Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Apache Casbin jCasbin is an Apache-licensed Java authorization library that enforces access control using models such as ACL, RBAC, and ABAC defined in c… | 86 | 2650 | stable |
| devopshydclub/vprofile-project A Java Spring MVC web application (vProfile) used as a sample multi-tier project for DevOps training by DevOps Shack. It serves as a practi… | 32 | 2647 | active |
| Visual Studio Code A VS Code extension by Microsoft/GitHub that lets developers review and manage GitHub pull requests and issues directly inside the editor. … | 94 | 2631 | active |
| instantdb/instant Instant is an open-source backend platform (the 'Modern Firebase') providing a real-time relational database, auth, permissions, storage, p… | 67 | 10546 | maintenance |
| GPTLink GPTLink is a self-hosted PHP (Hyperf) + Vue application for quickly deploying a commercial AI chat website with user accounts, paid plans, … | 61 | 2627 | active |
| alexedwards/scs SCS is an HTTP session management library for Go that automatically loads and saves session data via middleware. It supports 19 server-side… | 43 | 2623 | stable |
| auth0/angular2-jwt An Angular library that provides an HttpInterceptor to automatically attach JSON Web Tokens to HttpClient requests. It handles token attach… | 67 | 2622 | active |
| ory/fosite Fosite is a security-first, extensible OAuth 2.0 and OpenID Connect SDK for Go, implementing RFC 6749, RFC 6819, PKCE, and OpenID Connect C… | 54 | 2618 | active |
| FreeRADIUS/freeradius-server FreeRADIUS is a high-performance, highly configurable multi-protocol policy server supporting RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, wr… | 84 | 2614 | stable |
| ueberdosis/hocuspocus Hocuspocus is a Yjs CRDT-based WebSocket backend for conflict-free real-time collaboration, written in TypeScript. It provides a server, cl… | 97 | 2611 | active |
| youlaitech/vue3-element-admin An enterprise-grade admin dashboard frontend template built with Vue 3, Vite, TypeScript, and Element Plus, serving as the Vue 3 successor … | 70 | 2607 | active |
| lexik/LexikJWTAuthenticationBundle A Symfony bundle that provides JSON Web Token (JWT) authentication for Symfony APIs. It handles token creation, validation, and integration… | 65 | 2605 | stable |
| tbruyelle/RxPermissions An Android library that wraps the Android M runtime permission model in RxJava2 reactive streams. It lets developers request permissions li… | 10 | 10393 | maintenance |
| liukuo362573/YiShaAdmin YiShaAdmin is an open-source admin management system built on .NET Core MVC with a clean Bootstrap/jQuery UI. It provides role-based permis… | 32 | 2578 | active |
| firebase/firebase-android-sdk The official Firebase Android SDK, containing the source code for Firebase's Android libraries such as Firestore, Realtime Database, Cloud … | 77 | 2570 | active |
| sismics/docs Teedy (formerly Sismics Docs) is an open-source, lightweight document management system (DMS) for individuals and businesses. It offers OCR… | 63 | 2566 | active |
| Azure/azure-sdk-for-java The official Azure SDK for Java, providing client and management libraries for consuming and administering Azure services. It follows the A… | 96 | 2564 | active |
| SPIFFE SPIFFE is a framework and set of standards for issuing cryptographic identities to workloads, and SPIRE (the SPIFFE Runtime Environment) is… | 96 | 2559 | stable |
| jordan-dalby/ByteStash ByteStash is a self-hosted web application for storing, organizing, and managing code snippets, built with React and Node.js/Express. It su… | 90 | 2559 | active |
| samanhappy/mcphub MCPHub is a self-hosted hub that centrally manages multiple Model Context Protocol (MCP) servers and exposes them through unified Streamabl… | 84 | 2558 | active |
| pac4j pac4j is a Java security engine for authenticating users, managing profiles, and enforcing authorizations across web applications and servi… | 77 | 2535 | stable |
| apache/fineract Apache Fineract is an open-source, cloud-ready core banking platform written in Java, providing client management, loan and savings portfol… | 90 | 2533 | stable |
| Warden Warden is a general-purpose authentication framework for Rack-based Ruby web applications. It provides a flexible middleware layer for hand… | 65 | 2514 | active |
| aspnet-contrib/AspNet.Security.OAuth.Providers A collection of ASP.NET Core authentication middleware providing OAuth 2.0 social login providers such as GitHub, Twitter/X, and Dropbox. I… | 77 | 2510 | active |
| theoephraim/node-google-spreadsheet A popular JavaScript/TypeScript wrapper library for the Google Sheets API (v4). It provides cell-based and row-based read/write operations,… | 90 | 2494 | active |
