Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| DoraCMS DoraCMS is an open-source, self-hosted content management system built on EggJS 3.x, Vue 3, and TypeScript, organized as a pnpm monorepo wi… | 61 | 3545 | active |
| ueberauth/guardian Guardian is a token-based authentication library for Elixir applications, with JSON Web Tokens supported out of the box. It integrates with… | 81 | 3513 | stable |
| mlogclub/bbs-go bbs-go is a lightweight, self-hosted community platform for building forums, Q&A sites, and knowledge bases, built with a Go backend and Re… | 92 | 3481 | active |
| guildxyz/guild.xyz Guild.xyz is an open-source web application for token-curated community membership management, providing token-gated access to Discord, Tel… | 52 | 3478 | active |
| oblador/react-native-keychain A React Native library providing access to the iOS Keychain and Android Keystore for securely storing credentials such as passwords, tokens… | 66 | 3477 | stable |
| TheWaWaR/simple-http-server A simple static file HTTP server written in Rust, built on axum/tokio. It supports directory listing, file upload, basic auth, range reques… | 76 | 3459 | active |
| google/OpenSK OpenSK is an open-source Rust implementation of a FIDO2/FIDO U2F security key, developed by Google as a research platform. It can run as fi… | 67 | 3451 | active |
| Universal Commerce Protocol The Universal Commerce Protocol (UCP) is an open standard and specification for interoperable, agentic commerce, defining capabilities like… | 77 | 3420 | active |
| laravel/passport Laravel Passport is an OAuth2 server package for Laravel applications, built on the League OAuth2 server. It issues and manages access toke… | 99 | 3419 | active |
| SteamRE/DepotDownloader A console application for downloading Steam game depots and Steam Workshop content, built on the SteamKit2 library. It supports anonymous o… | 77 | 3414 | active |
| sc0tfree/updog Updog is a command-line replacement for Python's SimpleHTTPServer that serves a directory over HTTP/S with both upload and download support… | 57 | 3414 | active |
| auth0/jwt-decode A small TypeScript library that decodes JWT tokens (Base64Url-encoded JSON) in browser and Node environments. It does not validate signatur… | 64 | 3399 | stable |
| paragonie/paseto A PHP reference implementation of PASETO (Platform-Agnostic Security Tokens), a secure alternative to JWT/JWS/JWE. It supports PASETO proto… | 36 | 3398 | stable |
| automazeio/vibeproxy VibeProxy is a native macOS menu bar app that proxies AI coding tools' API requests through your existing Claude Code, ChatGPT, Gemini, Kim… | 81 | 3393 | active |
| Vectorized/solady Solady is a collection of gas-optimized Solidity smart contract snippets and libraries for Ethereum development. It provides implementation… | 75 | 3379 | active |
| Backpack for Laravel Backpack for Laravel is a collection of open-source Laravel packages for rapidly building custom admin panels on top of Eloquent models. It… | 95 | 3377 | stable |
| taylorwilsdon/google_workspace_mcp A comprehensive Model Context Protocol (MCP) server and CLI tool that gives AI assistants like Claude and ChatGPT full natural-language con… | 83 | 3377 | active |
| Blitz.js Blitz.js is a fullstack toolkit built on top of Next.js that adds a typesafe RPC data layer, authentication/authorization, and code scaffol… | 54 | 14125 | maintenance |
| thomiceli/opengist Opengist is a self-hosted, open-source pastebin alternative to GitHub Gist, written in Go, where every snippet is stored as a Git repositor… | 92 | 3367 | active |
| AChep/keyguard-app Keyguard is a multiplatform password manager client for the Bitwarden platform and KeePass (KDBX) files, built with Kotlin and Jetpack Comp… | 90 | 3366 | active |
| Stoat Stoat is the Rust backend software powering Stoat chat, a self-hostable community chat platform descended from Revolt. It consists of modul… | 97 | 3364 | active |
| Metorial Metorial is an open-source identity and access control plane for AI agents, providing 1200+ verified MCP integrations with centralized auth… | 63 | 3356 | active |
| golang/crypto golang/crypto is the official supplementary cryptography library for the Go programming language, providing packages beyond the standard li… | 77 | 3351 | stable |
| ergochat/ergo Ergo is a modern IRC server (ircd) written in Go that integrates services (NickServ, ChanServ, HostServ) and bouncer functionality such as … | 87 | 3350 | active |
| workos/authkit AuthKit is WorkOS's authentication UI and User Management platform, offering a fully themeable hosted login box or a headless API for build… | 70 | 3346 | active |
