tomsquest/docker-radicale A hardened, production-grade Docker image for Radicale, the CalDAV/CardDAV calendar and contacts server. It adds security hardening, config… | 97 | 1097 | active |
| OpenIDC/mod_auth_openidc An OpenID Certified™ Apache HTTPd module implementing OpenID Connect 1.x and FAPI 2.x Relying Party functionality. It lets an Apache web se… | 95 | 1096 | stable |
| joshpatten/PVE-VDIClient A Python-based VDI client that connects directly to Proxmox VE clusters, letting users launch SPICE console sessions to VMs they have permi… | 64 | 1096 | active |
| brufdev/many-notes Many Notes is a self-hosted Markdown note-taking web application built in PHP, designed for simplicity. It stores notes both in a database … | 86 | 1094 | active |
| 170-carry/codex-tools A desktop GUI and CLI/TUI tool for managing multiple OpenAI Codex accounts, switching local Codex login state, and viewing usage quotas. It… | 77 | 1094 | active |
| devaslanphp/project-management Helper is an open-source, self-hosted project management and helpdesk application built on Laravel, Filament, and Livewire. It supports pro… | 63 | 1091 | active |
| Laravel Enso Laravel Enso is a Laravel + Vue single-page application boilerplate and framework with Bulma theming, providing admin panel functionality o… | 74 | 1090 | active |
| phoenix-zhou/goshop A B2C e-commerce platform built with Go and the Gin framework using an MVC architecture. It provides an admin backend (product, order, user… | 35 | 1084 | active |
| apache/ranger Apache Ranger is a framework to enable, monitor, and manage comprehensive data security across the Hadoop platform and beyond. It provides … | 76 | 1081 | stable |
| Qihoo360/wayne Wayne is a web-based Kubernetes multi-cluster management and publishing platform developed by Qihoo360. It provides visualized Kubernetes o… | 23 | 3697 | maintenance |
| jazzband/django-defender A Django reusable app that blocks brute-force login attempts by rate limiting on username and IP address, using Redis as a fast cache backe… | 48 | 1077 | active |
| OPSLI 快速开发平台 OPSLI is a low-code rapid development platform for building Java admin/back-office systems, built on Spring Boot with a Vue + Element UI fr… | 66 | 1076 | active |
| family/connectkit ConnectKit is a React component library that makes connecting a crypto wallet to a dApp simple, with support for popular connectors like Me… | 76 | 1074 | active |
| spotify-web-api-java/spotify-web-api-java A Java wrapper/client library for Spotify's Web API, published on Maven Central. It provides typed request and response objects covering Sp… | 92 | 1072 | active |
| zmartzone/lua-resty-openidc A Lua library for NGINX/OpenResty implementing an OpenID Connect Relying Party and OAuth 2.0 Resource Server. It authenticates users via Op… | 90 | 1072 | stable |
| mCodex/react-native-sensitive-info A React Native library for hardware-backed secure storage of sensitive data, using iOS Keychain and Android Keystore with AES-GCM encryptio… | 93 | 1070 | active |
| Walter-Sparrow/lunar-tear Lunar Tear is a private server implementation for a discontinued mobile game, written in Go. It bundles gRPC, CDN, and auth services with a… | 65 | 1070 | active |
| duo-labs/py_webauthn A Python 3 library implementing the server-side of the WebAuthn API for verifying FIDO2 credential registration and authentication. It supp… | 94 | 1069 | active |
| broamski/aws-mfa aws-mfa is a Python CLI tool that automates obtaining temporary AWS credentials from the Security Token Service (STS) using MFA and writes … | 32 | 1065 | stable |
| kui123456789/free-account-tool A Chrome Manifest V3 browser extension that automates email-based account registration with 2FA, Passkey, and Access Token/Session manageme… | 72 | 1064 | active |
| dyc3/steamguard-cli A Rust command-line utility for setting up and using Steam Mobile Authenticator (2FA). It generates Steam Guard codes and handles trade, ma… | 89 | 1063 | active |
| aws-actions/amazon-ecr-login A GitHub Actions action that authenticates the local Docker client to Amazon ECR Private or Public registries. It exposes registry and cred… | 97 | 1062 | active |
