Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| esprfid/esp-rfid ESP RFID is an open-source access control system that runs on the ESP8266 microcontroller and supports MFRC522, PN532, RDM6300, and Wiegand… | 66 | 1486 | active |
| hectorm/otpauth A JavaScript One-Time Password library implementing HOTP (RFC 4226) and TOTP (RFC 6238) for generating and validating 2FA tokens. It runs i… | 89 | 1485 | stable |
| webfactory/ssh-agent A GitHub Action that starts ssh-agent on the workflow runner, exports SSH_AUTH_SOCK, and loads one or more private SSH keys from repository… | 75 | 1483 | active |
| googleapis/google-api-java-client Google's Java client library for accessing HTTP-based APIs, including generated libraries for Google APIs. It provides OAuth 2.0 support, l… | 89 | 1480 | stable |
| ng-matero/ng-matero NG-MATERO is an Angular admin template built with Angular Material components, offering multiple layouts, a color system, dark mode, RTL, a… | 82 | 1473 | active |
| simonrob/email-oauth2-proxy A local IMAP/POP/SMTP proxy written in Python that transparently adds OAuth 2.0 authentication for email clients that don't support it. It … | 78 | 1473 | active |
| infrahq/infra Infra is an open-source authentication and access management service for servers, Kubernetes clusters, and databases. It provides identity-… | 68 | 1468 | active |
| cloudflare/serverless-registry A self-hostable OCI container registry implemented as a Cloudflare Worker, storing image layers and manifests in Cloudflare R2 object stora… | 70 | 1463 | active |
| Sorcery/sorcery Sorcery is a stripped-down authentication library for Ruby on Rails supporting ActiveRecord, Mongoid, and other ORMs. It provides core auth… | 65 | 1463 | active |
| hkhcoder/vprofile-project VProfile is a sample Java web application built with Spring MVC, Spring Security, Spring Data JPA, and JSP, backed by MySQL, Memcached, Rab… | 63 | 1463 | active |
| code100x/cms An open-source content management system (LMS) that powers app.100xdevs.com, an online learning platform for coding cohorts and bootcamps. … | 65 | 1459 | active |
| oss-apps/split-pro SplitPro is a self-hosted, open source web application for sharing and splitting expenses with friends and groups, designed as a Splitwise … | 85 | 1457 | active |
| passwordless-lib/fido2-net-lib A battle-tested .NET library implementing a FIDO2 server / WebAuthn relying party for passkey registration (attestation) and authentication… | 100 | 1456 | active |
| chaogei/Kiro-account-manager A desktop application for managing multiple Kiro IDE accounts with one-click switching, automatic token refresh, and group/tag organization… | 68 | 1455 | active |
| binarywang/weixin-java-miniapp-demo A Spring Boot demo application showcasing the WxJava library for building WeChat Mini Program backends in Java. It supports multiple mini p… | 57 | 1450 | active |
| XAMPPRocky/octocrab Octocrab is a modern, extensible GitHub API client library for Rust. It offers a strongly typed semantic API covering most GitHub endpoints… | 100 | 1448 | active |
| jenkinsci/gitlab-plugin A Jenkins plugin that integrates GitLab with Jenkins CI. It triggers Jenkins builds from GitLab webhooks (pushes, merge requests, tags) and… | 100 | 1446 | active |
| VGVentures/news_toolkit A Flutter-based news application template co-developed by Very Good Ventures and the Google News Initiative. It provides prebuilt news app … | 58 | 1445 | active |
| sinaweibosdk/weibo_ios_sdk The official Sina Weibo iOS SDK, providing OAuth 2.0 authorization, SSO login, and sharing to Weibo from third-party iOS apps. It wraps the… | 63 | 1441 | active |
| Node Express Mongoose A demo blog application built with Node.js, Express, and Mongoose that illustrates everyday web development features and best practices for… | 32 | 1439 | active |
| kirilkirkov/Ecommerce-CodeIgniter-Bootstrap A self-hosted, responsive multi-vendor and multilingual online store platform built on CodeIgniter 3 and Bootstrap. It provides a complete … | 72 | 1436 | active |
| CoreUnion/CoreShop CoreShop is an open-source e-commerce mall system built on ASP.NET Core 9.0 and Uni-App, featuring a visual page layout designer and full f… | 75 | 1435 | active |
| at_client_sdk The Dart implementation of the atSDK for building applications on the Atsign Platform, a protocol for personal data ownership and controlle… | 67 | 1434 | active |
| tilfinltd/aws-extend-switch-roles A browser extension for Chrome, Firefox, and Edge that extends the AWS Management Console's built-in IAM role switching. It lets users conf… | 89 | 1429 | active |
| stripe/stripe-react-native The official Stripe SDK for React Native, providing native Android and iOS payment UI components and APIs for collecting payments in mobile… | 98 | 1428 | stable |
