Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| xujeff/tianti Tianti is a free, lightweight Java-based CMS providing a complete backend admin and responsive frontend solution built on Spring MVC, Sprin… | 23 | 1101 | maintenance |
| OneDrive/onedrive-sdk-python The official OneDrive SDK for Python, providing a client for authenticating with and calling the OneDrive REST API. It supports standard an… | 10 | 1089 | maintenance |
| voltrue2/in-app-purchase A Node.js module for validating in-app purchase receipts and managing subscriptions across Apple App Store, Google Play, Amazon, Roku, and … | 57 | 1085 | maintenance |
| criso/fbgraph fbgraph is a Node.js library providing simple access to the Facebook Graph API. It wraps API calls to return consistent JSON, handles OAuth… | 32 | 1083 | maintenance |
| welkinwong/nodercms NoderCMS is a lightweight open-source content management system built on Node.js and MongoDB. It offers flexible content models and a compl… | 10 | 1082 | maintenance |
| Apache Guacamole Apache Guacamole is a clientless remote desktop gateway that lets users access RDP, VNC, and SSH sessions through a standard web browser us… | 10 | 1078 | maintenance |
| FriendsOfSymfony/FOSOAuthServerBundle FOSOAuthServerBundle is a Symfony bundle that provides server-side OAuth2 capabilities, letting Symfony applications act as OAuth2 authoriz… | 23 | 1076 | maintenance |
| daviddesberg/PHPoAuthLib PHPoAuthLib is a PHP client library providing OAuth 1.x and OAuth 2.0 support with prebuilt service implementations for dozens of providers… | 23 | 1074 | maintenance |
| lingthio/Flask-User Flask-User is a Flask extension providing customizable user authentication and account management, including registration, email confirmati… | 23 | 1074 | maintenance |
| aws-amplify/aws-sdk-android The AWS SDK for Android is a collection of low-level Java libraries for directly interacting with AWS services (S3, DynamoDB, Cognito, Lamb… | 10 | 1073 | maintenance |
| microsoftgraph/microsoft-graph-toolkit A collection of framework-agnostic web components and authentication providers for accessing Microsoft Graph, including UI components like … | 10 | 1069 | maintenance |
| voilet/cmdb A Django-based CMDB (Configuration Management Database) web application with integrated SaltStack UI for IT asset management. It provides a… | 32 | 1063 | maintenance |
| Xchat1/cursor2api-go A Go service that converts Cursor's web interface into an OpenAI chat/completions-compatible API, exposing models like gemini-3-flash with … | 48 | 1056 | maintenance |
| tibbar213/team-manage A self-hosted FastAPI application for managing ChatGPT Team accounts, letting admins bulk-import Team accounts and generate redemption code… | 49 | 1054 | maintenance |
| weixin-sdk A Java SDK wrapping the WeChat public platform (subscription/service accounts, WeChat Work, mini programs), WeChat Open Platform, and WeCha… | 32 | 1054 | maintenance |
| DuendeArchive/IdentityModel IdentityModel is a .NET Standard helper library for claims-based identity, OAuth 2.0, and OpenID Connect. It provides request/response obje… | 10 | 1053 | maintenance |
| unosquare/passcore PassCore is a one-page web application built with ASP.NET Core and React that lets users change their own Active Directory or LDAP password… | 10 | 1049 | maintenance |
| timeoff-management/timeoff-management-application TimeOff.Management is a self-hostable web application for managing employee absences, leave requests, and PTO for small and medium business… | 23 | 1044 | maintenance |
| panoratech/Panora Panora is an open-source unified API / integration engine that lets applications connect to multiple CRM and third-party SaaS platforms thr… | 10 | 1035 | maintenance |
| devsnd/cherrymusic CherryMusic is a self-hosted music streaming server built on CherryPy and jPlayer that lets users stream their personal music collection to… | 32 | 1033 | maintenance |
| yeqifu/warehouse A Java Spring Boot web application for warehouse/inventory management with business modules for customers, suppliers, goods, purchases, sal… | 58 | 1028 | maintenance |
| ZeroWdd/studentmanager A student management system web application built with Spring Boot 2.x and MyBatis, covering students, teachers, and administrators. It man… | 35 | 1025 | maintenance |
| r-park/todo-react-redux A simple Todo web application example built with Create React App, React Redux, and Firebase, featuring OAuth authentication and undelete c… | 32 | 1023 | maintenance |
| PHPixie/Project PHPixie is a lightweight fullstack MVC framework for PHP designed for speed and simplicity, with a strict architecture that avoids antipatt… | 23 | 1018 | maintenance |
| hasan-py/Hayroo Hayroo is a full-featured MERN stack e-commerce platform built with React, Node.js, Express, MongoDB, JWT authentication, and Tailwind CSS.… | 69 | 1013 | maintenance |
