Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| phw198/OutlookGoogleCalendarSync A free, open-source Windows application that synchronises calendars between Outlook (including Exchange/Outlook Online) and Google Calendar… | 72 | 2131 | active |
| owncloud/ocis ownCloud Infinite Scale (oCIS) is a self-hosted file sync and share server platform written in Go, serving as the next-generation foundatio… | 95 | 2127 | active |
| zone-eu/wildduck WildDuck is a scalable, no-single-point-of-failure IMAP/POP3 email server built on Node.js that stores all mail in sharded and replicated M… | 98 | 2109 | active |
| authorizerdev/authorizer Authorizer is an open-source, self-hosted authentication and authorization server written in Go, providing OAuth2/OIDC, SAML SSO, MFA, soci… | 97 | 2107 | active |
| akveo/nebular Nebular is a customizable Angular UI component library based on the Eva Design System, offering 4 visual themes, 35+ components, and a powe… | 57 | 8119 | maintenance |
| Keats/jsonwebtoken A Rust library for creating and decoding JSON Web Tokens (JWTs) in a strongly typed way, supporting HS256/384/512, RS256/384/512, PS256/384… | 76 | 2101 | active |
| authgear/authgear-server Authgear is an open-source customer identity and access management (CIAM) platform serving as a self-hostable alternative to Auth0, Clerk, … | 98 | 2098 | active |
| phpbb/phpbb phpBB is a free, open-source bulletin board (forum) application written in PHP, used to host online discussion communities. This repository… | 75 | 2097 | stable |
| macrozheng/mall-tiny mall-tiny is a rapid development scaffold based on SpringBoot and MyBatis-Plus with complete role-based permission management built in. It … | 54 | 2093 | active |
| realworld-apps/aspnetcore-realworld-example-app An ASP.NET Core backend implementation of the RealWorld (Medium.com clone) spec, demonstrating CRUD, JWT authentication, pagination, and ve… | 74 | 2089 | active |
| mkhorasani/Streamlit-Authenticator A Python library providing secure authentication widgets and credential management for Streamlit applications. It supports login, registrat… | 60 | 2086 | active |
| OpenPubkey opkssh is a Go CLI tool that enables SSH authentication via OpenID Connect identities instead of long-lived SSH keys. It generates SSH publ… | 88 | 2083 | active |
| apache/polaris Apache Polaris is an open-source, fully-featured catalog for Apache Iceberg tables that implements the Iceberg REST catalog API. It provide… | 86 | 2082 | active |
| emersion/go-smtp An ESMTP client and server library for Go implementing RFC 5321 with extensions like AUTH, PIPELINING, and LMTP. It improves on the frozen … | 90 | 2052 | active |
| coderaiser/cloudcmd Cloud Commander is a web-based file manager with a dual-panel interface, built-in console, and text editors, served by a Node.js server. It… | 93 | 2034 | active |
| openid/AppAuth-iOS AppAuth-iOS is an Objective-C client SDK for iOS, macOS, and tvOS that implements OAuth 2.0 and OpenID Connect authorization flows. It foll… | 87 | 2032 | stable |
| sahat/satellizer Satellizer is a token-based authentication module for AngularJS with built-in support for major OAuth providers (Google, Facebook, Twitter,… | 23 | 7787 | maintenance |
| anza-xyz/wallet-adapter A modular TypeScript library of wallet adapters and UI components for integrating Solana wallets into web applications. It provides React c… | 94 | 2030 | active |
| projectsend/projectsend ProjectSend is a free, open-source, self-hosted web application for sharing files privately with clients, partners, and teams. Each client … | 98 | 2028 | stable |
| hj01857655/kiro-account-manager A Tauri 2.x desktop application for centrally managing Kiro IDE accounts, with one-click account switching, quota monitoring, and token aut… | 76 | 2028 | active |
| Tencent/soter TENCENT SOTER is a biometric authentication standard and platform for Android, developed by Tencent and used in WeChat fingerprint payment.… | 47 | 2027 | active |
| Go LDAP Admin A modern web-based admin panel for managing OpenLDAP servers, built with a Go (Gin + Gorm) backend and Vue frontend. It also syncs organiza… | 78 | 2025 | active |
| vercel/nextjs-subscription-payments A Next.js SaaS subscription starter template integrating Supabase authentication and database with Stripe Checkout, customer portal, and we… | 10 | 7721 | maintenance |
| xuxueli/xxl-sso XXL-SSO is a lightweight, distributed single sign-on (SSO) framework for Java/Spring applications. It supports login, permission, and role … | 91 | 2011 | active |
| Google2FA A PHP library implementing Google-compatible two-factor authentication via HMAC-based (HOTP, RFC 4226) and time-based (TOTP, RFC 6238) one-… | 63 | 2009 | stable |