| googleapis/google-cloud-ruby The official Google Cloud Client Library for Ruby, a monorepo of idiomatic RubyGems for calling Google Cloud Platform APIs such as Cloud St… | 95 | 1428 | stable |
| ankane/pretender Pretender is a lightweight Ruby gem that lets admins log in as (impersonate) another user in Rails applications. It works with any authenti… | 62 | 1425 | stable |
| PrismarineJS/node-minecraft-protocol A Node.js library that parses and serializes Minecraft protocol packets, with support for authentication and encryption. It enables buildin… | 95 | 1416 | active |
| proyecto26/react-native-inappbrowser A React Native library providing an in-app browser using Chrome Custom Tabs on Android and SafariServices/AuthenticationServices on iOS. It… | 62 | 1414 | active |
| nuvious/pam-duress A Linux Pluggable Authentication Module (PAM) that lets users configure alternate 'duress' passwords which, when used under coercion, authe… | 70 | 1412 | active |
| midarrlabs/midarr-server Midarr is a free, open-source, lightweight media server that serves your existing media library through a slick web interface. It acts as a… | 51 | 1408 | active |
| Discord Embedded App SDK The Discord Embedded App SDK is a TypeScript library for building Discord Activities—web apps running in an iframe inside the Discord clien… | 86 | 1407 | active |
| nasirkhan/laravel-starter A CMS-like modular starter application built on Laravel 13.x and Livewire, providing authentication, role management, an admin backend, bac… | 96 | 1406 | active |
| openstack/horizon Horizon is the official OpenStack Dashboard, a Django-based web application for managing OpenStack cloud services through a browser. It als… | 75 | 1405 | active |
| google/site-kit-wp Google's official WordPress plugin that integrates Google services like Search Console, Analytics, AdSense, PageSpeed Insights, Tag Manager… | 99 | 1403 | active |
| googleapis/google-auth-library-php Google's officially supported PHP client library for OAuth 2.0 authentication and authorization with Google APIs. It implements Application… | 98 | 1401 | stable |
| google-github-actions/auth A GitHub Action that authenticates GitHub Actions workflows to Google Cloud, supporting Workload Identity Federation and Service Account Ke… | 73 | 1400 | active |
| EvanZhouDev/openai-oauth A TypeScript toolkit that turns a ChatGPT account into an OpenAI-compatible API via a local dev proxy, TypeScript SDK, and client adapters.… | 66 | 1398 | active |
| fhmq/hmq HMQ is a high-performance MQTT broker written in Go, supporting MQTT 3.1.1 with QoS 0/1, retained and will messages, WebSockets, and TLS. I… | 81 | 1389 | active |
| microsoft/fhir-server FHIR Server for Azure is an open-source .NET Core implementation of the HL7 Fast Healthcare Interoperability Resources (FHIR) specification… | 95 | 1386 | active |
| Yubico/yubioath-flutter Yubico Authenticator is a companion desktop and Android app for managing YubiKey hardware security keys and accessing OATH one-time passwor… | 92 | 1385 | stable |
| Th3Wall/Fakeflix Fakeflix is a Netflix-inspired web application clone built with React, Redux, and Firebase, featuring authentication, movie/series browsing… | 32 | 4947 | maintenance |
| rest-sh/restish Restish is a Go-based command-line client for interacting with REST-ish HTTP APIs. It makes generic HTTP requests, auto-discovers OpenAPI d… | 93 | 1376 | active |
| casosorg/casos CasOS is a cloud operating system built on Kubernetes that embeds the full Kubernetes control plane (API server, controller manager, schedu… | 93 | 1374 | active |
| overtrue/socialite A framework-agnostic PHP OAuth2 authentication library inspired by laravel/socialite, supporting 20+ providers including GitHub, Google, Fa… | 92 | 1374 | active |
| cesanta/docker_auth A standalone authentication and authorization server implementing the Docker Registry 2 token-based auth protocol. It issues tokens for Doc… | 54 | 1373 | active |
| gladly-team/next-firebase-auth A TypeScript library that simplifies Firebase authentication in Next.js apps across all rendering strategies (SSR, static, client-side). It… | 30 | 1372 | active |
| j3k0/cordova-plugin-purchase A native Cordova and Capacitor plugin providing a unified JavaScript API for in-app purchases across iOS, Android, Windows, and web payment… | 99 | 1369 | active |
| beilunyang/moepush MoePush is a self-hostable message push notification service built with Next.js and the Cloudflare stack (Pages, D1). It provides simple HT… | 28 | 1368 | active |