| revertinc/revert Revert is an open-source unified API framework that makes it easy to build product integrations with third-party APIs like CRMs (HubSpot, S… | 26 | 1013 | maintenance |
| Leslin/thinkphp5-restfulapi A lightweight RESTful API starter built on ThinkPHP 5.1, providing token-based authentication (OAuth2-style access/refresh tokens), API ver… | 23 | 1013 | maintenance |
| overtrue/api.yike.io The backend API source code for yike.io, a Chinese developer community forum, built on Laravel 5 with Laravel Passport for OAuth authentica… | 10 | 1009 | maintenance |
| gbraad-apps/gauth GAuth is a browser-based multi-factor authentication app that implements the TOTP (RFC6238) algorithm to generate one-time passwords, built… | 23 | 1005 | maintenance |
| joschan21/nextjs-realtime-chat FriendZone is a full-stack realtime messaging chat application built with Next.js 13 and TypeScript. It supports realtime messaging, friend… | 31 | 999 | maintenance |
| linvi/tweetinvi Tweetinvi is an intuitive C# .NET library for accessing the Twitter REST and Stream APIs. It supports .NET, .NET Core, and portable targets… | 23 | 997 | maintenance |
| openannotation/annotator Annotator is a JavaScript library for building web annotation applications, letting users select text, images, or other page content and at… | 53 | 2761 | experimental |
| DamageLabs/kandan Kandan is a self-hosted, open-source team chat application revived as a modern alternative to HipChat, built with Angular and an Express/Ty… | 62 | 2685 | experimental |
| Matterwiki/Matterwiki Matterwiki is a simple, self-hosted wiki application for small teams to store and collaborate on knowledge, built with Node.js and React. A… | 57 | 2093 | experimental |
| hashicorp-forge/hermes Hermes is an open-source document management system created by HashiCorp Labs to help scale the writing and document review process. It int… | 52 | 1908 | experimental |
| nmikhailov/Validity90 A reverse-engineering project for Validity/Synaptics fingerprint readers (USB IDs 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a), p… | 32 | 1878 | experimental |
| punkpeye/mcp-remote A Node.js CLI proxy that lets MCP clients which only support local stdio servers connect to remote MCP servers over HTTP/SSE, including OAu… | 85 | 1603 | experimental |
| xodus-gaming/xodus Xodus is a Rust project aiming to bring XBOX PC (Game Pass) games to Linux and possibly macOS by implementing XBOX authentication, MSIXVC p… | 61 | 1593 | experimental |
| google/keytransparency A Google open-source key transparency service that provides a lookup service for public keys backed by a publicly auditable, tamper-proof l… | 10 | 1571 | experimental |
| bulwarkid/virtual-fido Virtual FIDO is a software-emulated FIDO2/U2F USB security key (like a YubiKey) that attaches to the host via a USB/IP server over local TC… | 32 | 1413 | experimental |
| cloudflare/production-saas An open-source, feature-complete example SaaS application built entirely on the Cloudflare stack (Workers, D1, KV, etc.) and developed in p… | 10 | 1147 | experimental |
| caddymanager/caddymanager CaddyManager is a self-hosted web application for managing multiple Caddy2 servers from a single dashboard, built on the MEVN stack (MongoD… | 44 | 1144 | experimental |
| Nile Nile is a Postgres platform re-engineered for multi-tenant B2B applications, decoupling storage from compute and virtualizing tenants withi… | 72 | 1077 | experimental |
| khonsulabs/bonsaidb BonsaiDb is a developer-friendly document database written in Rust, inspired by CouchDB, offering ACID-compliant transactional collections,… | 23 | 1061 | experimental |
| javedh-dev/tracktor Tracktor is a self-hosted vehicle tracking management system for managing multiple vehicles, including fuel logs, maintenance history, insu… | 79 | 1028 | experimental |
| inkonchain/ink-kit Ink Kit was a React component library providing UI components, app layouts, themes, and a wallet connection component built on wagmi for on… | 10 | 36314 | abandoned |
| File Browser File Browser is a self-hosted web application that provides a file managing interface over a specified directory, allowing upload, delete, … | 10 | 35900 | abandoned |
| shadcn-ui/taxonomy Taxonomy is an open-source Next.js 13 demo application showcasing the App Router, server components, authentication with NextAuth.js, Prism… | 64 | 19290 | abandoned |
| transitive-bullshit/agentic Agentic is a marketplace and hosted MCP gateway that turns any MCP server or OpenAPI service into a paid, production-ready MCP product with… | 10 | 18103 | abandoned |
| dgrijalva/jwt-go A Go library for creating, signing, parsing, and verifying JSON Web Tokens (JWTs), supporting HMAC, RSA, RSA-PSS, and ECDSA signing algorit… | 10 | 10726 | abandoned |
