Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| NoeFabris/opencode-antigravity-auth An OpenCode plugin that authenticates against Google's Antigravity IDE via OAuth, letting users access Gemini and Claude models with their … | 10 | 10983 | active |
| Anankke/SSPanel-UIM SSPanel UIM is a PHP-based multi-purpose proxy service management panel for running and administering proxy/VPN subscription services. It p… | 75 | 10435 | active |
| PiKVM PiKVM is an open-source KVM-over-IP solution built on Raspberry Pi that lets you remotely control servers and workstations (keyboard, video… | 77 | 10390 | stable |
| pennersr/django-allauth django-allauth is an integrated set of Django applications covering authentication, registration, account management, and third-party (soci… | 75 | 10373 | stable |
| w7corp/easywechat EasyWeChat is a popular PHP SDK for integrating with WeChat (Weixin) platform APIs, including Official Accounts, Mini Programs, Pay, and Op… | 92 | 10366 | active |
| nopCommerce nopCommerce is a free, open-source eCommerce platform and shopping cart built on ASP.NET Core with support for MS SQL Server, PostgreSQL, a… | 96 | 10155 | stable |
| kubernetes/client-go The official Go client library for the Kubernetes API, providing typed clientsets, a dynamic client, API discovery, authentication plugins,… | 77 | 9908 | stable |
| FreeAPI.app FreeAPI is an open-source hub of free, production-style REST APIs (auth, e-commerce, social media, todos, and more) for practicing API inte… | 53 | 9836 | active |
| restsharp/RestSharp RestSharp is a lightweight REST and HTTP API client library for .NET, built as a wrapper around HttpClient. It adds convenient parameter ha… | 77 | 9824 | stable |
| Sphere Sphere is a Web3 wallet and agent platform for the Unicity network, combining a crypto wallet with direct messages, group chat (Nostr/NIP-2… | 61 | 9719 | active |
| Active Admin Active Admin is a Ruby on Rails engine and framework for building elegant administration backends for web applications. It provides a DSL t… | 86 | 9713 | stable |
| spring-projects/spring-security Spring Security is a powerful and highly customizable authentication and access-control framework for Java applications, and the de-facto s… | 97 | 9650 | stable |
| pocket-id/pocket-id Pocket ID is a self-hosted, OpenID Connect Certified identity provider that lets users sign in to applications using passkeys instead of pa… | 86 | 9626 | active |
| git-ecosystem/git-credential-manager Git Credential Manager is a secure, cross-platform Git credential helper built on .NET that stores credentials in the OS-native secure stor… | 95 | 9368 | active |
| Nhost Nhost is an open source Firebase alternative providing a complete backend platform built on PostgreSQL, Hasura GraphQL, authentication, fil… | 92 | 9297 | active |
| firebase/flutterfire FlutterFire is a collection of official Firebase plugins for Flutter apps, maintained by Google. It enables Flutter applications to integra… | 67 | 9260 | stable |
| golang-jwt/jwt A Go library for creating, signing, parsing, and verifying JSON Web Tokens (JWTs) per RFC 7519. It is the community-maintained successor to… | 75 | 9241 | stable |
| papermark/papermark Papermark is an open-source, self-hostable DocSend alternative for securely sharing documents and running virtual data rooms, with built-in… | 69 | 9211 | active |
| teamhanko/hanko Hanko is an open-source authentication and user management platform built in Go, offering passwords, passkeys (WebAuthn/FIDO2), MFA, OAuth … | 95 | 9041 | active |
| AdminJS AdminJS is an open-source admin panel library for Node.js applications that auto-generates a customizable React-based admin UI from your da… | 40 | 8998 | active |
| CoreBunch/Instatic Instatic is a self-hosted, MIT-licensed visual CMS that combines a canvas page editor, content engine, media, auth, forms, and plugin syste… | 78 | 8915 | active |
| owncloud/core ownCloud Core is the server-side component of ownCloud Classic, a self-hosted file storage, sync, and sharing platform written in PHP. It p… | 99 | 8837 | stable |
| gtsteffaniak/filebrowser FileBrowser Quantum is a self-hosted web-based file manager written in Go, forked from the filebrowser project with advanced features like … | 93 | 8824 | active |
| CakePHP CakePHP is a rapid development MVC framework for PHP that provides an ORM, validation, caching, authentication, and code generation out of … | 99 | 8789 | stable |
| sitaramc/gitolite Gitolite is a self-hosted Git repository hosting tool for Unix servers that provides fine-grained, file-based access control over repositor… | 72 | 8595 | stable |
