Open-source auth software
2152 open-source libraries, tools and applications tagged auth, ranked by how closely auth is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2152 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| waiting-for-dev/devise-jwt A Ruby gem that extends Devise to authenticate Rails users with JWT tokens instead of cookies, built as a thin layer over warden-jwt_auth. … | 65 | 1292 | active |
| passff/passff PassFF is a Mozilla Firefox extension that provides browser access to a zx2c4 pass password store. It can list, fill, and submit login form… | 64 | 1290 | active |
| miguelgrinberg/Flask-HTTPAuth Flask-HTTPAuth is a Flask extension that adds HTTP authentication to routes, supporting Basic, Digest, and Token schemes. It provides decor… | 74 | 1289 | stable |
| ValvePython/steam A Python library for interacting with various parts of the Steam platform, including the Steam network client, Web API, web authentication,… | 69 | 1287 | active |
| juliansteenbakker/flutter_secure_storage A Flutter plugin for securely storing sensitive key-value data using platform-specific encrypted storage such as iOS/macOS Keychain, Androi… | 98 | 1286 | active |
| Octokit SDK Octokit is the official, batteries-included JavaScript/TypeScript SDK for the GitHub platform APIs, integrating REST API client, GraphQL qu… | 95 | 1286 | stable |
| wechatpay-apiv3/wechatpay-go The official Go SDK for WeChat Pay APIv3, providing typed service clients, an HTTP client with request signing and response verification, a… | 33 | 1285 | active |
| kuafuai/aipexbase AipexBase is an AI-native Backend-as-a-Service (BaaS) platform built with Spring Boot that provides data storage, user authentication, and … | 61 | 1283 | active |
| RAIRprotocol A TypeScript SDK that wraps the RAIRprotocol API, letting developers build decentralized applications (dApps) with wallet-based authenticat… | 33 | 1280 | active |
| verida/verida-js The official TypeScript SDK monorepo for the Verida Network, a decentralized network for self-sovereign identity and encrypted personal dat… | 36 | 1279 | active |
| mcpjungle/MCPJungle MCPJungle is a self-hosted MCP gateway that lets you register and manage multiple MCP servers behind a single endpoint. It provides central… | 78 | 1271 | active |
| googleapis/google-api-go-client Auto-generated Go client libraries for Google APIs, produced from the Google Discovery Service's JSON descriptions. It provides typed clien… | 95 | 4486 | maintenance |
| netlify/gotrue GoTrue is a small open-source API written in Go that handles user registration, authentication, and user management for APIs and Jamstack p… | 64 | 4486 | maintenance |
| Dovecot Dovecot is an open-source mail server for Linux/UNIX-like systems written in C, providing IMAP, POP3, LMTP, and ManageSieve protocols with … | 88 | 1266 | stable |
| jazzband/django-rest-knox django-rest-knox is a token-based authentication library for Django REST Framework that improves on DRF's built-in TokenAuthentication. It … | 85 | 1266 | active |
| Hentioe/policr-mini PolicrMini is a Telegram bot focused on verifying new group members, offering customizable verification challenges and moderation features … | 63 | 1266 | active |
| vargasjona/fastapi-alembic-sqlmodel-async A production-oriented FastAPI project template combining async SQLModel as the ORM, Alembic migrations, Pydantic v2, JWT authentication, an… | 61 | 1266 | active |
| Waynboot Mall waynboot-mall is a fully open-source Java e-commerce (mall) project built on Spring Boot 3 and Java 17, comprising an admin backend, an H5 … | 60 | 1266 | active |
| Hoodie Hoodie is a Node.js-based generic backend that serves a client API for building Offline First applications that work regardless of connecti… | 23 | 4457 | maintenance |
| marmelab/atomic-crm Atomic CRM is a free, open-source, full-featured customer relationship management application built with React, shadcn/ui, and Supabase. It… | 78 | 1262 | active |
| MarshalX/yandex-music-api An unofficial Python client library for the undocumented Yandex Music API, built via reverse engineering. It offers both synchronous and as… | 66 | 1262 | active |
| crocofied/PortNote PortNote is a self-hosted web application for documenting and tracking which services use which ports across servers and VMs. It provides a… | 27 | 1262 | active |
