Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| scribejava/scribejava ScribeJava is a simple, threadsafe OAuth client library for Java supporting OAuth 1.0a and OAuth 2.0 flows. It ships prebuilt API integrati… | 57 | 5453 | stable |
| Reown AppKit Reown AppKit (formerly Web3Modal) is a full-stack SDK and UI toolkit for building onchain app user experiences, providing wallet connection… | 93 | 5446 | active |
| sadmann7/skateshop An open-source e-commerce skateshop web application built with Next.js 14 and the T3 stack, featuring a storefront, seller and customer wor… | 33 | 5445 | active |
| Authlib Authlib is a Python library for building OAuth 1.0/2.0 and OpenID Connect clients, authorization servers, and protected resource servers, w… | 97 | 5430 | stable |
| P-H-C/phc-winner-argon2 The reference C implementation of Argon2, the winner of the Password Hashing Competition, providing memory-hard password hashing with Argon… | 23 | 5375 | stable |
| Rallly Rallly is an open-source scheduling and collaboration tool for finding the best date and time for group meetings via shareable polls. It is… | 100 | 5312 | active |
| Streamyfin Streamyfin is a modern, open-source Jellyfin client for Android and iOS built with Expo (React Native). It provides media streaming, downlo… | 87 | 5293 | active |
| Mall4j Mall4j is an open-source Java e-commerce mall system built on Spring Boot 4, Vue3, Sa-Token, MyBatis-Plus, and Redis, providing product, or… | 77 | 5283 | active |
| WriteFreely WriteFreely is a self-hosted, Markdown-based publishing platform for writers, built in Go as a single lightweight binary. It supports multi… | 95 | 5261 | stable |
| OpenIddict OpenIddict is a flexible OAuth 2.0/OpenID Connect framework for .NET, providing server, client, and token validation stacks. It supports st… | 96 | 5257 | stable |
| iflytek/skillhub SkillHub is a self-hosted, enterprise-grade registry for AI agent skill packages, letting teams publish, version, discover, and install reu… | 83 | 5234 | active |
| QLHazyCoder/FlowPilot FlowPilot is a Chrome sidebar extension for batch-automating ChatGPT/OpenAI, Kiro, and Grok account registration, OAuth authorization, and … | 71 | 5179 | active |
| firebase/firebase-js-sdk The official Firebase JavaScript SDK providing client-side libraries for Firebase services such as Authentication, Realtime Database, Fires… | 99 | 5152 | stable |
| ngoduykhanh/wireguard-ui A self-hosted web user interface for managing WireGuard VPN setups, written in Go. It provides authentication, client management with extra… | 23 | 5151 | active |
| Kozea/Radicale Radicale is a lightweight CalDAV and CardDAV server for sharing calendars, to-do lists, and contacts over HTTP. It stores data on the file … | 99 | 5124 | stable |
| homarr-labs/homarr Homarr is a self-hosted web dashboard for organizing and monitoring your apps and services, with 40+ integrations, built-in icons, and drag… | 90 | 5118 | active |
| Pomerium Pomerium is an open-source, identity- and context-aware reverse proxy that provides clientless, zero-trust access to internal applications … | 99 | 5056 | active |
| dpgaspar/Flask-AppBuilder Flask-AppBuilder is a rapid application development framework built on top of Flask, providing automatic CRUD generation for SQLAlchemy mod… | 97 | 4962 | stable |
| ACI.dev ACI.dev is an open-source tool-calling platform that connects 600+ SaaS tools to AI agents and agentic IDEs via direct function calling or … | 59 | 4905 | active |
| FirebaseUI FirebaseUI is an open-source library providing pre-built, customizable UI components and bindings on top of Firebase SDKs for authenticatio… | 96 | 4879 | active |
| Corcel Corcel is a PHP library of Eloquent ORM model classes that lets any PHP application query a WordPress database directly. It enables using W… | 25 | 4774 | active |
| 981011512/-- An open-source smart parking management system with EV charging, property management, and face access control modules, built on Java Spring… | 36 | 4712 | active |
| Authenticator A browser extension that generates two-factor authentication (2FA) codes, acting as a software TOTP authenticator. It is available for Chro… | 66 | 4705 | active |
| Heeexy/SpringBoot-Shiro-Vue A full-stack reference project demonstrating fine-grained RBAC permission management using Spring Boot on the backend and Vue with ElementU… | 65 | 4654 | active |
| build-trust/ockam Ockam is a Rust library and CLI toolkit for building secure-by-design distributed applications with end-to-end encryption, cryptographic id… | 57 | 4637 | active |
