Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| coinbase/coinbase-wallet-sdk Coinbase Wallet SDK is a TypeScript library that lets decentralized applications (dapps) connect users to Coinbase Wallet, including the Sm… | 79 | 1764 | active |
| laravel/fortify Laravel Fortify is a frontend-agnostic authentication backend for Laravel that registers the routes and controllers needed for login, regis… | 99 | 1759 | active |
| mpdavis/python-jose python-jose is a Python implementation of the JOSE (JavaScript Object Signing and Encryption) standards, including JWS, JWE, JWK, and JWT. … | 57 | 1759 | stable |
| crocodic-studio/crudbooster CRUDBooster is a Laravel package that generates CRUD interfaces and admin panels automatically from database tables. It lets developers bui… | 10 | 1759 | active |
| bradtraversy/node_passport_login A Node.js starter application demonstrating user registration, login, and access control using Express, Passport, MongoDB/Mongoose, EJS, an… | 71 | 1757 | active |
| Firebase Admin SDK The Firebase Admin Node.js SDK is the official server-side library for accessing Firebase services (Authentication, Realtime Database, Clou… | 98 | 1751 | stable |
| googleworkspace/apps-script-oauth2 An OAuth2 library for Google Apps Script that creates, authorizes, and refreshes OAuth2 tokens using Apps Script's StateTokenBuilder and /u… | 58 | 1750 | active |
| Django Hijack Django Hijack is a Django app that lets admins log in and work on behalf of other users without knowing their credentials. It provides secu… | 95 | 1746 | stable |
| Gramps Web Gramps Web is a free, open-source web application for browsing and collaboratively editing genealogical databases, designed as a companion … | 99 | 1742 | active |
| Open Bank Project An open-source RESTful API platform for banks that exposes accounts, transactions, payments, counterparties, entitlements and metadata, sup… | 76 | 1740 | active |
| pgjdbc/pgjdbc PgJDBC is the official open-source PostgreSQL JDBC driver, written in pure Java (Type 4) and communicating via the PostgreSQL native networ… | 88 | 1737 | stable |
| GitLiveApp/firebase-kotlin-sdk A Kotlin-first, multiplatform SDK for Firebase that wraps Firebase services (Auth, Firestore, Realtime Database, Functions, Analytics, Mess… | 97 | 1732 | active |
| NZBHydra NZBHydra 2 is a self-hosted meta search application that aggregates results from newznab indexers and torznab trackers, merging, filtering,… | 93 | 1731 | active |
| sambecker/exif-photo-blog A self-hostable Next.js photo blog application that extracts and displays EXIF camera details (aperture, shutter speed, ISO, lens, film sim… | 73 | 1726 | active |
| classroomio/classroomio ClassroomIO is an open-source learning management system (LMS) for companies to run employee compliance training, customer education, and p… | 73 | 1726 | active |
| vgrem/office365-rest-python-client A Python client library for Microsoft 365 and Microsoft Graph APIs, providing typed access to SharePoint REST API v1 via ClientContext and … | 93 | 1725 | active |
| better-auth-ui/better-auth-ui Better Auth UI is a collection of beautiful, ready-to-use authentication UI components and data utilities built specifically for the Better… | 84 | 1723 | active |
| sabre-io/dav sabre/dav is the most popular WebDAV framework for PHP, used to build WebDAV, CalDAV, and CardDAV servers. It supports a wide range of rela… | 77 | 1723 | stable |
| apache/guacamole-client Apache Guacamole client is the Maven-based superproject containing the HTML5 web application, official authentication extensions, and JavaS… | 76 | 1723 | active |
| code100x/chess A multiplayer online chess platform built with React, Node.js, and TypeScript, using dedicated WebSocket servers for real-time gameplay and… | 25 | 1720 | active |
| vechain/vechain-dapp-kit vechain-dapp-kit is a TypeScript SDK that simplifies interaction between VeChain wallets (VeWorld, Sync2) and decentralized applications. I… | 90 | 1716 | active |
| ueberauth/ueberauth Ueberauth is an Elixir authentication framework for Plug-based web applications, providing a two-phase authentication API inspired by Omnia… | 66 | 1716 | stable |
| keepassium/KeePassium KeePassium is a KeePass-compatible password manager app for iOS and macOS, written in Swift. It supports all KeePass database formats (kdb,… | 68 | 1714 | active |
| dafthack/MFASweep MFASweep is a PowerShell script that attempts to log in to multiple Microsoft services with provided credentials to detect whether MFA is e… | 63 | 1709 | active |
| inverse-inc/packetfence PacketFence is a free and open source network access control (NAC) solution with a captive portal for registration and remediation, 802.1X … | 86 | 1704 | stable |
