Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| dthree/vantage Vantage is a Node.js library that turns a live Node application into an interactive, remotely accessible CLI by combining CLI, SSH-like con… | 23 | 3412 | maintenance |
| seeden/rbac A Node.js library implementing hierarchical role-based access control (RBAC) with roles, permissions, and grant inheritance. It supports in… | 63 | 1005 | active |
| hybridauth/hybridauth Hybridauth is an open-source PHP library for social sign-on that acts as an abstract API between your application and social identity provi… | 85 | 3383 | maintenance |
| 云帆培训考试系统 YunFan Training Exam System (open-source edition) is a self-hosted online examination and corporate training platform built with SpringBoot… | 34 | 998 | active |
| OAuthSwift OAuthSwift is a Swift framework implementing OAuth 1.0 and OAuth 2.0 client authentication for iOS and macOS apps. It provides URL-scheme-b… | 23 | 3330 | maintenance |
| oauth2-server-php A PHP library for implementing an OAuth 2.0 authorization/token server into PHP applications. It supports pluggable storage (e.g., PDO) and… | 25 | 3270 | maintenance |
| thelinmichael/spotify-web-api-node A Node.js and browser client wrapper for Spotify's Web API, providing helper methods for tracks, albums, artists, playlists, user profiles,… | 10 | 3152 | maintenance |
| apigy/selfstarter Selfstarter is an open-source Ruby on Rails skeleton for rolling your own crowdfunding site, originally built by Lockitron after their Kick… | 32 | 3151 | maintenance |
| nsidnev/fastapi-realworld-example-app A RealWorld (Conduit) medium.com clone backend implemented with FastAPI, SQLAlchemy, and PostgreSQL. It serves as a reference example appli… | 10 | 3103 | maintenance |
| laravel/breeze Laravel Breeze is a minimal authentication scaffolding starter kit for Laravel applications, built on Laravel Fortify. It provides login, r… | 92 | 3058 | maintenance |
| MarkerHub/vueblog A simple full-stack blog application built with Spring Boot (Java) backend and Vue frontend, demonstrating front-end/back-end separation. I… | 32 | 3020 | maintenance |
| joestump/python-oauth2 A Python library providing a fully tested, abstract interface for building OAuth 1.0 clients and servers. It is a fork of the original pyth… | 32 | 3007 | maintenance |
| SUSE/Portus Portus is an open-source authorization service and web UI for the Docker Registry v2 API, providing fine-grained push/pull permissions via … | 10 | 2981 | maintenance |
| yorkie/react-native-wechat A React Native bridging library that integrates the WeChat SDK for iOS and Android, exposing login (OAuth), sharing, favorites, and payment… | 10 | 2901 | maintenance |
| delba/Permission A Swift library providing a unified API for requesting and checking system permissions on iOS, covering camera, contacts, location, notific… | 32 | 2888 | maintenance |
| AWS Amplify The AWS Amplify CLI is a Node.js-based toolchain that simplifies provisioning and managing serverless backends (auth, storage, APIs, functi… | 93 | 2871 | maintenance |
| CharlesPikachu/DecryptLogin A Python library providing programmatic login APIs for popular websites (Weibo, Bilibili, Zhihu, GitHub, Taobao, etc.) built on the request… | 32 | 2853 | maintenance |
| logamee/lin-cms-vue Lin CMS is a front-end CMS development framework built with Vue 3 and Element Plus, part of a full front-end/back-end CMS solution with bac… | 55 | 2834 | maintenance |
| Twitter4J/Twitter4J Twitter4J (now X4J) is a 100% pure Java library for the Twitter/X API with zero external dependencies and built-in OAuth support. It provid… | 23 | 2810 | maintenance |
| mobolic/facebook-sdk A Python client library for Facebook's Graph API, supporting authentication and API interactions. It complements the official Facebook Java… | 23 | 2798 | maintenance |