| prest/prest pRESTd is a production-ready Go service that exposes instant REST APIs (and a read-only MCP endpoint) on top of any existing or new Postgre… | 100 | 4624 | stable |
| spec-first/connexion Connexion is a Python web framework for spec-first (API-first) development, where the API is described in an OpenAPI/Swagger specification … | 77 | 4613 | active |
| stratumauth/app Stratum (formerly Authenticator Pro) is a free, open-source two-factor authentication app for Android with a Wear OS companion. It supports… | 90 | 4598 | active |
| hotheadhacker/seedbox-lite SeedBox Lite is a self-hosted torrent streaming media center that lets users watch movies and TV shows instantly while torrents download. I… | 32 | 4536 | active |
| Google Cloud Go Client Libraries The official Google Cloud Client Libraries for Go, providing idiomatic Go packages for accessing Google Cloud Platform services such as Sto… | 95 | 4520 | active |
| express-jwt Express middleware that validates JSON Web Tokens (JWTs) using the webtoken library and attaches the decoded payload to the request object.… | 69 | 4507 | stable |
| apache/shiro Apache Shiro is a comprehensive Java security framework providing authentication, authorization, cryptography, and enterprise session manag… | 92 | 4460 | active |
| simplcommerce/SimplCommerce SimplCommerce is a free, open-source, cross-platform e-commerce system built on .NET with a modular (modulith) architecture. It provides a … | 58 | 4415 | active |
| opensourcepos/opensourcepos Open Source Point of Sale is a web-based point of sale application written in PHP using the CodeIgniter framework with MySQL/MariaDB as the… | 73 | 4403 | active |
| Rainbow Wallet Rainbow is a self-custody Ethereum wallet app for iOS, Android, and desktop browsers, built with React Native and TypeScript. It lets users… | 95 | 4396 | active |
| dotnetcore/WTM WalkingTec.Mvvm (WTM) is a rapid application development framework for ASP.NET Core supporting LayUI, React, and Vue frontends. It includes… | 60 | 4350 | active |
| Authlogic Authlogic is an unobtrusive Ruby authentication library built on ActiveRecord, treating user sessions as models. It handles login, logout, … | 58 | 4342 | stable |
| jazzband/djangorestframework-simplejwt Simple JWT is a JSON Web Token authentication plugin for the Django REST Framework. It provides token-based authentication for Django REST … | 70 | 4336 | stable |
| wechatpy/wechatpy wechatpy is a third-party Python SDK for the WeChat (微信) official platform ecosystem. It wraps APIs for official accounts, WeChat Pay, WeCo… | 57 | 4307 | active |
| praw-dev/praw PRAW is a Python package that wraps Reddit's API, providing simple, rule-compliant access to Reddit data and actions. It handles OAuth auth… | 95 | 4259 | stable |
| TheAlphamerc/flutter_twitter_clone Fwitter is a fully functional Twitter clone mobile app built with the Flutter framework, using Firebase authentication, realtime database, … | 23 | 4240 | active |
| subnub/myDrive MyDrive is an open-source, self-hosted cloud file storage server similar to Google Drive, built with Node.js, Express, React, and MongoDB. … | 65 | 4233 | active |
| marmotedu/iam IAM is an enterprise-grade identity and access management system written in Go, used to authenticate users and authorize access to resource… | 25 | 4213 | active |
| Authboss Authboss is a modular authentication system for Go web applications, providing pluggable modules for common auth features like login, regis… | 64 | 4198 | active |
| Bubka/2FAuth 2FAuth is a self-hosted web application for managing Two-Factor Authentication accounts and generating TOTP, HOTP, and Steam Guard security… | 97 | 4173 | active |
| owncloud/android The official ownCloud Android client app, built in Kotlin, for accessing, syncing, and sharing files on ownCloud servers (both Infinite Sca… | 96 | 4171 | active |
| simov/grant Grant is an OAuth proxy middleware for Node.js supporting 200+ OAuth providers across OAuth 1.0a, OAuth 2.0, and OpenID Connect. It integra… | 32 | 4165 | stable |
| yusing/godoxy GoDoxy is a lightweight, high-performance reverse proxy with a built-in WebUI, designed for self-hosters running Docker or Podman. It autom… | 87 | 4161 | active |
| vvo/iron-session iron-session is a secure, stateless, cookie-based session library for JavaScript, storing session data in signed and encrypted cookies deco… | 96 | 4143 | active |
| Microsoft Authentication Library (MSAL) Microsoft Authentication Library (MSAL) for JavaScript enables client-side and server-side JS apps to authenticate users with Microsoft Ent… | 95 | 4126 | active |
| Boundary HashiCorp Boundary is an identity-aware proxy that provides secure, least-privilege access to hosts and critical systems across clouds and … | 10 | 4067 | active |