| Gerenios/AADInternals AADInternals is a PowerShell module for administering and hacking Entra ID (Azure AD), Office 365, and related endpoints. It includes tools… | 48 | 1703 | active |
| Symfony Security The Symfony Security HTTP component provides HTTP integration of the Symfony Security Core component. It secures (parts of) applications us… | 93 | 1701 | stable |
| jazzband/django-axes django-axes is a Django plugin that tracks failed login attempts and blocks brute-force attacks on Django-powered sites. It supports monito… | 93 | 1699 | stable |
| panshak/accountill Accountill is a fullstack open-source invoicing application built with the MERN stack (MongoDB, Express, React, Node.js) designed for freel… | 23 | 1695 | active |
| AvdLee/appstoreconnect-swift-sdk A Swift SDK for interacting with Apple's App Store Connect API, with OpenAPI-generated endpoints and models covering all API requests. It h… | 94 | 1693 | active |
| murraco/spring-boot-jwt A JWT authentication service built with Spring Boot and Spring Security, backed by MySQL, featuring short-lived access tokens and rotating,… | 74 | 1688 | active |
| FastAPI Users FastAPI Users is a ready-to-use and customizable user management library for FastAPI applications. It provides registration, login, passwor… | 80 | 6254 | maintenance |
| palark/ovpn-admin A self-hosted web UI for managing OpenVPN users, certificates, and client routes on Linux servers. It is written in Go with a Vue.js fronte… | 76 | 1682 | active |
| cjbi/admin3 Admin3 is a lightweight admin management framework built on Java 21/Spring Boot 3.2 for the backend and TypeScript/Vite/Vue3/Element Plus f… | 55 | 1682 | active |
| freeotp/freeotp-android FreeOTP is an open-source two-factor authentication app for Android that generates one-time passwords using the HOTP and TOTP standards. To… | 74 | 1676 | active |
| invertase/react-native-apple-authentication A well-typed React Native library providing Sign In with Apple support on iOS and Android, including all AppleButton UI variants. It suppor… | 60 | 1669 | active |
| Pow Pow is a robust, modular, and extendable authentication and user management library for Elixir, built for Phoenix and Plug-based applicatio… | 23 | 1668 | stable |
| userfrosting/UserFrosting UserFrosting is a modern PHP user management framework built on Slim, Twig, Eloquent ORM, Vite, and Vue, providing login, registration, and… | 93 | 1667 | active |
| SvelteFire SvelteFire is a TypeScript library that wraps Firebase services (Auth, Firestore, Storage, RealtimeDB, Analytics) in Svelte stores and decl… | 23 | 1657 | active |
| izhaorui/Zr.Admin.NET ZR.Admin.NET is a cross-platform, front-end/back-end separated general-purpose admin management system based on .NET 8 and Vue (with Ant De… | 75 | 1648 | active |
| johanohly/AirTrail AirTrail is a self-hosted, open-source web application for tracking personal flights on an interactive world map with rich statistics. It s… | 88 | 1642 | active |
| Chat SDK An open-source instant messaging framework (SDK) for Android that provides a fully featured chat client with private, group, and public cha… | 57 | 1642 | active |
| lelylan/simple-oauth2 simple-oauth2 is a Node.js client library for the OAuth 2.0 authorization framework. It supports the authorization code, resource owner pas… | 32 | 1639 | active |
| cloudfoundry/uaa Cloud Foundry's User Account and Authentication (UAA) server, a multi-tenant identity management service that acts as an OAuth2 provider an… | 98 | 1637 | active |
| Finbuckle/Finbuckle.MultiTenant Finbuckle.MultiTenant is an open source multi-tenancy library for modern .NET, primarily targeting ASP.NET Core and Entity Framework Core a… | 97 | 1630 | stable |
| Zizaco/entrust Entrust is a Laravel package that adds role-based permissions (RBAC) to Laravel applications, providing Role and Permission models, migrati… | 23 | 5999 | maintenance |
| andygrunwald/go-jira go-jira is a Go client library for the Atlassian Jira REST API, supporting authentication (Basic, OAuth, session cookie, bearer/PAT), issue… | 74 | 1621 | active |
| typicms/typicms TypiCMS is a modular, multilingual content management system built on the Laravel PHP framework. It ships with modules for pages, news, eve… | 92 | 1619 | active |
| Permify/permify Permify is an open-source authorization-as-a-service inspired by Google Zanzibar, providing a permission database and policy decision point… | 96 | 5956 | maintenance |
| alfio-event/alf.io Alf.io is a free, open source ticket reservation and event attendance management system for conferences, trade shows, workshops, and meetup… | 89 | 1616 | stable |