| ambethia/recaptcha A Ruby gem providing helper methods for Google's reCAPTCHA API, supporting v2 checkbox, invisible, and v3 score-based verification. It offe… | 68 | 2006 | stable |
| bcrypt-ruby/bcrypt-ruby bcrypt-ruby is a Ruby binding to the OpenBSD bcrypt() password hashing algorithm, provided as a gem with a native C extension. It lets deve… | 76 | 1994 | stable |
| EsperoTech/yaade Yaade is an open-source, self-hosted, collaborative API development environment designed as a Postman alternative. It supports REST and Web… | 47 | 1990 | active |
| veops/oneterm OneTerm is a lightweight, flexible enterprise bastion host (jump server) built on the 4A model: authentication, authorization, account, and… | 93 | 1985 | active |
| manfredsteyer/angular-oauth2-oidc A TypeScript library adding OAuth 2, OAuth 2.1, and OpenID Connect support to Angular applications. It handles token issuance, validation, … | 87 | 1983 | stable |
| 1Password/for-open-source 1Password for Open Source is a program that grants eligible open source projects a free 1Password Teams account for securely storing and sh… | 67 | 1982 | active |
| mikenicholson/passport-jwt passport-jwt is a Passport authentication strategy for Node.js that authenticates HTTP requests using JSON Web Tokens. It extracts a JWT fr… | 32 | 1981 | active |
| songloft-org/songloft Songloft (formerly MiMusic) is a free, ad-free, plugin-based self-hosted music server written in Go, designed for managing music you legall… | 84 | 1979 | active |
| mohamedsamara/mern-ecommerce A fullstack MERN (MongoDB, Express, React, Node.js) ecommerce application with buyer, seller, and admin flows. It includes product/category… | 32 | 1979 | active |
| cossacklabs/themis Themis is a cross-platform, high-level cryptographic library providing ready-made building blocks for secure data storage, encrypted messag… | 69 | 1978 | stable |
| dromara/MaxKey MaxKey is an open-source IAM/IDaaS product providing Single Sign-On (SSO), identity management, and RBAC-based access control. It supports … | 96 | 1974 | active |
| rsc/2fa A command-line two-factor authentication agent written in Go that stores TOTP and HOTP keys and generates one-time authentication codes. Ke… | 32 | 1970 | stable |
| gfast GFast is a full-stack, front-end/back-end separated admin management system built on GoFrame 2.x and Vue3 + Element Plus. It ships with RBA… | 67 | 1967 | active |
| nimbusdotstorage/Nimbus Nimbus is an open-source cloud file storage application built with TypeScript and Bun, designed as a modern alternative to commercial cloud… | 38 | 1967 | active |
| dghubble/gologin gologin is a Go library providing chainable http.Handler implementations for login flows with OAuth1 and OAuth2 providers like Google, GitH… | 67 | 1958 | stable |
| oidc-client-ts oidc-client-ts is a TypeScript library providing OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript application… | 81 | 1957 | active |
| piccolo-orm/piccolo Piccolo is a fast, user-friendly ORM and query builder for Python with first-class asyncio support. It includes batteries like migrations, … | 93 | 1946 | active |
| lenve/VBlog VBlog (V部落) is a multi-user blog management platform built with Vue on the frontend and Spring Boot with Spring Security, MyBatis, and MySQ… | 32 | 7403 | maintenance |
| dchapyshev/aspia Aspia is a free open-source remote desktop application with file transfer, remote terminal, system information, text chat, and video record… | 99 | 1945 | active |
| jeremyevans/rodauth Rodauth is Ruby's most advanced authentication framework, providing a comprehensive set of composable authentication features built on the … | 77 | 1944 | stable |
| ERC-4337 Account Abstraction reference implementation The reference implementation of ERC-4337 account abstraction for Ethereum, providing the singleton EntryPoint contract, base classes for sm… | 52 | 1942 | active |
| moul/sshportal sshportal is a transparent SSH bastion (jump host) server written in Go that manages users, hosts, and access control without requiring a t… | 66 | 1941 | active |
| autoclaw-cc/xiaohongshu-skills A set of AI agent skills (SKILL.md format) plus a Chrome extension that automates Xiaohongshu (RED) using your real logged-in browser sessi… | 64 | 1938 | active |
| Shopify/shopify_app A Rails Engine gem by Shopify that provides generators, modules, and mixins for building Rails applications embedded in the Shopify Admin. … | 88 | 1934 | active |
| fastadminnet/fastadmin FastAdmin is a rapid backend admin development framework built on ThinkPHP and Bootstrap (with AdminLTE). It provides one-click CRUD genera… | 77 | 1929 | active |