| OAuth2 Server A Node.js module for implementing a fully RFC 6749/6750 compliant OAuth2 server/provider, framework-agnostic with official wrappers for Exp… | 23 | 4063 | active |
| Dcat Admin Dcat Admin is a Laravel-based admin panel builder that lets developers create full-featured, attractive back-office systems with minimal co… | 32 | 4020 | active |
| tulios/kafkajs KafkaJS is a modern, dependency-free Apache Kafka client library for Node.js written in pure JavaScript. It provides producer and consumer … | 23 | 4005 | stable |
| jeroennoten/Laravel-AdminLTE A Laravel package that integrates the AdminLTE v3 admin dashboard theme via Blade templates and a configurable menu system. It also optiona… | 95 | 3995 | active |
| stylefeng/Guns Guns is a modern Java application development framework built on Spring Boot 3, Vue 3, and JDK 17, providing a full-stack admin scaffold wi… | 52 | 3974 | active |
| octokit/octokit.rb Octokit.rb is a Ruby client library for the GitHub REST API, wrapping endpoints in idiomatic Ruby methods. It supports authentication (basi… | 66 | 3951 | stable |
| shopizer-ecommerce/shopizer Shopizer is an open-source Java e-commerce platform built on Spring Boot, providing headless commerce with a REST API covering catalog, sho… | 25 | 3942 | active |
| django-guardian/django-guardian django-guardian is a Python library that implements per-object (row-level) permissions on top of Django's built-in authorization backend. I… | 97 | 3920 | stable |
| 学之思开源考试系统 (XZS Exam System) XueZhiSi (学之思) is an open-source online examination system built with a Java backend and Vue frontend, supporting web and WeChat mini-progr… | 67 | 3908 | active |
| vuejs/vuefire VueFire is the official Firebase bindings library for Vue.js, providing idiomatic composables for realtime data binding with Firestore, Rea… | 65 | 3908 | stable |
| 1024-lab/smart-admin SmartAdmin is a rapid development platform (scaffold/admin framework) built on SpringBoot 2/3 + Sa-Token + MyBatis-Plus for the backend and… | 80 | 3893 | active |
| yudaocode/yudao-ui-admin-vue3 Yudao admin dashboard frontend built with Vue 3, Element Plus, TypeScript, and Vite, providing RBAC dynamic permissions, SaaS multi-tenancy… | 91 | 3879 | active |
| Qsnh/meedu MeEdu is an open-source online school (knowledge commerce) system built with PHP/Laravel, MySQL, and Redis, supporting paid video courses, … | 91 | 3865 | active |
| joschan21/digitalhippo DigitalHippo is a fullstack e-commerce marketplace application for digital products, built with Next.js 14 App Router, tRPC, TypeScript, Pa… | 27 | 3864 | active |
| ruby-china/homeland Homeland is an open-source forum/community website system built on Ruby on Rails, evolved from the Ruby China community. It provides a full… | 62 | 3861 | active |
| fastapi-admin/fastapi-admin FastAPI-Admin is a Python library that adds a Django-admin-style admin dashboard to FastAPI applications, built on TortoiseORM with the Tab… | 26 | 3829 | active |
| thephpleague/oauth2-client A PHP library providing a base client for integrating with OAuth 2.0 service providers per RFC 6749. It includes a GenericProvider for Bear… | 85 | 3819 | stable |
| node-oidc-provider A Node.js library implementing an OpenID Certified OAuth 2.0 Authorization Server with full OpenID Connect support. It is highly configurab… | 95 | 3816 | active |
| dcodeIO/bcrypt.js A zero-dependency, pure JavaScript implementation of the bcrypt password hashing algorithm with TypeScript support. It is API-compatible wi… | 80 | 3797 | stable |
| async-labs/builderbook An open-source full-stack web application for self-publishing and selling books or other online content, built with React, Next.js, Materia… | 34 | 3792 | active |
| shuaiplus/nodewarden NodeWarden is a Bitwarden-compatible password manager server that runs entirely on Cloudflare Workers, using D1 for data and R2/KV for atta… | 77 | 3789 | active |
| flutter_inappwebview A Flutter plugin for embedding inline WebView widgets, running headless WebViews, and opening in-app browser windows (Chrome Custom Tabs / … | 57 | 3779 | active |
| Facepunch/Facepunch.Steamworks A C# wrapper library for the Steamworks SDK, providing idiomatic .NET access to Steam features like friends, achievements, auth, avatars, a… | 86 | 3775 | active |
| zxcvbn zxcvbn is a JavaScript password strength estimator inspired by password crackers, using pattern matching and conservative estimation agains… | 23 | 16071 | maintenance |