| sunnisis/ixrail ixrail AgentPay is a VS Code extension that gives local AI agents a wallet, spending policy, authenticated broker, x402 payment flow, and s… | 64 | 848 | active |
| codedrinker/community An open-source forum and Q&A web application built with Spring Boot, MyBatis, MySQL/H2, and Bootstrap. It supports social login (GitHub, Gi… | 32 | 2772 | maintenance |
| laravel/ui A Composer package providing frontend scaffolding presets (Bootstrap, Vue, React) and simple authentication scaffolding for Laravel applica… | 85 | 2720 | maintenance |
| nixzhu/MonkeyKing A Swift library for iOS that lets apps share text, URLs, images, audio, video, and files to Chinese social networks (WeChat, QQ, Weibo, Ali… | 23 | 2711 | maintenance |
| chanxuehong/wechat A Go SDK for WeChat (Weixin) covering the Official Account platform (mp) and the Merchant/Pay platform (mch). It provides core package abst… | 72 | 2674 | maintenance |
| OptimalBits/node_acl A minimalistic access control list (ACL) library for Node.js applications, inspired by Zend_ACL. It manages users, roles, hierarchies, and … | 32 | 2600 | maintenance |
| Swizec/useAuth useAuth is a React hook library that adds authentication to React apps with minimal setup, supporting Auth0 and Netlify Identity via a prov… | 23 | 2567 | maintenance |
| White Jotter White-Jotter is a simple content management system (CMS) built with a Vue.js frontend and Spring Boot backend, demonstrating a full front-e… | 23 | 2536 | maintenance |
| prescottprue/react-redux-firebase A JavaScript library providing Redux bindings for Firebase, including React Hooks and Higher Order Components for connecting Firebase Realt… | 80 | 2533 | maintenance |
| sekey/sekey SeKey is a macOS SSH agent that lets users authenticate to SSH servers using keys stored in the Apple Secure Enclave, unlocked via Touch ID… | 23 | 2516 | maintenance |
| VSinder VSinder is a novelty dating app for programmers where users swipe on code snippets instead of photos. It consists of a VSCode extension, iO… | 32 | 2503 | maintenance |
| charmbracelet/charm Charm is a Go library and CLI tool that provided client access to Charm Cloud, a hosted service offering encrypted key-value storage, linke… | 10 | 2487 | maintenance |
| liyiorg/weixin-popular A Java SDK implementing the WeChat platform APIs across the Official Account, Open Platform, Merchant (Pay), and Service Provider platforms… | 23 | 2485 | maintenance |
| ory/ladon Ladon is a Go SDK for policy-based access control (authorization), inspired by AWS IAM policies. It provides fine-grained, condition-based … | 64 | 2458 | maintenance |
| ciaranj/node-oauth A simple OAuth client library for Node.js that lets applications act as OAuth consumers against OAuth 1.0 and OAuth 2.0 providers. It suppo… | 33 | 2431 | maintenance |
| mdanics/fluttergram Fluttergram is a fully functional Instagram clone built with Flutter and Firebase/Firestore, supporting photo feeds, likes, comments, user … | 32 | 2385 | maintenance |
| solokeys/solo1 Solo 1 is the open-source C firmware for the Solo security key, implementing FIDO2 (CTAP2) and U2F (CTAP) over USB and NFC on an STM32L432 … | 23 | 2384 | maintenance |
| DeemOpen/zkui zkui is a Java-based web dashboard for Apache Zookeeper that provides CRUD operations on znode properties through a browser UI. It includes… | 32 | 2373 | maintenance |
| lipp/login-with A stateless microservice that handles 'login-with' OAuth authentication for providers like Twitter, Google, GitHub, and Facebook. On succes… | 32 | 2344 | maintenance |
| Userbase Userbase is an open-source backend-as-a-service that adds user accounts and end-to-end encrypted data persistence to static web apps via a … | 57 | 2340 | maintenance |