| varvet/pundit Pundit is a Ruby gem that provides minimal authorization for Rails applications using plain Ruby policy classes and object-oriented design.… | 74 | 8521 | stable |
| hs-web/hsweb-framework hsweb is a fully reactive enterprise backend management framework built on Spring Boot 2.x, Spring WebFlux, and R2DBC. It provides modular … | 73 | 8396 | active |
| tinyauthapp/tinyauth Tinyauth is a lightweight, OpenID Certified™ authentication and authorization server written in Go, shipped as a single static binary. It w… | 86 | 8366 | active |
| jupyterhub/jupyterhub JupyterHub is a multi-user server that spawns, manages, and proxies individual Jupyter notebook server instances for many users. It consist… | 77 | 8360 | stable |
| openedx/openedx-platform Open edX Platform is the open-source Learning Management System (LMS) and Studio (CMS) that powers online course delivery and authoring at … | 66 | 8193 | active |
| facebook/facebook-ios-sdk The official Facebook SDK for iOS and tvOS, enabling integration of Facebook Platform features into Apple apps. It provides Facebook Login,… | 91 | 8108 | active |
| omniauth/omniauth OmniAuth is a Ruby library that standardizes multi-provider authentication for web applications via Rack middleware. Developers add authent… | 80 | 8104 | stable |
| Solid Solid is a set of open standards and tools for building decentralized web applications where users store their data in personal online data… | 10 | 8091 | active |
| warp-tech/warpgate Warpgate is an open-source, clientless bastion host and privileged access management (PAM) tool written in Rust that transparently proxies … | 98 | 8038 | active |
| svenstaro/miniserve miniserve is a small, self-contained Rust CLI tool that serves files and directories over HTTP with a single command. It supports authentic… | 83 | 7881 | active |
| boltgolt/howdy Howdy provides Windows Hello-style facial authentication for Linux using IR emitters and a camera with facial recognition. It integrates wi… | 34 | 7813 | active |
| panva/jose A zero-dependency JavaScript/TypeScript library implementing JSON Object Signing and Encryption standards (JWA, JWS, JWE, JWT, JWK, JWKS). … | 96 | 7808 | stable |
| kelektiv/node.bcrypt.js A Node.js library providing bcrypt password hashing implemented as a native C++ addon. It handles salting and hashing passwords for secure … | 54 | 7804 | stable |
| angular/angularfire AngularFire is the official Angular library wrapping the Firebase JS SDK, exposing Firebase services (Firestore, Realtime Database, Auth, A… | 98 | 7800 | active |
| fairyglade/ly Ly is a lightweight TUI (ncurses-like) display manager for Linux and BSD, written in Zig. It handles graphical login sessions via PAM and w… | 67 | 7625 | active |
| Kunzisoft/KeePassDX KeePassDX is a lightweight, open-source password manager and encrypted vault for Android, compatible with the KeePass format (.kdb/.kdbx). … | 100 | 7506 | active |
| lcobucci/jwt A PHP library for creating, parsing, and validating JSON Web Tokens (JWT) and JSON Web Signatures (JWS) per RFC 7519. It is installed via C… | 95 | 7480 | stable |
| anomalyco/openauth OpenAuth is a universal, standards-based OAuth 2.0 auth provider that can be deployed as a standalone service or embedded into existing app… | 35 | 7408 | active |
| MeshCentral MeshCentral is a self-hosted, web-based remote monitoring and management (RMM) platform built on Node.js. It lets administrators install ag… | 97 | 7332 | active |
| Soft Serve Soft Serve is a self-hostable Git server that runs as a single Go binary and is managed entirely from the command line. It serves repositor… | 98 | 7253 | active |
| sammchardy/python-binance An unofficial Python wrapper for the Binance exchange REST API v3, covering general, market data, and account endpoints with asyncio and we… | 83 | 7214 | active |
| gitalk/gitalk Gitalk is a comment widget for websites that stores comments as GitHub Issues and renders them using Preact. It is serverless, authenticati… | 70 | 7160 | stable |
| Kiranism/next-shadcn-dashboard-starter A free, MIT-licensed admin dashboard starter template built with Next.js 16, shadcn/ui, Tailwind CSS v4, and TypeScript. It provides produc… | 88 | 7142 | active |
| hhyo/Archery Archery is a self-hosted SQL audit and query platform built with Django. It provides SQL review, execution, querying, backup, session and a… | 77 | 7064 | active |
| firebase/firebase-ios-sdk The official Firebase SDK for Apple platforms (iOS, macOS, tvOS, watchOS, visionOS), providing open-source client libraries for Firebase pr… | 99 | 6965 | stable |