| BroadleafCommerce/BroadleafCommerce Broadleaf Commerce Community Edition is an open-source e-commerce framework written in Java on top of the Spring framework, providing a rob… | 67 | 1926 | active |
| O365/python-o365 A Python library providing a Pythonic wrapper around the Microsoft Graph and Office 365 REST APIs. It supports email, calendar, contacts, O… | 65 | 1924 | active |
| TweetNaCl.js TweetNaCl.js is a JavaScript port of the TweetNaCl/NaCl cryptographic library, providing high-level APIs for secret-key and public-key auth… | 36 | 1923 | stable |
| mainmatter/ember-simple-auth Ember Simple Auth is a lightweight library for implementing authentication and authorization in Ember.js applications. It maintains a clien… | 94 | 1905 | active |
| zitadel/oidc A Go library implementing both the OpenID Connect client (Relying Party) and server (OpenID Provider) sides of the OIDC/OAuth2 standards, c… | 94 | 1900 | active |
| simple-salesforce/simple-salesforce Simple Salesforce is a low-level Python client for the Salesforce.com REST and APEX APIs, returning API JSON responses as dictionaries. It … | 87 | 1893 | active |
| dzikoysk/reposilite Reposilite is a lightweight, self-hosted Maven repository manager for JVM artifacts, written in Kotlin as a simpler alternative to Nexus, A… | 97 | 1889 | active |
| Bullet Train Bullet Train is an open-source Ruby on Rails application template for building SaaS products. It provides a batteries-included starting poi… | 90 | 1889 | active |
| rafsoh/dimeApp Dime is a free, open-source personal expense tracker and budgeting app for iPhone, built in SwiftUI following iOS design guidelines. It off… | 34 | 1888 | active |
| googleapis/google-auth-library-nodejs Google's officially supported Node.js client library for OAuth 2.0 authentication and authorization with Google APIs. It supports Applicati… | 10 | 1884 | stable |
| cloudflare/workers-oauth-provider An OAuth 2.1 provider library for Cloudflare Workers that adds authorization-server capabilities to HTTP APIs and remote MCP servers. It ha… | 87 | 1881 | active |
| jazzband/django-two-factor-auth A Django package providing complete two-factor authentication built on top of django-otp and Django's built-in auth framework. It supports … | 79 | 1879 | active |
| Parse Platform The official Android SDK for the Parse Platform, providing access to Parse Server backends from Android apps. It offers data storage, user … | 62 | 1879 | active |
| Symfony Security The core library of the Symfony Security component, providing infrastructure for authentication tokens, user providers, role hierarchies, a… | 93 | 1877 | stable |
| bugy/script-server Script-server is a self-hosted web application that exposes existing shell/Python scripts through a generated web UI, handling parameters, … | 69 | 1877 | active |
| iMerica/dj-rest-auth dj-rest-auth provides drop-in authentication and registration endpoints for Django REST Framework, including login, logout, password manage… | 74 | 1876 | active |
| retspen/webvirtcloud WebVirtCloud is a Django-based web interface for managing QEMU/KVM virtualization hosts via the libvirt API. It lets admins create, update,… | 66 | 1876 | active |
| lazaronixon/authentication-zero A Rails generator that scaffolds a complete, pre-built authentication system directly into a Rails application (web or API-only), following… | 34 | 1872 | active |
| guchengwuyue/yshop-crm YSHOP-CRM is a self-hosted, multi-tenant CRM sales management system with WeCom (Enterprise WeChat) SCRM integration, built as a Spring Boo… | 77 | 1859 | active |
| magma/magma Magma is an open-source mobile core network platform that provides an extendable packet core (EPC/5G core) for network operators, consistin… | 60 | 1858 | active |
| Azure/azure-sdk-for-go The official Azure SDK for Go, providing client and management modules for interacting with Azure services from Go applications. It include… | 95 | 1857 | active |
| Place1/wg-access-server wg-access-server is a single-binary WireGuard VPN server with a built-in web UI for managing and registering devices. It supports user auth… | 32 | 1850 | active |
| sinaweibosdk/weibo_android_sdk The official Sina Weibo Android SDK, providing third-party Android apps with OAuth2.0 authorization (SSO via the Weibo client or WebView) a… | 50 | 1848 | active |
| h44z/wg-portal WireGuard Portal is a self-hosted, web-based configuration portal for managing WireGuard VPN servers and peers. It is a single Go binary wi… | 93 | 1847 | active |
| TastSong/CrazyCar Crazy Car is an open-source online multiplayer racing game built with Unity, serving as a complete networked game solution. It combines a U… | 71 | 1846 | active |