| PHPGangsta/GoogleAuthenticator A PHP library implementing TOTP (RFC 6238) for Google Authenticator two-factor authentication. It generates secrets and codes, verifies cod… | 23 | 2332 | maintenance |
| Baiyuetribe/kamiFaka kamiFaka is a self-hosted card-key (kami) vending system for selling virtual goods like activation codes, coupons, and invite codes, built … | 23 | 2319 | maintenance |
| flutter-team-archive/pinball I/O Pinball is a pinball game built with Flutter and Firebase, created by Very Good Ventures in partnership with Google for Google I/O 2022… | 10 | 2313 | maintenance |
| NoamB/sorcery Sorcery is a Ruby authentication library for Rails 3 & 4 providing simple, modular authentication features. This original repository has mo… | 32 | 2300 | maintenance |
| shimh-develop/blog-vue-springboot A full-stack blog system built with Vue on the frontend and SpringBoot on the backend, featuring articles, categories, tags, archives, comm… | 32 | 2293 | maintenance |
| mylxsw/wizard Wizard is an open-source, self-hosted documentation management system for teams, supporting Markdown, Swagger (OpenAPI 3.0), and spreadshee… | 23 | 2265 | maintenance |
| ArekSredzki/electron-release-server A self-hosted Node.js web server for managing and distributing releases of Electron applications, fully compatible with the Squirrel auto-u… | 23 | 2214 | maintenance |
| Laravue Laravue is a full-stack admin dashboard starter combining Laravel as the backend with Vue.js and Element UI on the frontend. It provides an… | 23 | 2196 | maintenance |
| tokland/youtube-upload A Python command-line script that uploads videos to YouTube using the YouTube Data API v3 with OAuth 2.0 authentication. It works on any pl… | 32 | 2191 | maintenance |
| vercel/virtual-event-starter-kit An open-source Next.js starter kit for hosting virtual events and conferences, used to run Next.js Conf 2020 with ~40,000 attendees. It pro… | 10 | 2177 | maintenance |
| mjrussell/redux-auth-wrapper redux-auth-wrapper is a React Higher Order Component (HOC) library for handling authentication and authorization in React + Redux applicati… | 32 | 2171 | maintenance |
| ShareKit/ShareKit ShareKit is an Objective-C library that adds drop-in content sharing to iPhone and iPad apps, handling authentication, API calls, and share… | 32 | 2165 | maintenance |
| panique/huge HUGE is a simple user-authentication solution embedded in a minimal PHP framework skeleton, using PHP's official bcrypt password hashing. I… | 23 | 2158 | maintenance |
| VBA-Web VBA-Web is a VBA library that lets Excel, Access, and other Office applications call web services and REST APIs on Windows and Mac. It prov… | 23 | 2136 | maintenance |
| kiftd kiftd is an open-source, self-hosted private cloud drive (network file storage) server application for individuals, teams, and small organi… | 23 | 2125 | maintenance |
| janoodleFTW/timy-messenger Timy is an open-source group messaging mobile app built with Flutter, targeting Android and iOS with a Firebase backend. It supports groups… | 32 | 2105 | maintenance |
| dafthack/DomainPasswordSpray DomainPasswordSpray is a PowerShell tool that performs password spray attacks against domain user accounts, automatically generating a user… | 32 | 2096 | maintenance |
| thisbejim/Pyrebase Pyrebase is a simple Python wrapper around the Firebase API, supporting authentication, the Realtime Database, and Cloud Storage. It lets P… | 32 | 2071 | maintenance |
| jtblin/kube2iam kube2iam is a Kubernetes daemonset that intercepts traffic to the EC2 metadata API and returns per-pod AWS IAM credentials based on pod ann… | 79 | 2042 | maintenance |
| pfn/keepasshttp KeePassHttp is a plugin for KeePass 2.x that exposes password entries securely over HTTP using 256-bit AES/CBC encryption. It is designed t… | 32 | 2038 | maintenance |