| bennylope/django-organizations A Django app that adds multi-user account and organization management to Django projects, separating individual user identity from group ac… | 82 | 1365 | stable |
| MaxLeiter/Drift Drift is a self-hostable clone of GitHub Gist for saving and sharing code and text snippets. It is built with Next.js 13, React Server Comp… | 32 | 1364 | active |
| aserto-dev/topaz Topaz is an open-source, cloud-native authorization service that provides fine-grained, real-time, policy-based access control for applicat… | 98 | 1363 | active |
| chriskacerguis/codeigniter-restserver A RESTful server implementation for CodeIgniter 3 provided as a single library, config file, and base controller. It lets PHP developers ex… | 57 | 4863 | maintenance |
| Authing Authing Guard is an embeddable SSO login form widget and UI component library from Authing, an enterprise identity provider. It ships frame… | 66 | 1361 | active |
| coastalwhite/lemurs Lemurs is a customizable terminal user interface (TUI) display/login manager written in Rust for GNU/Linux and BSD systems. It authenticate… | 66 | 1361 | active |
| cloudfavorites/favorites-web A self-hosted bookmarking web application ('Cloud Favorites') built with Spring Boot 2.x, Thymeleaf, and MySQL that lets users collect, cat… | 33 | 4849 | maintenance |
| ZhFahim/anchor Anchor is an offline-first, self-hostable note taking application with a rich text editor, tags, attachments, and note history. Notes are s… | 82 | 1357 | active |
| go-pkgz/auth A Go library providing authentication via multiple oauth2 providers (GitHub, Google, Facebook, Discord, Telegram, and more), direct credent… | 99 | 1354 | active |
| eikek/sharry Sharry is a self-hosted web application for sharing files: users upload files and receive a shareable URL, optionally protected by a passwo… | 87 | 1354 | active |
| emonney/QuickApp QuickApp is an opinionated full-stack project template combining Angular 21 and ASP.NET Core 10 with pre-built authentication, authorizatio… | 77 | 1352 | active |
| nianhua99/PandoraHelper PandoraHelper is a self-hosted web application for centrally managing ChatGPT and Claude accounts and sharing them with other users via iso… | 34 | 1352 | active |
| xdevplatform/xurl xurl is the official curl-like command-line tool for the X (formerly Twitter) API, written in Go. It supports OAuth 1.0a and OAuth 2.0 PKCE… | 87 | 1350 | active |
| astaxie/TokenHub TokenHub is a self-hosted enterprise AI gateway written in Go that provides a governance layer over AI model access, including model routin… | 79 | 1350 | active |
| eduMEET Edumeet is a self-hosted multiparty web meeting service built on WebRTC and the mediasoup SFU, with a React-based client. It supports audio… | 66 | 1349 | active |
| WeChat Rails gem A Ruby gem providing WeChat Official Account and Mini Program API integration for Rails applications, including message sending/receiving, … | 80 | 1348 | active |
| ltb-project/self-service-password Self Service Password is a PHP web application that lets users change and reset their own passwords in an LDAP directory, including Active … | 93 | 1347 | stable |
| webdevcody/wdc-saas-starter-kit A GitHub template repository providing a Next.js SaaS starter kit with authentication, Stripe subscription billing, Drizzle ORM with Postgr… | 45 | 1347 | active |
| jgudo/ecommerce-react Salinaka is an open-source e-commerce web application built with React, Redux, Redux-Saga, and Firebase (Firestore) with SASS styling. It p… | 32 | 1347 | active |
| koajs/jwt koa-jwt is a Koa middleware for authenticating HTTP requests using JSON Web Tokens. It validates JWTs from headers or cookies and exposes t… | 23 | 1347 | stable |
| go-webauthn/webauthn A FIDO2-conformant WebAuthn and passkey backend library for Go applications. It implements the Web Authentication specification to enable m… | 98 | 1346 | active |
| sebadob/rauthy Rauthy is a lightweight, Rust-based Identity Provider offering Single Sign-On via OpenID Connect, OAuth 2, and PAM, with strong emphasis on… | 92 | 1346 | active |
| ExAws ExAws is a flexible, modular AWS client library for Elixir, with each AWS service (S3, DynamoDB, EC2, Lambda, SQS, etc.) provided as a sepa… | 66 | 1345 | active |
| gogcom/galaxy-integrations-python-api A Python library for building community integrations that connect third-party gaming platforms to the GOG GALAXY 2.1 client. Each integrati… | 64 | 1345 | active |
| Parse Platform The official JavaScript SDK for the Parse Platform, providing client access to Parse Server backends from JavaScript apps. It supports data… | 99 | 1342 | active |
| fzlee/alipay An unofficial Python SDK for Alipay (支付宝) that supports SHA1 and SHA256 with RSA request signing and verification. It provides client and s… | 61 | 1341 | active |