| django-oauth/django-oauth-toolkit Django OAuth Toolkit is an OAuth 2.0 authorization server and resource server library for Django projects, built on OAuthLib and RFC 6749 c… | 92 | 3344 | active |
| awslabs/aws-sdk-rust The official AWS SDK for Rust, providing one generated crate per AWS service plus a shared aws-config crate for credential and region loadi… | 94 | 3343 | stable |
| sabre-io/Baikal Baïkal is a lightweight, self-hosted CalDAV and CardDAV server built on sabre/dav for PHP. It provides a web admin interface for managing u… | 91 | 3323 | active |
| OpenFlutter/fluwx Fluwx is a Flutter plugin wrapping the native WeChat SDK, letting Flutter apps call WeChat APIs on Android, iOS, and HarmonyOS. It supports… | 98 | 3321 | active |
| PlayEdu/PlayEdu PlayEdu is a 100% open-source enterprise training system (LMS) built with Java/SpringBoot3 and React18, deployable privately via Docker. Th… | 68 | 3294 | active |
| vouch/vouch-proxy Vouch Proxy is an SSO and OAuth/OIDC authentication proxy for Nginx that uses the auth_request module to protect upstream sites. It support… | 76 | 3283 | active |
| Apache Gravitino Apache Gravitino is a high-performance, geo-distributed, federated metadata lake that provides unified metadata management across diverse d… | 93 | 3257 | active |
| Tink Tink is a multi-language, cross-platform open source cryptographic library from Google that provides secure, easy-to-use APIs for encryptio… | 10 | 13538 | maintenance |
| openid/AppAuth-Android AppAuth for Android is a client SDK for communicating with OAuth 2.0 and OpenID Connect providers from Android apps. It follows RFC 8252 be… | 62 | 3241 | active |
| open-webui/open-terminal A self-hosted remote shell exposed over a REST API, designed to give AI agents and automation tools a dedicated environment to run commands… | 80 | 3220 | active |
| wizarrrr/wizarr Wizarr is a self-hosted web application that automates user invitations and onboarding for media servers like Plex, Jellyfin, Emby, Audiobo… | 97 | 3207 | active |
| Taho Taho is a community-owned Web3 cryptocurrency wallet implemented as a browser extension, positioned as an open-source alternative to MetaMa… | 82 | 3205 | active |
| sideshow/apns2 A Go library for sending push notifications to iOS, macOS, tvOS, and Safari apps via Apple's APNs HTTP/2 provider API. It supports certific… | 34 | 3189 | active |
| tale/headplane Headplane is a feature-complete web UI for Headscale, the self-hosted alternative to Tailscale's WireGuard-based VPN coordination server. I… | 89 | 3181 | active |
| PyroCMS PyroCMS is a modular, open-source content management system and development platform built on the Laravel PHP framework. It provides a resp… | 66 | 3175 | active |
| RolifyCommunity/rolify rolify is a Ruby gem providing simple role management for Rails applications, with support for scoping roles to specific resource objects. … | 48 | 3174 | stable |
| kite-org/kite Kite is a lightweight, modern web-based Kubernetes dashboard that unifies multi-cluster management, resource operations, observability, ent… | 86 | 3172 | active |
| avitorio/outstatic Outstatic is a Git-based CMS that provides a dashboard for writing, editing, and publishing Markdown and MDX content stored in a GitHub rep… | 93 | 3169 | active |
| aliasvault/aliasvault AliasVault is a privacy-first, end-to-end encrypted password manager with a built-in email alias server, letting users create unique identi… | 86 | 3164 | active |
| RustDesk API A self-hosted RustDesk API server written in Go that implements the RustDesk personal API, plus a web admin panel and web client. It suppor… | 38 | 3159 | active |
| gorilla/sessions gorilla/sessions is a Go library providing cookie and filesystem session storage with infrastructure for custom session backends. It offers… | 23 | 3150 | stable |
| helloxz/onenav OneNav is a self-hosted browser bookmark management system built with PHP and SQLite 3 that centralizes bookmarks for access from any devic… | 80 | 3138 | active |
| walinejs/waline Waline is a self-hostable comment system for websites and blogs, consisting of a lightweight JavaScript client and a backend server deploya… | 93 | 3125 | active |
| twmb/franz-go franz-go is a feature-complete, pure Go Apache Kafka client library supporting Kafka 0.8.0 through 4.2+, including producing, consuming, tr… | 77 | 3113 | active |
| davidfowl/TodoApp A sample Todo application built with ASP.NET Core, featuring a Blazor WebAssembly frontend and a Minimal APIs REST backend. It demonstrates… | 59 | 3098 | active |