| renrenio/renren-security renren-security is a lightweight, front-end/back-end separated Java rapid development platform and permission (RBAC) system built on Spring… | 23 | 2023 | maintenance |
| brack3t/django-braces A collection of reusable, generic mixins for Django's class-based views, replicating function-based view decorator behavior and solving com… | 31 | 2016 | maintenance |
| myrtille-rdp/myrtille Myrtille is an HTTP(S) gateway that lets users access remote desktops (RDP) and SSH servers directly from any HTML4/HTML5 web browser, with… | 23 | 1977 | maintenance |
| shzlw/poli Poli is a self-hosted business intelligence server for writing SQL queries and building interactive dashboards and reports. It connects to … | 23 | 1973 | maintenance |
| DevConnector DevConnector 2.0 is a social network application for developers built on the MERN stack (MongoDB, Express, React, Node.js). It serves as th… | 32 | 1965 | maintenance |
| florianheinemann/passwordless A Node.js/Express module that enables passwordless user authentication using one-time password (OTPW) tokens delivered via email or SMS. It… | 23 | 1938 | maintenance |
| openshift/osin OSIN is a Go library for building your own OAuth2 authentication server, implementing the RFC 6749 specification including authorization an… | 73 | 1935 | maintenance |
| qvest-digital/loginsrv A standalone minimalistic login microservice written in Go that authenticates users against pluggable backends (htpasswd, simple config, HT… | 23 | 1930 | maintenance |
| nuxt-community/auth-module A Nuxt 2 module providing zero-boilerplate authentication with configurable schemes (local, JWT, OAuth2, OpenIDConnect) and built-in provid… | 66 | 1924 | maintenance |
| freeCodeCamp/chapter Chapter is a self-hosted event management web application for nonprofits, designed as an alternative to Meetup and Facebook Events. It lets… | 10 | 1920 | maintenance |
| maple3142/GDIndex GDIndex is a Google Drive directory index application that runs on Cloudflare Workers, built with a Vue.js single-page frontend. It lets us… | 32 | 1871 | maintenance |
| Twython Twython is a pure Python library wrapping the Twitter API, supporting both the standard REST endpoints and the streaming API, with OAuth 1 … | 23 | 1857 | maintenance |
| winauth/winauth WinAuth is a portable, open-source Windows desktop application that acts as a software two-factor authenticator, supporting RFC 6238 TOTP a… | 10 | 1853 | maintenance |
| PearProject PearProject is a lightweight self-hosted online project and task collaboration system for remote teams, built with a Vue + Ant Design front… | 23 | 1849 | maintenance |
| jakubgarfield/Bonobo-Git-Server Bonobo Git Server is a free, open-source ASP.NET web application for hosting and managing Git repositories on Windows via IIS. It provides … | 32 | 1838 | maintenance |
| duytq94/flutter-chat-demo A demo chat application built with Flutter and Firebase, supporting Google login, one-to-one chat, and sending text, images, and stickers. … | 60 | 1828 | maintenance |
| Firefox Sync Server A self-hosted replacement for Mozilla's Firefox Sync server, letting users sync browser data across devices via their own infrastructure. T… | 93 | 1819 | maintenance |
| aslanyanhaik/Quick-Chat Quick Chat for iOS is a real-time chat application written in Swift 5 using Firebase as its backend. It supports sending and receiving text… | 23 | 1816 | maintenance |
| schn4ck/schnack Schnack is a tiny, self-hosted, open-source commenting system for static websites, serving as a Disqus-like drop-in widget. It offers OAuth… | 23 | 1811 | maintenance |
| diegohaz/rest A Yeoman generator that scaffolds RESTful API projects using Node.js, Express, and Mongoose. It generates customizable boilerplate with opt… | 23 | 1808 | maintenance |