| Symfony Security SecurityBundle is the official Symfony bundle that integrates the Security component into the Symfony full-stack framework. It provides con… | 93 | 2490 | stable |
| coreos/go-oidc go-oidc is a mature Go client library for OpenID Connect, built on top of golang.org/x/oauth2. It enables verifying ID tokens and identifyi… | 91 | 2489 | stable |
| googlesamples/easypermissions EasyPermissions is a Java wrapper library that simplifies Android runtime (M+) system permission requests and handling in Activities and Fr… | 10 | 9854 | maintenance |
| Google APIs Client Library for PHP The official Google APIs client library for PHP, enabling server-side access to Google APIs such as Gmail, Drive, and YouTube. It is comple… | 93 | 9812 | maintenance |
| Let's Chat Let's Chat is a self-hosted, persistent team chat application built on Node.js and MongoDB, designed for small teams. It supports multiple … | 10 | 9797 | maintenance |
| go-ldap/ldap A Go library providing basic LDAP v3 client functionality, implementing RFC 4511 and related specifications. It supports connecting to LDAP… | 90 | 2460 | stable |
| Utterances Utterances is a lightweight, open-source comments widget for blogs and wikis that stores comments as GitHub issues. It embeds via a script … | 32 | 9697 | maintenance |
| FullAgent/fulling Fulling is an AI-powered full-stack engineer agent platform that provides dedicated AI workspaces combining skills, files, memory, and runt… | 64 | 2445 | active |
| huanzi-qch/base-admin Base Admin is a simple, general-purpose Java admin management system built on Spring Boot, Spring Security, Spring Data JPA, Thymeleaf, and… | 69 | 2444 | active |
| lestrrat-go/jwx A comprehensive Go library implementing the full JOSE family of standards (JWA, JWE, JWK, JWS, JWT) for signing, verifying, encrypting, and… | 98 | 2440 | active |
| HDInnovations/UNIT3D UNIT3D is a self-hosted private torrent tracker application built with Laravel, Livewire, and AlpineJS. It provides a feature-rich platform… | 83 | 2439 | active |
| Supabase CLI Supabase is an open‑source Postgres development platform that provides a hosted database, authentication, auto‑generated REST and GraphQL A… | 95 | 2438 | active |
| Firebase Admin SDK for PHP An unofficial Firebase Admin SDK for PHP that provides access to Firebase services like Authentication, Realtime Database, Firestore, and C… | 97 | 2435 | active |
| Documize Community Documize Community is a self-hosted, enterprise-grade knowledge management and wiki application built with Go and EmberJS, distributed as a… | 57 | 2422 | active |
| C‑Shopping C-Shopping is an open-source e-commerce shopping platform built with Next.js 14, Tailwind CSS, Headless UI, Redux Toolkit with RTK Query, J… | 22 | 2420 | active |
| panva/openid-client openid-client is a TypeScript library providing OAuth 2.0 and OpenID Connect client APIs for JavaScript runtimes including Node.js, Deno, b… | 95 | 2419 | stable |
| AWS Amplify AWS Amplify is a declarative JavaScript library for frontend and mobile developers building cloud-enabled applications, providing easy inte… | 95 | 9551 | maintenance |
| build-admin/buildadmin BuildAdmin is a full-stack admin management system built with Vue3 (setup) + TypeScript + Vite + Pinia + Element Plus on the frontend and T… | 92 | 2391 | active |
| thomseddon/traefik-forward-auth A minimal forward authentication service that adds Google/OpenID Connect OAuth-based SSO login in front of any HTTP service behind the Trae… | 53 | 2391 | active |
| dingo/api Dingo API is a PHP package that provides tools for building RESTful APIs on top of the Laravel and Lumen frameworks. It offers content nego… | 23 | 9378 | maintenance |
| int128/kubelogin kubelogin is a kubectl plugin (kubectl oidc-login) for Kubernetes OpenID Connect authentication, running as a client-go credential plugin. … | 94 | 2378 | active |
| pockethub/PocketHub PocketHub is the community-maintained Android client for GitHub, continuing the now-defunct official GitHub Android app. It lets users brow… | 23 | 9363 | maintenance |
| apache/kyuubi Apache Kyuubi is a distributed, multi-tenant Thrift JDBC/ODBC gateway that provides serverless SQL access to data warehouses and lakehouses… | 90 | 2367 | stable |
| sergiodxa/remix-utils Remix Utils is a TypeScript collection of utility functions and types for building web apps with Remix and React Router, covering areas lik… | 88 | 2367 | active |
| hwi/HWIOAuthBundle A Symfony bundle that adds OAuth 1.0a and OAuth 2.0 authentication support, with built-in support for 59 providers such as Google, GitHub, … | 71 | 2361 | active |