| OpenSC/OpenSC OpenSC is a set of open-source libraries and command-line tools for working with smart cards, focused on cards that perform cryptographic o… | 76 | 3097 | active |
| ContainerSSH ContainerSSH is an SSH server written in Go that launches on-demand containers in Docker or Kubernetes for each connecting user. It support… | 77 | 3087 | active |
| filegator/filegator FileGator is a free, open-source, self-hosted web application for managing files and folders with multi-user support, roles, and per-user h… | 98 | 3082 | active |
| igniterealtime/Openfire Openfire is an open-source (Apache-2.0) real-time collaboration server implementing the XMPP (Jabber) protocol, written in Java. It provide… | 91 | 3073 | stable |
| RevenueCat Purchases RevenueCat's open-source client SDKs (purchases-ios, react-native-purchases) that wrap StoreKit and Google Play Billing to simplify impleme… | 93 | 3070 | stable |
| jeremykenedy/laravel-auth A complete Laravel 12 starter application with email registration verification, social authentication via Socialite, user roles and permiss… | 98 | 3041 | active |
| Card System A self-hosted PHP-based online card-key (卡密) shop system for selling digital goods and license codes. It integrates with a wide range of pa… | 62 | 3034 | active |
| sigma67/ytmusicapi A Python 3 library that provides an unofficial API client for YouTube Music by emulating the web client's requests, using user cookie data … | 92 | 3031 | active |
| aws-actions/configure-aws-credentials A GitHub Action that configures AWS credential environment variables for use in subsequent workflow steps. It supports OIDC federation for … | 97 | 3013 | active |
| mickasmt/next-saas-stripe-starter An open-source SaaS starter template built with Next.js 14, Prisma, Neon Postgres, Auth.js v5, Stripe, Resend, React Email, and Shadcn/ui. … | 18 | 3004 | active |
| googleapis/google-api-nodejs-client Google's officially supported Node.js client library for accessing Google APIs, with auto-generated endpoints for all APIs listed in the Go… | 95 | 12270 | maintenance |
| laravel/sanctum Laravel Sanctum is a featherweight authentication package for Laravel that issues API tokens and authenticates single-page applications, mo… | 95 | 2986 | stable |
| oauthlib/oauthlib OAuthLib is a Python framework implementing the OAuth 1.0 (RFC 5849) and OAuth 2.0 (RFC 6749) request-signing and authorization logic in a … | 72 | 2982 | stable |
| appleboy/gin-jwt A JWT authentication middleware for the Gin web framework in Go, built on golang-jwt/jwt. It provides login handling, token refresh, and ro… | 97 | 2969 | active |
| pquerna/otp A Go library implementing Time-based (TOTP, RFC 6238) and HMAC-based (HOTP, RFC 4228) one-time password algorithms for adding two-factor au… | 35 | 2960 | stable |
| mikestefanello/pagoda Pagoda is a full-stack web development starter kit and admin panel written in Go, providing authentication, ORM-based entities, sessions, a… | 92 | 2954 | active |
| ASP.NET Boilerplate (ABP) ASP.NET Boilerplate (ABP) is an open-source application framework for building modern web applications on ASP.NET Core and EF Core, with bu… | 89 | 11999 | maintenance |
| Apache Casbin Node-Casbin is an open-source authorization library for Node.js and Browser that enforces access control based on configurable models such … | 91 | 2918 | stable |
| FiloSottile/yubikey-agent yubikey-agent is a seamless ssh-agent that stores SSH keys on YubiKey hardware via the PIV smartcard interface. It runs in the background, … | 32 | 2913 | stable |
| iamxjb/winxin-app-watch-life.net An open-source WeChat Mini Program frontend that connects a WordPress site to WeChat, syncing posts, categories, comments, and media into a… | 52 | 2911 | active |
| ryanlelek/Raneto Raneto is a free, open-source Markdown-powered knowledge base and wiki for Node.js. It serves file-based Markdown content with full-text se… | 64 | 2902 | active |
| googleapis/google-api-ruby-client A set of auto-generated Ruby REST client libraries for Google APIs, built from Discovery Documents, plus the code generator itself. Each cl… | 99 | 2900 | stable |
| overtrue/laravel-wechat A Laravel integration package wrapping the EasyWeChat SDK, providing WeChat (Weixin) capabilities such as official account message handling… | 77 | 2900 | active |
| voidauth/voidauth VoidAuth is an open-source single sign-on (SSO) and user management provider for self-hosted applications, acting as an OIDC provider, prox… | 86 | 2870 | active |
| ArgoZhang/BootstrapAdmin BootstrapAdmin is a free, premium-looking admin control panel built on Bootstrap 4.x and .NET (C#). It provides a ready-made management bac… | 54 | 2868 | active |