| J7mbo/twitter-api-php A minimal PHP wrapper class for making Twitter API v1.1 requests with OAuth authentication. It supports GET, POST, and PUT calls via a simp… | 10 | 1804 | maintenance |
| twitter/twurl Twurl is a Ruby-based command-line tool that acts like curl but is tailored specifically for the Twitter API, handling OAuth authorization … | 23 | 1798 | maintenance |
| nodeSolidServer/node-solid-server NodeSolidServer is an implementation of the Solid protocol that runs a Solid personal data server (pod server) on top of the local file sys… | 75 | 1795 | maintenance |
| fuce1314/Springboot_v2 SpringBoot_v2 is a clean, well-commented Spring Boot admin scaffold (boilerplate) with a Vue/Bootstrap front-end, login/registration, permi… | 32 | 1778 | maintenance |
| gimite/google-drive-ruby A Ruby library for reading and writing files and spreadsheets in Google Drive and Google Docs. It wraps the Google Drive API with a simple … | 32 | 1777 | maintenance |
| SpringMVC-Mybatis-Shiro-redis An upgraded demo application showing Apache Shiro permission/role-based access control integrated with SpringMVC, Mybatis, Redis, and Freem… | 32 | 1775 | maintenance |
| Monkey for GitHub Monkey is an unofficial open-source GitHub client for iOS that shows rankings of coders and repositories, trending repos, and supports logi… | 23 | 1771 | maintenance |
| baijunyao/thinkphp-bjyadmin A ThinkPHP-based admin starter project that integrates common features and third-party SDKs (Auth/RBAC permissions, Alipay and WeChat payme… | 10 | 1755 | maintenance |
| uccmawei/FingerprintIdentify An expandable Android fingerprint verification library that unifies the Android 6.0 FingerprintManagerCompat API with Samsung and MeiZu ven… | 23 | 1740 | maintenance |
| ParkSangGwon/TedPermission TedPermission is an Android library that simplifies checking and requesting runtime permissions introduced in Android 6.0 Marshmallow. It o… | 23 | 1730 | maintenance |
| DotNetOpenAuth DotNetOpenAuth is a C# library implementing the OpenID and OAuth protocols for .NET applications. It lets developers build both Identity Pr… | 10 | 1714 | maintenance |
| vx3r/wg-gen-web A self-hosted web application that generates WireGuard client and server configuration files without managing the WireGuard service itself.… | 32 | 1705 | maintenance |
| RageFrame 3 RageFrame 2.0 is a rapid application development engine built on the Yii2 advanced framework, designed for secondary development with a mic… | 23 | 1705 | maintenance |
| aws-amplify/aws-sdk-ios The official AWS SDK for iOS, providing Swift and Objective-C clients for AWS services such as S3, DynamoDB, and Cognito in mobile apps. It… | 10 | 1703 | maintenance |
| mui/toolpad Toolpad is a set of full-stack React components and a low-code builder from the MUI team for building dashboards, admin panels, and interna… | 70 | 1702 | maintenance |
| lsgwr/spring-boot-online-exam A self-hosted online examination system built with Spring Boot (backend) and Vue + Ant Design (frontend), supporting single-choice, multipl… | 67 | 1691 | maintenance |
| zwczou/weixin-python A Python SDK for WeChat (Weixin) that bundles WeChat login, official account management, payments, and message handling. It integrates with… | 32 | 1679 | maintenance |
| ianstormtaylor/permit Permit is an unopinionated authentication library for Node.js APIs, supporting bearer token and username/password schemes. It works with an… | 32 | 1679 | maintenance |
| Google Authenticator The open-source implementations of Google Authenticator, generating one-time passcodes using the OATH HOTP (RFC 4226) and TOTP (RFC 6238) s… | 10 | 1674 | maintenance |
| mdp/rotp A Ruby library for generating and validating one-time passwords (HOTP and TOTP) according to RFC 4226 and RFC 6238. It is compatible with G… | 43 | 1658 | maintenance |