| gitblit-org/gitblit Gitblit is an open-source, pure Java Git server for managing, viewing, and serving Git repositories over GIT, HTTP, and SSH transports. It … | 31 | 2361 | active |
| keepassxreboot/keepassxc-browser KeePassXC-Browser is a WebExtension that integrates the KeePassXC password manager with Firefox, Chrome/Chromium, and Edge via native messa… | 99 | 2358 | active |
| gotd/td gotd/td is a full MTProto 2.0 Telegram API client library written in pure Go, supporting both user accounts and bots with generated binding… | 98 | 2358 | stable |
| cnodejs/nodeclub Nodeclub is an open-source community/forum system built with Node.js, MongoDB, and Redis, powering the CNode Chinese Node.js community. It … | 53 | 9278 | maintenance |
| sddm/sddm SDDM is a QML-based display manager (login screen) for Linux supporting both X11 and Wayland sessions. It is highly themeable via QtQuick, … | 63 | 2356 | active |
| maticzav/nookies Nookies is a lightweight set of cookie helpers for Next.js that supports parsing, setting, and destroying cookies on both the client and se… | 66 | 2351 | stable |
| MasterKale/SimpleWebAuthn SimpleWebAuthn is a collection of TypeScript-first libraries (@simplewebauthn/server and @simplewebauthn/browser) that simplify adding WebA… | 96 | 2349 | active |
| 404labfr/laravel-impersonate A Laravel package that lets authenticated users (typically admins) impersonate other users of the application with a single method call or … | 61 | 2345 | active |
| Artalk Artalk is a self-hosted, open-source comment system for blogs, websites, and web applications, with a lightweight Vanilla JS client and a G… | 83 | 2344 | active |
| kubernetes-sigs/aws-iam-authenticator A tool that lets users authenticate to Kubernetes clusters using AWS IAM credentials instead of separate certificates or tokens. It runs as… | 100 | 2337 | active |
| LuckPerms LuckPerms is a permissions plugin for Minecraft servers that lets admins control player access by creating groups and assigning permissions… | 77 | 2328 | stable |
| Vue Auth A lightweight, plugin-based authentication library for Vue.js (Vue 2 and Vue 3) that handles login, registration, and token management in s… | 10 | 2327 | active |
| Locomotive CMS Locomotive is an open-source Ruby on Rails CMS platform for creating, publishing, and editing websites, with native multi-site support and … | 44 | 2321 | active |
| Paymenter/Paymenter Paymenter is a free, open-source billing and webshop platform built for hosting companies, on PHP/Laravel. It automates subscriptions, invo… | 95 | 2311 | active |
| auth0/nextjs-auth0 The Auth0 Next.js SDK is a TypeScript library for adding user authentication to Next.js applications via Auth0. It handles sign-in, sign-ou… | 98 | 2310 | active |
| benedmunds/CodeIgniter-Ion-Auth Ion Auth is a simple and lightweight authentication library for the CodeIgniter 4 PHP framework. It provides user registration, login, grou… | 32 | 2306 | stable |
| Azure/azure-sdk-for-js The official Azure SDK for JavaScript and TypeScript, providing client libraries for consuming Azure services and management libraries for … | 96 | 2302 | active |
| a466350665/smart-sso Smart-SSO is a lightweight single sign-on (SSO) authentication and authorization center built on Spring Boot, implementing the OAuth2 autho… | 66 | 2299 | active |
| yuezk/GlobalProtect-openconnect A GlobalProtect VPN client for Linux built on OpenConnect, offering both a CLI and a Tauri-based GUI. It supports SSO authentication includ… | 100 | 2295 | active |
| bpatrik/pigallery2 PiGallery2 is a fast, directory-first photo gallery website built with Node.js and Angular, designed to run on low-resource servers like th… | 78 | 2295 | active |
| yeojz/otplib otplib is a TypeScript-first library for generating and verifying one-time passwords (HOTP and TOTP) for two-factor authentication, compati… | 96 | 2292 | active |
| googleapis/google-api-python-client The official Python client library for Google's discovery-based APIs, providing simple and flexible access to many Google APIs with built-i… | 98 | 8943 | maintenance |
| YXJ2018/SpringBoot-Vue-OnlineExam An online examination system built with a decoupled SpringBoot backend and Vue + Element-UI frontend. It supports exam-taking, practice mod… | 35 | 2278 | active |
| santigarcor/laratrust Laratrust is a PHP package for Laravel that manages roles and permissions (RBAC/ACL) for users, with support for multiple user models, team… | 67 | 2274 | active |
| nest-admin A Vue 3 + TypeScript admin dashboard template built with Vite and Ant Design Vue 4, featuring an RBAC permission system, JSON Schema dynami… | 62 | 2268 | active |