| auth0/auth0.js Auth0's client-side JavaScript SDK for browser-based authentication and authorization against the Auth0 platform. It provides WebAuth, Auth… | 91 | 1062 | active |
| 0xZDH/o365spray o365spray is a Python CLI tool for username enumeration and password spraying against Microsoft Office 365 domains. It implements multiple … | 32 | 1060 | active |
| pH7Software/pH7-Social-Dating-CMS pH7Builder (formerly pH7CMS) is a self-hosted, open-source PHP 8.2+ CMS for building white-label dating sites, matchmaking communities, and… | 97 | 1059 | active |
| AWS IoT Device SDK for Embedded C AWS's official C SDK for connecting embedded devices to AWS IoT, composed of modular libraries like coreMQTT, coreHTTP, coreJSON, and coreP… | 54 | 1058 | active |
| Blessing Skin Blessing Skin is a self-hosted PHP web application for uploading, managing, and sharing custom Minecraft skins and capes, restoring them fo… | 66 | 1057 | active |
| hpyhacking/peatio Peatio is an open-source cryptocurrency exchange platform built with Ruby on Rails, featuring a high-performance matching engine, WebSocket… | 60 | 3604 | maintenance |
| authomatic/authomatic Authomatic is a framework-agnostic Python library that simplifies user authentication and authorization via third-party providers like Face… | 54 | 1054 | active |
| orvice/ss-panel ss-panel is a self-hosted web panel for managing Shadowsocks proxy servers, built in PHP with a Vue.js frontend. It provides user registrat… | 23 | 3599 | maintenance |
| 61418/aws-sso-util aws-sso-util is a Python command-line tool and library that smooths out rough edges of AWS IAM Identity Center (formerly AWS SSO). It provi… | 36 | 1053 | active |
| jeremykenedy/laravel-roles A Laravel package for managing roles, permissions, and user levels with Eloquent integration, including Blade extensions, middleware, and a… | 90 | 1051 | stable |
| Backdrop CMS Backdrop CMS is a free, open-source, PHP-based content management system forked from Drupal 7, designed for non-technical users to build an… | 97 | 1049 | active |
| Arcade Arcade MCP is an open-source Python framework for building Model Context Protocol (MCP) servers and the tools that run inside them, with a … | 70 | 1049 | active |
| arsduo/koala Koala is a lightweight Ruby library for the Facebook Graph, Marketing, and Atlas APIs, including realtime updates, test users, batch reques… | 76 | 3572 | maintenance |
| Jacobtims/filament-breezy A Filament plugin for Laravel that adds enhanced security features to Filament admin panels, including a customizable profile page, two-fac… | 96 | 1047 | active |
| Ttungx/codex_auto_register A Python CLI tool that automates ChatGPT/Codex account registration using the DuckMail temporary email service, performs the Codex OAuth fl… | 58 | 1046 | active |
| clarkeash/doorman Doorman is a Laravel package that limits access to Laravel applications using invite codes. Invite codes can be tied to specific emails, ha… | 43 | 1045 | active |
| apify/proxy-chain A programmable HTTP/HTTPS proxy server library for Node.js, similar to Squid, with support for SSL/TLS, SOCKS4/5, authentication, upstream … | 93 | 1044 | active |
| 4jean/lav_sms LAVSMS is a self-hosted school management web application built on Laravel 8 for schools and colleges. It provides role-based accounts for … | 32 | 1043 | active |
| tngoman/Store-POS Store POS is a modern Electron-based desktop point-of-sale application built with React, TypeScript, and an Express + SQLite backend. It su… | 76 | 1041 | active |
| alyssaxuu/mapus Mapus is an open-source web application for exploring and annotating maps with real-time collaboration, built on Leaflet and Firebase. User… | 32 | 3539 | maintenance |
| openkoda/openkoda Openkoda is an open-source business application platform built on Java 17 and Spring Boot that accelerates development of enterprise system… | 30 | 1038 | active |
| Nathan-code-development/AIApplication A cross-platform mobile chat application built with .NET MAUI in C# that lets users converse with multiple AI models including DeepSeek, Do… | 57 | 1037 | active |
| jaredhanson/oauth2orize OAuth2orize is a Node.js toolkit for building OAuth 2.0 authorization servers. It provides Express-compatible middleware plus a pluggable s… | 32 | 3531 | maintenance |