| nilsteampassnet/TeamPass TeamPass is a free, self-hosted collaborative password manager written in PHP/MySQL, offering folder-level access control, AES-256-GCM auth… | 93 | 1827 | active |
| keldaanCommunity/pokemonAutoChess An open-source, non-profit fan-made Pokemon auto chess game playable in the browser. It is a full-stack TypeScript application using MongoD… | 92 | 1823 | active |
| ArtisanCloud/PowerWeChat PowerWeChat is a comprehensive WeChat SDK for Go covering Mini Programs, WeChat Pay, WeCom (Enterprise WeChat), and Official Accounts APIs.… | 89 | 1818 | active |
| gtxx3600/GPTSession2CPAandSub2API A pure client-side single-page web tool that converts ChatGPT Web session JSON into import formats for tools like CPA, sub2api, Cockpit Too… | 50 | 1816 | active |
| andrewsbarbaro/for-the-badge For the Badge is a web application for creating and sharing custom SVG badges with custom text, colors, and icons, famous for its 'badges f… | 75 | 1813 | active |
| mantisbt/mantisbt MantisBT is an open-source, self-hosted web-based bug tracker and issue management system written in PHP. It offers per-project role-based … | 77 | 1809 | stable |
| fwdcloudsec/granted Granted is a Go-based CLI application that simplifies finding and assuming AWS IAM roles across multiple accounts. It encrypts cached SSO c… | 86 | 1806 | active |
| Part-DB Part-DB is an open-source, self-hosted web application for managing inventories of electronic components, tracking parts with categories, f… | 100 | 1801 | active |
| tuigreet/tuigreet tuigreet is a terminal-based graphical console greeter for greetd, providing a login interface with session management, user selection, and… | 96 | 1801 | active |
| all-in-aigc/aicover A full-stack Next.js web application that generates AI-designed cover images using DALL-E 3. It ships with user auth (Clerk), payments (Str… | 26 | 1800 | active |
| pyeve/eve Eve is an open-source Python REST API framework built on Flask that lets you build fully featured, customizable RESTful web services with m… | 62 | 6746 | maintenance |
| Heavrnl/nexus-terminal Nexus Terminal is a modern web-based SSH/RDP/VNC client with a self-hosted Node.js backend and an optional standalone desktop app. It offer… | 88 | 1797 | active |
| rethinkdb/horizon Horizon is an open-source realtime backend platform for JavaScript web and mobile apps, built on top of RethinkDB. It bundles a middleware … | 65 | 6731 | maintenance |
| Todolist Web Application A Laravel 11 blog application demonstrating best practices and framework features such as authentication, APIs with Sanctum, broadcasting, … | 32 | 1793 | active |
| vercel-labs/coding-agent-template A deployable Next.js web application template for building multi-agent AI coding platforms that run coding agents like Claude Code, Codex C… | 59 | 1792 | active |
| fuint fuint is an open-source membership marketing and store management system for brick-and-mortar shops, built with Java SpringBoot, MySQL, Vue… | 77 | 1787 | active |
| privacyIDEA privacyIDEA is an open-source, self-hosted multi-factor authentication (MFA) server that centrally manages authentication tokens—OTP (HOTP/… | 92 | 1777 | stable |
| ShenaniganDApp/brightid-discord-bot A Discord bot that integrates BrightID identity verification into Discord servers, letting communities verify users are unique humans and m… | 66 | 1775 | active |
| requests/requests-oauthlib A Python library that adds OAuth 1 and OAuth 2 authentication support to the Requests HTTP library. It wraps OAuthlib to provide simple ses… | 31 | 1774 | stable |
| Apache Casbin PyCasbin is the Python implementation of Apache Casbin, an authorization library that enforces access control via configurable models such … | 85 | 1771 | stable |
| yanzhenjie/AndPermission AndPermission is an Android library that simplifies requesting runtime permissions and special permissions like installing unknown-source A… | 32 | 6619 | maintenance |
| swisspol/GCDWebServer GCDWebServer is a lightweight, event-driven HTTP 1.1 server written in Objective-C for embedding in iOS, macOS, and tvOS apps. It includes … | 10 | 6614 | maintenance |
| Clerk The official monorepo of Clerk's JavaScript SDKs under the @clerk namespace, providing authentication and user management for frameworks li… | 96 | 1767 | active |
| jenslys/opencode-gemini-auth A TypeScript plugin for the Opencode CLI that authenticates with Google via OAuth so users can use their existing Gemini plan and quotas (i… | 82 | 1767 | active |
| nategood/httpful Httpful is a chainable, REST-friendly HTTP client library for PHP 8.0+ that emphasizes readability and simplicity. It provides automatic re… | 50 | 1767 | active |