| supermemoryai/cloudflare-saas-stack An opinionated full-stack SaaS starter kit for building and deploying applications on Cloudflare, combining Next.js, TailwindCSS, ShadcnUI,… | 24 | 3749 | active |
| WGDashboard/WGDashboard WGDashboard is a self-hosted web dashboard for managing WireGuard and AmneziaWG VPN servers, built with Python (Flask) and Vue.js. It auto-… | 87 | 3737 | active |
| thoughtbot/clearance Clearance is a Rails engine providing email and password authentication for Ruby on Rails applications. It offers opinionated defaults for … | 79 | 3735 | active |
| sismo-core/sismo-badges Sismo Badges is the set of Solidity smart contracts powering the Sismo Badge Minting Protocol on Ethereum. It provides an attestations regi… | 23 | 15872 | maintenance |
| FuzzyGrim/Yamtrack Yamtrack is a self-hosted web application for tracking movies, TV shows, anime, manga, video games, books, comics, and board games. Built w… | 97 | 3701 | active |
| jwt/ruby-jwt A Ruby gem implementing the RFC 7519 OAuth JSON Web Token (JWT) standard, supporting encoding and decoding of signed tokens with HMAC, RSAS… | 98 | 3687 | stable |
| maxcountryman/flask-login Flask-Login is a Flask extension that provides user session management, handling login, logout, and persistent session tracking. It is stor… | 66 | 3675 | stable |
| playgameservices/play-games-plugin-for-unity An open-source Unity plugin by Google that lets game developers integrate Google Play Games services into Unity games. It supports sign-in,… | 86 | 3656 | active |
| moby/swarmkit SwarmKit is a Go toolkit for orchestrating distributed systems, providing Raft-based consensus, node discovery, task scheduling, and servic… | 77 | 3652 | active |
| DingTalk-Real-AI/dingtalk-workspace-cli DingTalk Workspace CLI (dws) is an official cross-platform command-line tool from DingTalk that unifies DingTalk's product capabilities int… | 78 | 3646 | active |
| VerneMQ VerneMQ is a high-performance, distributed MQTT message broker built on Erlang/OTP with master-less clustering for horizontal scalability a… | 93 | 3637 | stable |
| fatfreecrm/fat_free_crm Fat Free CRM is an open-source customer relationship management platform built on Ruby on Rails. It provides group collaboration, campaign … | 90 | 3633 | active |
| CSFrequency/react-firebase-hooks A set of reusable React Hooks that simplify integrating Firebase services (Auth, Firestore, Realtime Database, Storage, Functions, Messagin… | 23 | 3630 | stable |
| yandex/odyssey Odyssey is a production-ready, multi-threaded PostgreSQL connection pooler and request router written in C, built on a custom coroutine eng… | 89 | 3628 | stable |
| dtinit/data-transfer-project An open-source framework providing common data models and adapter libraries that enable direct service-to-service transfer of user data bet… | 67 | 3625 | active |
| Steamworks.NET Steamworks.NET is a C# wrapper for Valve's Steamworks API, usable with Unity or any C#/.NET application. It provides a near 1:1 mapping to … | 87 | 3623 | active |
| go-oauth2/oauth2 A Go library for building OAuth 2.0 authorization servers that issue and manage access tokens. It supports the standard OAuth 2.0 protocol … | 83 | 3623 | stable |
| AtalayaLabs/OxiCloud OxiCloud is a lightweight, self-hosted cloud storage platform written in Rust that provides files, photos, calendars, and contacts in a sin… | 86 | 3607 | active |
| ory/oathkeeper Ory Oathkeeper is a cloud native Identity & Access Proxy (IAP) and Access Control Decision API written in Go that authenticates, authorizes… | 74 | 3605 | active |
| JosephSilber/bouncer Bouncer is a PHP library for managing roles and abilities on Eloquent models, with support for ownership checks, forbidden abilities, cachi… | 61 | 3578 | stable |
| FirebaseExtended/reactfire ReactFire is a TypeScript library of hooks, context providers, and components that simplify interacting with the Firebase Web SDK in React … | 95 | 3570 | active |
| devise token auth A Ruby gem providing token-based authentication for Rails JSON APIs, built on Devise and OmniAuth. It supports multi-client sessions, token… | 71 | 3570 | active |
| Unity Catalog Unity Catalog is an open-source, multimodal data and AI catalog that provides a unified metadata and governance layer for tables, files, fu… | 88 | 3555 | active |
| react-native-google-signin/google-signin A React Native library providing Google Sign-In (OAuth2) authentication for Android and iOS apps, including Expo support. It wraps the nati… | 92 | 3554 | active |
| bastillion-io/Bastillion Bastillion is a self-hosted, web-based SSH console and SSH key management platform that acts like a bastion host with a dashboard. It provi… | 100 | 3551 | active |