| JohnnyCrazy/SpotifyAPI-NET SpotifyAPI-NET is an open-source C#/.NET client library for the Spotify Web API, providing fully typed requests and responses for over 74 e… | 76 | 1616 | active |
| DuendeSoftware/products Duende Products is a suite of identity and access management SDKs for ASP.NET Core, centered on Duende IdentityServer, a standards-complian… | 95 | 1614 | stable |
| ZimengXiong/ExcaliDash ExcaliDash is a self-hosted dashboard and organizer for Excalidraw drawings with persistent storage, real-time collaboration, and scoped sh… | 83 | 1612 | active |
| Keygen Licensing API Keygen is a fair source software licensing and distribution API that lets developers add license key validation, entitlements, device activ… | 86 | 1611 | active |
| Facebook Business SDK The official Python SDK for Meta's Business SDK, bundling the Marketing API together with Pages, Business Manager, and Instagram APIs into … | 97 | 1610 | active |
| Wulf/create-rust-app A CLI scaffolding tool that generates a modern fullstack web app with a Rust backend (actix-web or poem) and a React/TypeScript frontend in… | 41 | 1607 | active |
| wpengine/faustjs Faust.js is a TypeScript toolkit of npm packages for building Next.js applications on top of headless WordPress. It provides data fetching,… | 93 | 1604 | active |
| blizzless/blizzless-diiis DiIiS (Blizzless) is a fully-functional open-source server emulator for Diablo III: Reaper of Souls, written in C# on .NET. It implements a… | 63 | 1602 | active |
| atinux/nuxt-auth-utils A Nuxt module that adds authentication to Nuxt applications using secured and sealed cookie sessions. It supports 40+ OAuth providers, pass… | 86 | 1601 | active |
| myfanhua/turb-gpt-free-register A Python tool that bulk-registers ChatGPT/OpenAI accounts using pure-protocol requests or anti-fingerprint browser automation (RoxyBrowser,… | 58 | 1600 | active |
| andrii-kryvoviaz/slink Slink is a self-hosted, open-source image sharing platform built with Symfony and SvelteKit that lets users upload, organize, and privately… | 89 | 1599 | active |
| guchengwuyue/yshop-drink yshop-drink is an open-source, front-end/back-end separated QR-code food ordering system supporting dine-in table scanning, takeout, and se… | 77 | 1599 | active |
| robbiehanson/XMPPFramework XMPPFramework is an Objective-C framework implementing the XMPP standard (RFC-3920) for Mac and iOS, with support for popular XEP extension… | 23 | 5873 | maintenance |
| analogdotnow/Analog Analog is an open-source calendar application that reimagines how users manage their time and events. It is a self-hostable web app built w… | 62 | 1590 | active |
| NearHuscarl/flutter_login FlutterLogin is a ready-made Flutter widget that provides a fully animated login/signup screen with customizable callbacks for authenticati… | 79 | 1588 | active |
| ZimengXiong/tinyTouch tinyTouch is an open-source DIY hardware and software project that lets you authenticate, sudo, and log in to your computer with a fingerpr… | 80 | 1584 | active |
| vimalloc/flask-jwt-extended Flask-JWT-Extended is an open source Flask extension that adds JSON Web Token (JWT) support for protecting routes, with many optional batte… | 87 | 1580 | stable |
| zmb3/spotify A Go client library wrapping the Spotify Web API, aiming to cover every endpoint in the API reference. It includes an Authenticator type ha… | 60 | 1577 | active |
| jevonmao/PermissionsSwiftUI PermissionsSwiftUI is a Swift package that displays and handles system permissions in SwiftUI apps with a customizable, Apple-style modal U… | 23 | 1576 | active |
| kingmo888/rustdesk-api-server A Django-based API and web server for the RustDesk remote desktop platform, implementing the RustDesk API endpoints plus a web UI for regis… | 18 | 1574 | active |
| gin-contrib/sessions A Gin middleware package for session management in Go web applications, supporting multiple backends including cookie-based, Redis, memcach… | 89 | 1569 | stable |
| agentic-commerce-protocol/agentic-commerce-protocol The Agentic Commerce Protocol (ACP) is an open specification, maintained by OpenAI and Stripe, defining how AI agents, buyers, and business… | 56 | 1562 | active |
| sidebase/nuxt-auth @sidebase/nuxt-auth is a Nuxt 3+ module that adds authentication to universal Nuxt applications via OAuth providers, credentials, or email … | 93 | 1555 | active |
| lampo1024/DncZeus DncZeus is a general-purpose admin management framework built on .NET 7 (ASP.NET Core Web API + EF Core) and Vue.js (iview-admin) with full… | 35 | 1550 | active |
| geminabox/geminabox Geminabox is a really simple self-hosted RubyGems server that lets you host and push your own gems just like rubygems.org. It supports the … | 98 | 1547 | active |