| lucia-auth/lucia Lucia is a TypeScript authentication library for managing user sessions and OAuth in web applications. It was deprecated in March 2025 and … | 72 | 10450 | abandoned |
| chengazhen/cursor-auto-free A Python automation tool that automatically registers Cursor accounts and refreshes trial tokens to bypass Cursor's subscription limits, us… | 10 | 9777 | abandoned |
| xchaoinfo/fuck-login A Python library that simulates programmatic login to popular Chinese websites like Zhihu, Weibo, Baidu, and Douban, built on requests, Pil… | 10 | 5868 | abandoned |
| pokeb/asi-http-request ASIHTTPRequest is an Objective-C wrapper around Apple's CFNetwork API that simplifies making HTTP requests on Mac OS X and iOS. It supports… | 32 | 5721 | abandoned |
| Karumi/Dexter Dexter is an Android library that simplifies requesting runtime permissions on Android Marshmallow and above, decoupling permission logic f… | 10 | 5190 | abandoned |
| vmware-tanzu/kubeapps Kubeapps is an in-cluster web-based UI for deploying, managing, and upgrading applications on Kubernetes clusters, supporting Helm charts, … | 10 | 5103 | abandoned |
| bitly/oauth2_proxy A Go reverse proxy and static file server that adds OAuth2 authentication (Google, GitHub, Azure, GitLab, and others) in front of web appli… | 10 | 5084 | abandoned |
| nickoneill/PermissionScope PermissionScope is a Swift framework for iOS that provides a unified API for checking and requesting system permissions (notifications, loc… | 10 | 4785 | abandoned |
| spring-attic/spring-security-oauth A Spring Security library providing OAuth 1(a) and OAuth 2 support for both consumers and providers in Spring web applications. It was arch… | 10 | 4688 | abandoned |
| imsun/gitment Gitment is a client-side comment system that stores comments as GitHub Issues in a repository you own, embeddable in any website with no se… | 32 | 4044 | abandoned |
| Jessecar96/SteamDesktopAuthenticator A Windows desktop application that implements Steam's mobile authenticator (Steam Guard), allowing users to generate two-factor authenticat… | 23 | 3828 | abandoned |
| andOTP/andOTP andOTP is an open-source two-factor authentication app for Android that generates TOTP and HOTP one-time passwords. It stores tokens in enc… | 10 | 3710 | abandoned |
| 100apps/openshare OpenShare is a lightweight Objective-C iOS library that replaces official social platform SDKs by directly communicating with mobile client… | 32 | 3613 | abandoned |
| skoruba/IdentityServer4.Admin A web-based administration UI for managing IdentityServer4 clients, resources, and ASP.NET Core Identity users, roles, and claims. It ships… | 10 | 3574 | abandoned |
| facebookarchive/php-graph-sdk The official Facebook SDK for PHP (v5), providing a native interface to the Facebook Graph API and Facebook Login from PHP applications. Th… | 10 | 3208 | abandoned |
| ConsoleMe ConsoleMe is a web service from Netflix that centralizes AWS IAM permission management, offering console login, self-service permission req… | 10 | 3197 | abandoned |
| jpadilla/django-rest-framework-jwt A Python package that adds JSON Web Token (JWT) authentication to Django REST Framework APIs. It provides token obtain, refresh, and verify… | 10 | 3165 | abandoned |
| moose-team/friends Friends is an open-source, peer-to-peer chat application built with Electron that works like Slack but without central servers. It authenti… | 10 | 3160 | abandoned |
| buzzfeed/sso sso (S.S. Octopus) is a single sign-on solution built at BuzzFeed for securing internal services behind OAuth-based authentication. It acts… | 10 | 3122 | abandoned |
| Instagram API A Python 2/3 client library for the Instagram REST and Search APIs, supporting OAuth2 authentication, media access, and real-time subscript… | 10 | 3072 | abandoned |
| ExpressGateway/express-gateway Express Gateway is a microservices API gateway built on Node.js and Express.js that secures, proxies, and manages APIs using Express middle… | 23 | 3030 | abandoned |
| MKSG-MugunthKumar/MKNetworkKit MKNetworkKit is an Objective-C networking framework for iOS 8+ built on NSURLSession, providing built-in authentication and HTTP 1.1 cachin… | 10 | 3024 | abandoned |
| microsoft/Git-Credential-Manager-for-Windows A secure Git credential helper for Windows that stores credentials and supports multi-factor authentication with GitHub, Bitbucket, and Vis… | 10 | 2935 | abandoned |
| docker-archive/docker-registry The original Python implementation of the Docker Registry, a server for storing and distributing Docker container images. It is deprecated … | 10 | 2882 | abandoned |
| gohttpserver A standalone HTTP static file server written in Go with a Vue-based web UI, supporting file uploads, QR code generation for mobile package … | 60 | 2841 | abandoned |