| CTFd CTFd is an open-source Capture The Flag (CTF) platform built on Flask for hosting cybersecurity competitions and workshops. It provides cha… | 95 | 6886 | active |
| hexclave/hexclave Open-source user infrastructure platform handling authentication, teams, RBAC, payments, emails, and analytics for SaaS apps. Deployable as… | 89 | 6868 | active |
| getActivity/XXPermissions XXPermissions is an Android runtime permission request framework written in Java that simplifies requesting normal and special permissions … | 85 | 6813 | active |
| gRPC Prometheus monitoring A Go library of gRPC middleware (interceptors) providing chained, ready-to-use implementations for auth, logging, tracing, metrics, retries… | 94 | 6760 | active |
| humhub/humhub HumHub is an open-source (AGPLv3) enterprise social network and intranet collaboration platform written in PHP on the Yii2 framework. It of… | 95 | 6751 | stable |
| Pig Pig is an enterprise-grade RBAC rapid development platform built on Spring Cloud, Spring Boot 4, and OAuth2 (Spring Authorization Server), … | 81 | 6690 | active |
| PHP OAuth2 Server A standards-compliant OAuth 2.0 authorization server library for PHP, supporting all major grants (authorization code, client credentials, … | 88 | 6668 | stable |
| Ferry Ferry is an open-source ticketing and workflow engine built with Gin (Go) and Vue + Element UI. It supports configurable approval flows, te… | 34 | 6616 | active |
| markbates/goth Goth is a Go library providing a simple, idiomatic way to add multi-provider authentication to web applications via OAuth, OAuth2, and Open… | 52 | 6605 | active |
| lldap/lldap lldap is a lightweight LDAP authentication server written in Rust, providing an opinionated, simplified LDAP interface for user management.… | 78 | 6583 | active |
| thedevdojo/wave Wave is an open-source SaaS starter kit and framework built on Laravel, Livewire, and Tailwind CSS. It ships with authentication, billing a… | 79 | 6552 | active |
| pawelmalak/flame Flame is a self-hosted startpage for your server that serves as a hub for your applications and bookmarks. It features built-in GUI editors… | 71 | 6551 | active |
| facebook/facebook-android-sdk The official Facebook SDK for Android, providing modular libraries to integrate Facebook Platform features into Android apps. It includes m… | 95 | 6462 | active |
| filipedeschamps/tabnews.com.br TabNews is the open-source codebase of a Brazilian community website for programming and technology discussions, where users publish posts … | 76 | 6381 | active |
| expressjs/session express-session is official session middleware for the Express web framework that manages user sessions via cookies holding only a session … | 74 | 6352 | stable |
| PhilippC/keepass2android Keepass2android is an open-source password manager app for Android, compatible with the KeePass 2.x database format. It stores credentials … | 96 | 6247 | active |
| illuspas/Node-Media-Server Node-Media-Server is a high-performance, low-latency live streaming media server implemented in Node.js, supporting RTMP/RTMPS and HTTP/WS-… | 68 | 6242 | active |
| auth0/java-jwt A Java library for creating and verifying JSON Web Tokens (JWT) per RFC 7519, supporting HMAC, RSA, and ECDSA signing algorithms. It is mai… | 92 | 6237 | active |
| Cosmos Cosmos-Server is a self-hosted home server platform that acts as a secure gateway and server manager for your applications. It bundles auth… | 92 | 6178 | active |
| Passbolt Passbolt Community Edition API is the JSON backend for the open source, security-first password manager for teams, built in PHP on CakePHP.… | 96 | 6136 | stable |
| Auth.js (next-auth) Auth.js (formerly NextAuth.js) is an open-source, runtime-agnostic authentication library built on standard Web APIs, with deep integration… | 84 | 28373 | maintenance |
| Azure/azure-sdk-for-net The official Azure SDK for .NET, containing client and management libraries for all Azure services, developed in the open. It provides cons… | 96 | 6072 | active |
| OpenCloud OpenCloud is an open source file management, sharing, and collaboration platform written in Go, positioned as a sovereign alternative to Ne… | 86 | 6056 | active |
| redmine/redmine Redmine is a flexible, self-hosted project management web application written in Ruby on Rails. It provides issue tracking, wikis, forums, … | 77 | 6050 | stable |
| oomol-lab/open-connector OpenConnector is an open-source connector gateway that lets users authorize SaaS app accounts once and exposes 1,000+ providers and 10,000+… | 81 | 6046 | active |