| google/google-api-javascript-client Google's official JavaScript client library (gapi) for accessing Google APIs from browser applications. It provides authentication, batchin… | 10 | 3531 | maintenance |
| mangoszero/server Mangos ZERO is an open-source C++ game server emulator for World of Warcraft Vanilla (client versions 1.12.1-1.12.3), providing an authenti… | 93 | 1035 | active |
| aaugustin/django-sesame django-sesame is a Python library that adds 'Magic Links' authentication to Django projects by generating URLs containing signed authentica… | 76 | 1032 | active |
| modelcontextprotocol/use-mcp use-mcp is a lightweight React hook library for connecting browser-based AI applications to Model Context Protocol (MCP) servers. It handle… | 10 | 1030 | active |
| Helios Launcher Helios Launcher is an open-source desktop application, built with Electron and Node.js, for launching modded Minecraft servers. It automati… | 55 | 1029 | active |
| cam-inc/viron Viron is a web-based, OpenAPI Specification (OAS)-driven administration console that auto-generates a fine-tuned GUI from your API's OAS do… | 58 | 1025 | active |
| colinin/abp-next-admin An admin management frontend based on the vue-vben-admin template, built for the ABP vNext framework, with a companion C# backend including… | 94 | 1024 | active |
| Browserpass Browserpass is a browser extension for zx2c4's pass (the UNIX password store) that auto-fills or copies credentials for the current domain,… | 83 | 1021 | active |
| maxcountryman/axum-login A Rust crate providing user identification, authentication, and authorization as tower middleware for the Axum web framework. It supports a… | 59 | 1021 | active |
| everyauth everyauth is a Node.js authentication and authorization library supporting password login and many OAuth/OpenID providers (Facebook, Twitte… | 32 | 3467 | maintenance |
| polkadot-js/extension A browser extension for Chrome and Firefox that manages Polkadot and Substrate network accounts and signs transactions (extrinsics) with th… | 94 | 1020 | active |
| jamsocket/y-sweet Y-Sweet is an open-source realtime document store and sync backend built on the Yjs CRDT library, written in Rust. It persists documents to… | 52 | 1020 | active |
| rmqtt/rmqtt RMQTT is a scalable, distributed MQTT message broker written entirely in safe Rust, supporting MQTT v3.1/v3.1.1/v5.0 with millions of concu… | 96 | 1017 | active |
| Prajwal100/Complete-Ecommerce-in-laravel-10 A full-featured e-commerce website built with Laravel 10, including a storefront with cart, wishlist, and order tracking, plus an admin das… | 57 | 1017 | active |
| auth0/auth0-spa-js Auth0's official JavaScript SDK for adding authentication to Single Page Applications using the Authorization Code Grant flow with PKCE. It… | 98 | 1015 | active |
| Zibbp/ganymede Ganymede is a self-hosted Twitch VOD and live stream archiving platform written in Go. Each archive includes real-time chat playback and a … | 97 | 1014 | active |
| gophercloud/gophercloud Gophercloud is a Go SDK for the OpenStack cloud platform, providing clients for OpenStack services such as Keystone identity, Compute, and … | 94 | 1014 | stable |
| openid/AppAuth-JS AppAuth-JS is a TypeScript client SDK for OAuth 2.0 and OpenID Connect, designed for public clients following RFC 8252 best practices. It s… | 73 | 1014 | active |
| AthenZ/athenz Athenz is an open source platform for X.509 certificate-based service authentication and fine-grained role-based access control (RBAC) in d… | 100 | 1013 | active |
| ubuntu/lightdm LightDM is a lightweight, cross-desktop display manager daemon that runs display servers (X, Wayland, Mir), presents greeters for user logi… | 96 | 1012 | stable |
| singingwolfboy/flask-dance Flask-Dance is a Python library that simplifies OAuth consumer authentication in Flask applications, built on requests and oauthlib. It pro… | 23 | 1012 | active |
| ElegantOTA ElegantOTA is an Arduino library that adds over-the-air (OTA) firmware and filesystem update capabilities to wireless microcontrollers like… | 83 | 1010 | active |
| Sustainsys/Saml2 Sustainsys.Saml2 is a C# library that adds SAML2P support to ASP.NET applications, letting a web site act as a SAML2 Service Provider for s… | 57 | 1010 | active |