| Python Social Auth Python Social Auth is a Python library providing easy-to-setup social authentication and registration with support for multiple frameworks … | 32 | 2801 | abandoned |
| Netflix/bless BLESS is an SSH Certificate Authority that runs as an AWS Lambda function and signs short-lived SSH certificates for user authentication. I… | 23 | 2758 | abandoned |
| speakeasyjs/speakeasy Speakeasy is a Node.js one-time passcode generator implementing HOTP (RFC 4226) and TOTP (RFC 6238) for two-factor authentication, compatib… | 23 | 2753 | abandoned |
| FirebaseExtended/angularfire AngularFire is the official AngularJS binding library for Firebase, providing Angular services for synchronized objects and collections, fi… | 10 | 2704 | abandoned |
| Keywhiz Keywhiz is a Java-based system for centrally storing, managing, and distributing secrets such as TLS keys, API tokens, and database credent… | 10 | 2622 | abandoned |
| nomad-cli/cupertino Cupertino is a Ruby command-line tool for automating administrative tasks on the Apple Developer Portal, such as managing devices, provisio… | 10 | 2620 | abandoned |
| agilebits/onepassword-app-extension An iOS action extension from AgileBits that let third-party iOS apps integrate 1Password for filling login credentials and other form data.… | 10 | 2568 | abandoned |
| BootstrapCMS/CMS Bootstrap CMS is a PHP content management system built on Laravel 5.1 and the Sentry authentication package. It provides a full self-hosted… | 10 | 2499 | abandoned |
| bigardone/phoenix-trello A Trello clone built with Elixir, Phoenix Framework, React, and Redux, demonstrating real-time kanban boards with Phoenix channels. It doub… | 23 | 2492 | abandoned |
| conorpp/u2f-zero U2F Zero is an open source hardware U2F security token for two-factor authentication, built on a small USB device with secure key storage. … | 23 | 2452 | abandoned |
| sharetribe/sharetribe Sharetribe Go is a source-available Ruby on Rails application for building peer-to-peer online marketplaces, formerly offered as hosted Saa… | 71 | 2448 | abandoned |
| DuendeArchive/identity-model-oidc-client-js oidc-client is a JavaScript library providing OpenID Connect (OIDC) and OAuth2 protocol support for browser-based client applications, incl… | 10 | 2418 | abandoned |
| django-rest-auth django-rest-auth is a Django app that exposes registration and authentication functionality as REST API endpoints for building SPAs and mob… | 23 | 2416 | abandoned |
| FirebaseExtended/firechat Firechat is an extensible, embeddable chat widget built on the Firebase Realtime Database, requiring no server-side code. It provides a rea… | 10 | 2391 | abandoned |
| witoldsz/angular-http-auth An AngularJS module that installs an $http interceptor to buffer requests failing with HTTP 401 and broadcast login-required events, plus a… | 23 | 2370 | abandoned |
| xou816/spot Spot is a native Spotify client for the GNOME desktop written in Rust with GTK4, built on librespot. It supports playback control, browsing… | 40 | 2366 | abandoned |
| mattdonnelly/Swifter Swifter is a Swift framework for interacting with the Twitter API on iOS and OS X, supporting OAuth authentication and Twitter endpoints in… | 23 | 2346 | abandoned |
| lucadegasperi/oauth2-server-laravel An OAuth 2.0 authorization and resource server bridge for the Laravel and Lumen PHP frameworks, built on the League OAuth 2.0 server packag… | 23 | 2345 | abandoned |
| rickyrauch/Balloons.IO Balloons.IO is a ready-to-use multi-room web chat server and client built with Node.js, Express, Socket.IO, and Redis. It uses PassportJS f… | 32 | 2343 | abandoned |
| aws-samples/aws-serverless-airline-booking A sample serverless web application demonstrating flight search, booking, payment, and loyalty points on AWS, built with Lambda, AppSync Gr… | 23 | 2338 | abandoned |
| expressjs/csurf csurf is Node.js CSRF protection middleware for Express that creates and validates CSRF tokens via session or cookie-based storage. The rep… | 10 | 2304 | abandoned |
| github/SoftU2F SoftU2F is a software U2F authenticator for macOS that emulates a hardware U2F HID device and performs cryptographic operations using the m… | 10 | 2249 | abandoned |
| amazon-archives/aws-mobile-react-native-starter An archived React Native starter sample app from AWS that bootstraps a serverless 'Pet Tracker' application using AWS Amplify. It automatic… | 10 | 2215 | abandoned |
| Wafer Wafer is Tencent Cloud's fullstack resource kit for rapidly building WeChat mini programs with elastic scaling. It provides session managem… | 32 | 2142 | abandoned |
| ircmaxell/password_compat A PHP library providing forward compatibility with the password_* functions (password_hash, password_verify) that ship natively with PHP 5.… | 32 | 2128 | abandoned |