| hub4j/github-api A Java library providing an object-oriented representation of the GitHub API, with classes like GHUser and GHRepository mapping to GitHub's… | 93 | 1258 | active |
| PostfixAdmin PostfixAdmin is an open-source, web-based administration interface for managing domains, mailboxes, and aliases on Postfix-based mail serve… | 93 | 1257 | active |
| shopperlabs/shopper Shopper is a headless e-commerce administration panel built on Laravel, providing everything needed to create and manage an online store. I… | 97 | 1256 | active |
| selfxyz/self Self is an open-source monorepo for a privacy-preserving identity verification platform that lets users generate zero-knowledge proofs from… | 72 | 1256 | active |
| faveosuite/faveo-helpdesk Faveo Helpdesk is an open-source, self-hosted customer support and ticketing system built on the Laravel PHP framework. It helps businesses… | 67 | 1255 | active |
| uasoft-indonesia/badaso Badaso is an open-source headless CMS and admin dashboard built on Laravel and Vue.js, providing a CRUD generator, API builder, and user/ro… | 42 | 1254 | active |
| dromara/tianai-captcha TianaiCAPTCHA is a Java-based behavioral CAPTCHA library supporting slider, rotation, slide-restore, and text-click CAPTCHA types. It ships… | 73 | 1253 | active |
| Nerzal/gocloak gocloak is a Go client library for the Keycloak Admin and authentication APIs. It lets Go applications log in users and admins, manage user… | 89 | 1252 | active |
| sinamics/ztnet ZTNET is a self-hosted web UI for managing ZeroTier network controllers, with multi-user and organization support. It is a Next.js/TypeScri… | 95 | 1246 | active |
| mar10/wsgidav WsgiDAV is a generic and extendable WebDAV server written in Python and based on WSGI. It runs as a stand-alone command-line server with SS… | 90 | 1245 | active |
| delight-im/PHP-Auth A lightweight, secure authentication library for PHP that handles registration, login, email verification, password resets, and session man… | 40 | 1245 | stable |
| CIPP CIPP (CyberDrain Improved Partner Portal) is a self-hosted multitenant management portal for Microsoft 365 partners. It centralizes adminis… | 95 | 1243 | active |
| LNbits LNbits is a free, open-source Python server that provides Bitcoin Lightning Network wallet and account management on top of any Lightning f… | 98 | 1242 | stable |
| mybb/mybb MyBB is a free and open source PHP-based forum (bulletin board) application for hosting online communities. It includes an admin control pa… | 85 | 1242 | stable |
| Fingerprint authentication system A Python driver and DBus service for Validity fingerprint sensors on Linux, integrating with fprintd for biometric authentication. It suppo… | 40 | 1241 | active |
| journiv/journiv-app Journiv is a self-hosted, privacy-first journaling application with mood, activity, and goal tracking, prompt-based journaling, media uploa… | 83 | 1238 | active |
| bewCloud bewCloud is a self-hosted, open-source personal cloud application built with TypeScript and Deno, designed as a simpler, lighter alternativ… | 87 | 1237 | active |
| damienbod/angular-auth-oidc-client An npm library for securing Angular applications with OpenID Connect and OAuth2, supporting Code Flow with PKCE, refresh tokens, and the Im… | 94 | 1236 | active |
| Hopetree/izone izone is a personal blog system built with Django, MySQL, Redis, and Celery, also usable as a documentation site. It ships with full-text s… | 66 | 1230 | active |
| swaywm/swaylock swaylock is a screen locking utility for Wayland compositors, compatible with any compositor implementing the ext-session-lock-v1 protocol.… | 79 | 1227 | active |
| abraham/twitteroauth TwitterOAuth is the most popular PHP library for interacting with Twitter's OAuth REST API, providing minimalist generic wrappers for API r… | 89 | 4298 | maintenance |
| Passport Passport is an identity verification application that lets users build collections of verifiable credentials to prove unique humanity in a … | 97 | 1223 | active |
| transmissions11/solmate Solmate is a collection of gas-optimized, opinionated Solidity smart contract building blocks including token standards (ERC20, ERC721, ERC… | 34 | 4286 | maintenance |