| defguard Defguard is a self-hosted zero-trust access management platform combining WireGuard VPN with built-in MFA/2FA, identity and access manageme… | 99 | 2866 | active |
| glauth/glauth GLAuth is a lightweight, secure LDAP authentication server written in Go with configurable backends. It serves as a simple alternative to O… | 93 | 2857 | active |
| picklepete/pyicloud PyiCloud is a Python library that lets developers authenticate with and query iCloud webservices, such as calendar and iPhone (Find My iPho… | 23 | 2847 | active |
| tigshop/Tigshop Tigshop is a 100% open-source enterprise-grade e-commerce mall system available in both Java (SpringBoot3) and PHP (TP8) editions, with a V… | 64 | 2841 | active |
| smithyhq/sqladmin SQLAdmin is a flexible admin dashboard library for SQLAlchemy models that integrates with FastAPI and Starlette applications. It provides C… | 96 | 2835 | active |
| quay/quay Project Quay is an open-source container image registry that builds, stores, and distributes container images. It implements the Docker Reg… | 95 | 2835 | active |
| rainbow-me/rainbowkit RainbowKit is a React library for adding wallet connection UI and management to Ethereum dapps. It is built on wagmi and viem and provides … | 80 | 2835 | active |
| Loongphy/codex-auth codex-auth is a command-line tool for switching between and managing multiple Codex accounts across the Codex CLI, VS Code extension, and C… | 83 | 2829 | active |
| bezhanSalleh/filament-shield A Filament plugin that adds role and permission-based access management to Filament admin panels, built on spatie/laravel-permission. It ge… | 95 | 2828 | active |
| PowerDNS-Admin/PowerDNS-Admin PowerDNS-Admin is a self-hosted web interface for managing the PowerDNS Authoritative Server. It provides DNS zone and record management wi… | 96 | 2819 | active |
| Parse Platform The official Apple SDK for the Parse Platform, providing client access to Parse Server from iOS, iPadOS, macOS, watchOS, and tvOS apps. It … | 80 | 2807 | active |
| Smaug6739/Alexandrie Alexandrie is a self-hosted, open-source knowledge base and note-taking application with an advanced Markdown/LaTeX editor, positioned as a… | 96 | 2777 | active |
| Misago Misago is a full-featured, modern forum application built with Django, Python, and HTMX, designed to be fast, scalable, and responsive. It … | 88 | 2777 | active |
| Codehagen/Badget Badget is an open-source, AI-powered personal finance management platform for tracking accounts, expenses, and budgets with a unified dashb… | 38 | 2774 | active |
| permissions-dispatcher/PermissionsDispatcher PermissionsDispatcher is an annotation-based library for handling Android runtime permissions in Kotlin and Java. It generates boilerplate-… | 23 | 11151 | maintenance |
| medplum/medplum Medplum is an open-source developer platform for building compliant healthcare applications, providing a FHIR-native clinical data reposito… | 95 | 2746 | active |
| JPressProjects/jpress JPress is an open-source, WordPress-like content management system written in Java, used to power 100,000+ websites including government ag… | 23 | 2733 | stable |
| awslabs/amazon-ecr-credential-helper A Docker credential helper that automatically fetches AWS credentials for Amazon Elastic Container Registry (ECR) during docker push and do… | 78 | 2725 | stable |
| stumpapp/stump Stump is a free, open-source, self-hostable media server for comics, manga, ebooks, and digital books with OPDS v1.2/v2.0 support. It is bu… | 97 | 2724 | active |
| Naccl/NBlog NBlog is a self-hosted, front-end/back-end separated personal blog system built with Spring Boot (Java) and Vue. It includes a public blog … | 47 | 2704 | active |
| X-SpringBoot X-SpringBoot is a lightweight Java rapid development platform built on Spring Boot 3 and JDK 21 with virtual threads, offering RBAC permiss… | 53 | 2696 | active |
| MetapriseAI/OrgKernel OrgKernel is an open-source trust layer for AI agents providing cryptographic agent identity (Ed25519), scoped execution tokens, SHA-256 ha… | 52 | 2693 | active |
| vmware/open-vm-tools open-vm-tools is VMware's open-source implementation of VMware Tools, a suite of services, plugins, and kernel modules that improve managem… | 72 | 2679 | stable |
| sunscrapers/djoser Djoser is a Python library providing REST endpoints for Django's authentication system via Django REST Framework. It offers views for regis… | 82 | 2678 | active |
| scambra/devise_invitable A Ruby gem that extends the Devise authentication framework for Rails with invitation functionality. It lets authenticated users invite oth… | 75 | 2674 | active |