| ory/polis Ory Polis (formerly BoxyHQ Jackson) is an open-source Enterprise SSO service that bridges SAML and OpenID Connect login flows to OAuth 2.0/… | 82 | 2266 | active |
| zoujingli/ThinkAdmin ThinkAdmin is a minimal admin management system built on ThinkPHP 6/8 with annotation-based RBAC permissions, async multi-process tasks, an… | 71 | 2264 | active |
| Caddy Security (AuthCrunch) A security app and plugin for Caddy v2 providing authentication, authorization, and accounting (AAA). It supports Form-Based, Basic, Local,… | 98 | 2254 | active |
| kittinan/spotify-github-profile A service that generates an SVG 'now playing' card showing your current Spotify playback for embedding in a GitHub profile README. It runs … | 77 | 2254 | active |
| mizhexiaoxiao/vue-fastapi-admin A modern, lightweight admin management platform built with FastAPI, Vue3, and Naive UI, featuring RBAC permission management, dynamic routi… | 39 | 2254 | active |
| FormidableLabs/react-native-app-auth A React Native bridge around the native AppAuth-iOS and AppAuth-Android SDKs for communicating with OAuth 2.0 and OpenID Connect providers.… | 94 | 2252 | active |
| Nan's BBS Nan's BBS (南生论坛) is an open-source Java forum/community platform styled after Juejin, built with SpringBoot on the backend and Vue on the f… | 70 | 2250 | active |
| saschagrunert/webapp.rs A complete web application written entirely in Rust, using Leptos (WebAssembly with SSR and hydration) for the frontend and Axum for the ba… | 76 | 2247 | active |
| Versent/saml2aws saml2aws is a Go CLI tool that authenticates against SAML-based identity providers such as ADFS and PingFederate and exchanges the SAML ass… | 46 | 2246 | active |
| zenhosta/9drive 9Drive is a self-hosted storage gateway web app that unifies multiple Google Drive accounts (and S3-compatible providers) into one virtual … | 55 | 2204 | active |
| envoyproxy/ai-gateway Envoy AI Gateway is an open-source, Kubernetes-native gateway built on Envoy Gateway that manages traffic from application clients to Gener… | 85 | 2203 | stable |
| Remix Auth Remix Auth is a complete open-source authentication library for Remix and React Router applications, inspired by Passport.js and built on t… | 73 | 2203 | stable |
| numman-ali/opencode-openai-codex-auth An OpenCode plugin that authenticates via OpenAI's official ChatGPT OAuth flow, letting users with ChatGPT Plus/Pro subscriptions access GP… | 49 | 2203 | active |
| NatLabRockies/api-umbrella API Umbrella is an open source API management platform that sits as a layer above existing web service APIs. It standardizes access control… | 64 | 2199 | active |
| ovh/the-bastion The Bastion is a self-hosted SSH bastion/gateway that acts as the single entry point for operational teams to access infrastructure devices… | 84 | 2189 | stable |
| 0x2E/fusion Fusion is a lightweight, self-hosted RSS reader with a responsive web UI, unread tracking, bookmarks, search, and feed group management. It… | 88 | 2188 | active |
| jwt-dotnet/jwt Jwt.Net is a C# library for generating, encoding, decoding, and validating JSON Web Tokens (JWT) per RFC 7519. It includes fluent builder A… | 83 | 2187 | stable |
| ranisalt/node-argon2 Node.js bindings to the reference Argon2 password-hashing implementation, supporting Argon2i, Argon2d, and Argon2id. It provides a simple a… | 88 | 2185 | stable |
| ruby-oauth/oauth2 A Ruby gem implementing OAuth 2.0 and 2.1 client functionality, including OpenID Connect (OIDC) support. It handles token requests, grant t… | 93 | 2179 | active |
| Baseflow/flutter-permission-handler A Flutter plugin providing a cross-platform API to request and check device permissions on iOS and Android. It follows the federated plugin… | 75 | 2176 | stable |
| RichardKnop/go-oauth2-server A standalone, specification-compliant OAuth 2.0 authorization server written in Go. It implements the standard grant types (authorization c… | 44 | 2150 | active |
| Python Social Auth The Django integration component of the python-social-auth ecosystem, providing social authentication and registration via OAuth2 and other… | 95 | 2146 | active |
| dotnetcore/WebApiClient WebApiClient is a declarative REST API client library for .NET where developers define HTTP clients by declaring C# interfaces. It supports… | 76 | 2136 | active |
| pycontribs/jira A Python library that wraps the Jira REST API, supporting authentication methods like basic, token, OAuth, cookie, and Kerberos. It include… | 77 | 2133 | active |
| ContiNew Admin ContiNew Admin is a full-stack, multi-tenant admin management framework/scaffold built on Spring Boot 3 (Java 17) and Vue 3 with Arco Desig… | 78 | 2131 | active |