| vincanger/coverlettergpt A full-stack web application that generates tailored cover letters from a job description and the user's resume using OpenAI's GPT models. … | 40 | 1220 | active |
| MineAdmin MineAdmin is an out-of-the-box, front-end/back-end separated admin management system built on the PHP Hyperf framework (Swoole) and Vue 3 +… | 93 | 1219 | active |
| kubernetes-client/csharp The officially supported Kubernetes client library for .NET, published as the KubernetesClient NuGet package. It provides typed access to t… | 95 | 1217 | active |
| SwitchBot Official documentation for the SwitchBot Open API v1.1, a REST API for controlling and monitoring SwitchBot smart home devices. It covers a… | 75 | 1217 | active |
| cordova-plugin-wechat A Cordova plugin that exposes the WeChat SDK to JavaScript for hybrid mobile apps. It supports sharing content, WeChat OAuth login, payment… | 23 | 1217 | active |
| pinax/django-user-accounts django-user-accounts is a reusable Django app providing extensible infrastructure for user account management, including signup, login, ema… | 40 | 1216 | stable |
| paralus/paralus Paralus is an open source, CNCF Sandbox zero-trust Kubernetes access manager that provides controlled, audited access to Kubernetes cluster… | 65 | 1213 | active |
| topiam/eiam TOPIAM is an open-source IAM/IDaaS identity and access management platform for centrally managing employee accounts, permissions, authentic… | 37 | 1213 | active |
| RuoYi WMS RuoYi-WMS is an open-source warehouse management system (WMS) built on the RuoYi framework with a Spring Boot 3 / JDK 17 backend and Vue + … | 62 | 1211 | active |
| ramosbugs/oauth2-rs An extensible, strongly-typed Rust implementation of the OAuth2 protocol (RFC 6749). It provides a client library for OAuth2 authorization … | 50 | 1208 | stable |
| rustypaste Rustypaste is a minimal, self-hosted file upload and pastebin service written in Rust. It supports uploading files via curl or an HTML form… | 88 | 1207 | active |
| auth0/go-jwt-middleware A Go middleware library by Auth0 that validates JSON Web Tokens (JWTs) on incoming HTTP requests, with a framework-agnostic core validator.… | 91 | 1206 | active |
| fastapiadmin/FastapiAdmin FastapiAdmin is an open-source full-stack rapid development platform for building enterprise admin/back-office systems, combining a FastAPI… | 72 | 1204 | active |
| yezz123/authx AuthX is a Python library providing ready-to-use, customizable authentication and OAuth2 management for FastAPI applications. It offers JWT… | 88 | 1203 | active |
| FranciscoMoretti/chat-js ChatJS is an open-source, production-ready AI chat application built with Next.js and TypeScript, offering authentication, 120+ models via … | 85 | 1200 | active |
| Symfony Security The Symfony Security Component provides a complete authentication and authorization system for PHP web applications. It supports HTTP basic… | 10 | 1196 | stable |
| Yubico/yubikey-manager A Python library and command line tool (ykman) for configuring YubiKey hardware security keys over all USB interfaces. It supports managing… | 88 | 1195 | active |
| alipay/alipay-easysdk Alipay Easy SDK is a multi-language server-side SDK (Java, C#, PHP, TypeScript, etc.) that provides a minimalist, factory-based API for acc… | 32 | 1192 | active |
| nspady/google-calendar-mcp A Model Context Protocol (MCP) server that integrates Google Calendar with AI assistants like Claude, enabling event creation, updates, del… | 85 | 1188 | active |
| TwoFactorAuth A PHP library for implementing two-factor (multi-factor) authentication using TOTP time-based one-time passwords and QR codes. It supports … | 52 | 1188 | stable |
| hrfee/jfa-go jfa-go is a self-hosted user management application for Jellyfin (and Emby) media servers, written in Go. It provides invite-based account … | 71 | 1184 | active |
| wind-c/comqtt Comqtt is a lightweight, high-performance MQTT broker written in Go supporting MQTT v3.0, v3.1.1, and v5.0. It can run as a standalone serv… | 87 | 1182 | active |
| nytimes/library Library is a collaborative documentation site built by The New York Times that uses Google Docs as its content source and editing interface… | 87 | 1182 | stable |