| prasathmani/tinyfilemanager Tiny File Manager is a single-file PHP web application for managing files and folders through a browser, with upload, download, editing, pr… | 61 | 5979 | active |
| astrada/google-drive-ocamlfuse google-drive-ocamlfuse is a FUSE filesystem written in OCaml that mounts Google Drive as a local filesystem on Linux. It provides full read… | 85 | 5968 | active |
| hacdias/webdav A simple, standalone WebDAV server written in Go, distributable as a single binary or Docker image. It supports user authentication, TLS, a… | 99 | 5920 | active |
| shazow/ssh-chat ssh-chat is a custom SSH server written in Go that replaces the shell with a chat prompt, so users connect via ssh and land in a chat room.… | 47 | 5909 | active |
| golang/oauth2 The official Go client implementation of the OAuth 2.0 specification, maintained by the Go team. It provides token acquisition, refresh, an… | 74 | 5903 | stable |
| Faka Card System A self-hosted PHP e-commerce application for selling digital goods and card keys (faka), with an anime/2D-culture themed storefront. It inc… | 99 | 5854 | active |
| OpenFGA OpenFGA is a high-performance, open-source fine-grained authorization and permission engine inspired by Google's Zanzibar, owned by the CNC… | 97 | 5846 | stable |
| causefx/Organizr Organizr is a self-hosted PHP web application that organizes HTPC and homelab services into a single tabbed dashboard webpage. It supports … | 57 | 5819 | active |
| Klavis-AI/klavis Klavis AI is an open-source MCP (Model Context Protocol) integration platform that lets AI agents connect to 100+ prebuilt tool integration… | 59 | 5814 | active |
| kanbn/kan Kan is an open-source, self-hostable kanban project management application positioned as a Trello alternative. It offers boards, cards, lab… | 80 | 5779 | active |
| dromara/lamp-cloud lamp-cloud is a Java-based microservices rapid development platform built on Spring Boot and Spring Cloud, focused on multi-tenant (SaaS) a… | 77 | 5758 | active |
| laravel/socialite Laravel Socialite is a first-party Laravel package providing a fluent interface for OAuth 1 and OAuth 2 social authentication. It handles t… | 98 | 5742 | stable |
| jpadilla/pyjwt PyJWT is a Python library implementing JSON Web Tokens (JWT) per RFC 7519, supporting encoding and decoding of signed tokens. It is the de … | 98 | 5719 | stable |
| next-terminal/next-terminal Next Terminal is an open-source bastion host (jump server) and interactive session auditing system supporting SSH, RDP, VNC, Telnet, HTTP, … | 96 | 5647 | active |
| realworld-apps/angular-realworld-example-app An exemplary Angular implementation of the RealWorld 'Conduit' social blogging app (a Medium.com clone), demonstrating CRUD, JWT authentica… | 89 | 5638 | active |
| trailbaseio/trailbase TrailBase is an open-source, single-executable Firebase alternative built on Rust, SQLite (with experimental Postgres support), and Wasmtim… | 84 | 5638 | active |
| umputun/remark42 Remark42 is a self-hosted, privacy-focused comment engine written in Go that can be embedded into blogs and articles. It supports social an… | 100 | 5627 | stable |
| pk910/PoWFaucet A self-hostable, modularized faucet for EVM-compatible blockchain testnets that distributes test ETH with multiple bot-protection mechanism… | 90 | 5622 | active |
| Azure/azure-sdk-for-python The official Azure SDK for Python, a monorepo of client and management libraries for interacting with Azure services from Python. It includ… | 96 | 5621 | active |
| sferik/x-cli A command-line power tool for Twitter/X that provides a full command tree for posting, searching, deleting, list management, and streaming … | 76 | 5587 | active |
| devias-io/material-kit-react A free, MIT-licensed React admin dashboard template built with Material UI (MUI) components and Next.js, written in TypeScript. It ships wi… | 31 | 5583 | active |
| Doorkeeper Doorkeeper is a Ruby gem (Rails engine) that adds OAuth 2.0 provider functionality to Ruby on Rails or Grape applications. It implements th… | 94 | 5523 | stable |
| kanidm/kanidm Kanidm is a simple, secure, and fast identity management platform written in Rust that acts as a complete identity provider for other appli… | 98 | 5481 | active |
| spotipy-dev/spotipy Spotipy is a lightweight Python client library for the Spotify Web API, providing access to all Spotify endpoints including music search, t… | 72 | 5476 | active |
| unkeyed/unkey Unkey is an open-source, source-available developer platform for modern APIs that combines instant deployments, a globally distributed gate… | 92 | 5462 | active |