| redimp/otterwiki An Otter Wiki is a self-hosted, minimalistic wiki application for collaborative content management, written in Python with Flask. Content i… | 96 | 1545 | active |
| twilio/twilio-node The official Twilio helper library for Node.js, providing a typed client for the Twilio REST APIs including SMS, voice, and other communica… | 98 | 1544 | active |
| cla-assistant/cla-assistant CLA assistant is a web service and self-hostable application that automates Contributor License Agreement handling for GitHub repositories.… | 23 | 1544 | stable |
| technomancer702/nodecast-tv nodecast-tv is a self-hosted web-based IPTV player that streams Live TV, Movies, and Series from Xtream Codes or M3U providers directly in … | 83 | 1540 | active |
| ssoready/ssoready SSOReady is an open-source service and set of SDKs for adding enterprise SAML single sign-on and SCIM directory sync to any product. It exp… | 39 | 1536 | active |
| robbiehanson/CocoaHTTPServer CocoaHTTPServer is a small, lightweight, embeddable HTTP server library for Mac OS X and iOS applications written in Objective-C. It suppor… | 32 | 5603 | maintenance |
| cartalyst/sentinel Sentinel is a PHP 8.3+ framework-agnostic authentication and authorization library by Cartalyst. It provides user authentication, roles, pe… | 57 | 1527 | active |
| polhenarejos/pico-fido Open-source firmware that turns a Raspberry Pi Pico (RP2040/RP2350) or ESP32-S3 microcontroller into a FIDO2 passkey authenticator, support… | 91 | 1526 | active |
| twofas/2fas-android The official open-source Android app for 2FAS, a two-factor authentication service that generates one-time passwords (TOTP and HOTP) for se… | 89 | 1524 | active |
| zquestz/omniauth-google-oauth2 An OmniAuth strategy gem that enables Google OAuth2 authentication in Ruby applications. It integrates as Rack middleware (e.g., in Rails o… | 83 | 1524 | active |
| SteveSuv/remix-words-funny A fullstack English vocabulary study website built with the Remix T3 stack (react-router v7, tRPC, Drizzle, PostgreSQL, HeroUI). It ships w… | 65 | 1518 | active |
| sbondCo/Watcharr Watcharr is an open-source, self-hostable web application for tracking watched movies, TV shows, anime, and optionally video games, with ra… | 95 | 1517 | active |
| pallets-eco/flask-wtf Flask-WTF is a Python library that integrates WTForms with the Flask web framework, providing form rendering, validation, CSRF protection, … | 74 | 1510 | stable |
| royalrick/weapp A Go SDK for the server-side APIs of WeChat Mini Programs, wrapping endpoints like login (code2session), access tokens, and encrypted data … | 44 | 1508 | active |
| ShaneIsrael/fireshare Fireshare is a self-hosted video and image sharing application that gives every uploaded file a unique shareable URL. It runs as a single D… | 99 | 1506 | active |
| Microsoft Authentication Library (MSAL) Microsoft Authentication Library (MSAL) for .NET, part of the Microsoft identity platform. It enables .NET applications to acquire security… | 98 | 1504 | stable |
| accounts-js/accounts A suite of TypeScript packages providing fullstack authentication and accounts management for JavaScript applications, supporting GraphQL a… | 23 | 1502 | active |
| pyca/bcrypt pyca/bcrypt is a Python library providing bcrypt password hashing and a bcrypt_pbkdf key derivation function. It offers salted hashing with… | 75 | 1501 | active |
| restic backup solution A high-performance HTTP server written in Go that implements restic's REST backend API, allowing the restic backup client to store backups … | 66 | 1500 | active |
| balzack/databag Databag is a fast, lightweight, self-hosted federated messenger with end-to-end encryption, audio/video calls via WebRTC, and topic-based t… | 58 | 1499 | active |
| wneessen/go-mail go-mail is a modern, feature-rich Go library for composing and sending email over SMTP. It provides mail composition, encoding, DKIM and S/… | 89 | 1497 | active |
| dujiao-next/dujiao-next Dujiao-Next is an open-source digital goods e-commerce platform written in Go (Gin + GORM) with a Vue 3 customer storefront and admin panel… | 82 | 1496 | active |
| docker/login-action A GitHub Action that authenticates Docker and OCI clients against container registries within CI workflows. It supports Docker Hub, GitHub … | 91 | 1494 | stable |
| Spomky-Labs/otphp A PHP library for generating one-time passwords according to RFC 4226 (HOTP) and RFC 6238 (TOTP). It is compatible with Google Authenticato… | 89 | 1492 | stable |
| strophe/strophejs Strophe.js is a dependency-free JavaScript/TypeScript library for building real-time XMPP applications, supporting XMPP over WebSockets (RF… | 90 | 1488 | active |