| zalando/go-keyring A cross-platform Go library for setting, getting, and deleting secrets in the operating system's native keyring (macOS Keychain, Windows Cr… | 72 | 1340 | active |
| Xboard Xboard is a high-performance self-hosted proxy/VPN panel forked from V2board, built on Laravel with Octane, a React admin panel, and a Vue3… | 69 | 4772 | maintenance |
| mikker/passwordless Passwordless is a Rails engine that adds magic-link (email-based) authentication to Rails applications without passwords. It provides a ses… | 68 | 1339 | active |
| php-casbin/php-casbin PHP-Casbin is a powerful and efficient open-source access control library for PHP projects that enforces authorization based on models like… | 94 | 1338 | active |
| Apache Casbin Casbin.NET is the .NET (C#) implementation of Apache Casbin, an open-source authorization library that enforces access control via models s… | 88 | 1338 | stable |
| MomenSherif/react-oauth A collection of React libraries for OAuth2 authentication, including @react-oauth/google built on Google Identity Services and @react-oauth… | 75 | 1337 | active |
| SAML-Toolkits/php-saml A PHP library that adds SAML 2.0 support to PHP applications, enabling them to act as a Service Provider for single sign-on with identity p… | 86 | 1334 | stable |
| abuanwar072/Welcome-Login-Signup-Page-Flutter A Flutter UI template providing responsive Welcome, Login, and Signup screens that work on Android, iOS, Web, and Desktop. It demonstrates … | 69 | 1331 | stable |
| tg123/sshpiper sshpiper is a reverse proxy for SSH that routes incoming SSH/SCP connections to upstream servers, with pluggable authentication mapping and… | 91 | 1329 | active |
| kspearrin/Otp.NET Otp.NET is a C# library implementing TOTP (RFC 6238) and HOTP (RFC 4226) one-time password algorithms, available on NuGet. It supports conf… | 48 | 1324 | stable |
| docker/docker-credential-helpers A suite of Go programs that store Docker login credentials in native platform keystores (e.g., macOS Keychain, Windows Credential Manager, … | 95 | 1323 | active |
| google/longfellow-zk A C++ library from Google implementing zero-knowledge proof protocols for identity verification, supporting standards like ISO MDOC, JWT, a… | 73 | 1321 | active |
| hvac/hvac hvac is a Python 3.x client library for the HashiCorp Vault HTTP API. It lets Python applications authenticate to Vault and read, write, an… | 49 | 1321 | active |
| wiz0u/WTelegramClient WTelegramClient is a Telegram Client API (MTProto) library written entirely in C# and .NET, allowing programs to connect to Telegram and co… | 75 | 1320 | active |
| LiteLLM-Labs/litellm-agent-control-plane LiteLLM Agent Control Plane is a self-hosted platform that provides one unified API and UI for creating and running AI agents across multip… | 59 | 1318 | active |
| riverrun/comeonin Comeonin is a specification (behaviours) for password hashing libraries in Elixir, defining Comeonin and Comeonin.PasswordHash behaviours. … | 32 | 1318 | stable |
| devise-two-factor/devise-two-factor A minimalist Ruby gem extending Devise with two-factor authentication via TOTP. It integrates with authenticator apps like Google Authentic… | 74 | 1312 | active |
| php-http/message A PHP library providing PSR-7 HTTP message related tools, including authentication implementations, stream encoding, message decorators, an… | 44 | 1312 | stable |
| besscroft/PicImpact PicImpact is a self-hostable photography portfolio website built with Next.js and Hono.js for photographers to showcase their work. It feat… | 86 | 1308 | active |
| griffinmartin/opencode-claude-auth An OpenCode plugin that authenticates Anthropic API requests using existing Claude Code OAuth credentials, eliminating the need for a separ… | 80 | 1307 | active |
| BlitzKraft/saythanks.io SayThanks.io is a hosted Flask web application that gives open source maintainers a link/button to place in their READMEs so users can send… | 93 | 1306 | active |
| Cove Stack TanStarter is a minimal, opinionated starter template for TanStack Start that scaffolds a full-stack type-safe React application with Drizz… | 67 | 1304 | active |
| MrSwitch/hello.js hello.js is a client-side JavaScript SDK for authenticating with OAuth2 (and OAuth1 via a proxy) web services and querying their REST APIs.… | 65 | 4619 | maintenance |
| FreeIPA FreeIPA is an integrated security information management solution providing centralized identity, authentication, and access control for Li… | 77 | 1295 | stable |
| Firebase Admin SDK The Firebase Admin Go SDK lets privileged server-side Go applications access Firebase services such as Authentication, Firestore, Cloud Mes… | 94 | 1293 | active |