| RainLoop/rainloop-webmail RainLoop Webmail is a simple, modern, and fast web-based email client written in PHP that connects directly to mail servers via IMAP and SM… | 10 | 4115 | maintenance |
| Google Cloud PHP The official Google Cloud Client Library for PHP, providing idiomatic PHP clients for Google Cloud Platform services such as Storage, BigQu… | 95 | 1180 | active |
| ndom91/briefkasten Briefkasten is a self-hosted bookmarking web application for saving, organizing, tagging, and reading saved links, including RSS feed readi… | 75 | 1179 | active |
| osa1/tiny tiny is a terminal-based IRC client written in Rust with a clean, minimal UI. It supports SASL authentication, TLS, automatic reconnection,… | 52 | 1179 | active |
| sergix44/xbackbone XBackBone is a self-hosted, lightweight file and media sharing platform with first-class ShareX support. It provides a web UI, multi-user m… | 81 | 1170 | active |
| GongRzhe/Gmail-MCP-Server A Model Context Protocol (MCP) server that integrates Gmail with AI assistants like Claude Desktop, featuring automatic OAuth2 authenticati… | 10 | 1168 | active |
| laravel/jetstream Laravel Jetstream is an application scaffolding/starter kit for the Laravel framework that provides pre-built authentication, profile, team… | 88 | 4059 | maintenance |
| Biscuit Biscuit is a specification and reference implementation for a delegated, decentralized, capability-based authorization token, written in Ru… | 41 | 1166 | active |
| CodePlato3721/shiro-redis A Java library that provides a Redis-based cache and session manager implementation for Apache Shiro, which otherwise only supports ehcache… | 56 | 1165 | active |
| saintedlama/passport-local-mongoose A Mongoose plugin that simplifies building username and password login with Passport for Node.js applications. It adds username, hash, and … | 89 | 1164 | stable |
| Thalhammer/jwt-cpp jwt-cpp is a header-only C++11 library for creating and validating JSON Web Tokens (JWT). It supports all standard signature algorithms (HM… | 72 | 1164 | stable |
| ErugoOSS/Erugo Erugo is a self-hosted file-sharing platform built with PHP/Laravel and Vue.js, offering secure file transfers with features like password … | 69 | 1161 | active |
| microblog.pub microblog.pub is a self-hosted, single-user microblog server that speaks the ActivityPub protocol, letting you federate with Mastodon, Pler… | 32 | 1161 | active |
| Firebase Admin SDK The Firebase Admin Python SDK lets privileged server-side Python code interact with Firebase services such as Authentication, Firestore, Re… | 93 | 1159 | stable |
| Dimillian/RedditOS Curiosity (RedditOS) is an open-source Reddit client for macOS built primarily with SwiftUI. It serves both as a usable Reddit browser and … | 23 | 4025 | maintenance |
| dropbox/dbxcli dbxcli is a scriptable command-line client for Dropbox built on the Go SDK, supporting file upload/download, shared links, and team workflo… | 97 | 1158 | active |
| Halite Halite is a high-level, misuse-resistant cryptography library for PHP built on top of libsodium. It simplifies encryption, decryption, digi… | 49 | 1157 | active |
| AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet Microsoft's IdentityModel extensions for .NET, a library for working with OpenID Connect, OAuth 2.0, and JSON Web Tokens (JWT) in .NET appl… | 98 | 1154 | active |
| alliedmodders/sourcemod SourceMod is a server modification and scripting platform for games running on Valve's Source (Half-Life 2) engine. It provides a plugin sy… | 98 | 1150 | active |
| WeBankBlockchain/WeIdentity WeIdentity is a blockchain-based distributed identity solution implementing W3C DID and Verifiable Credential specifications, developed by … | 27 | 1150 | active |
| nxzai/NextExplorer NextExplorer is a modern, self-hosted web-based file explorer with secure access control, file sharing, previews, and a built-in code edito… | 89 | 1147 | active |
| ant-design/ant-design-web3 A collection of React UI components for building Web3 decentralized applications (dapps), built on the Ant Design system. It provides out-o… | 74 | 1147 | active |
| expressjs/cookie-session A simple cookie-based session middleware for Express and Connect that stores session data on the client within a signed cookie, requiring n… | 62 | 1147 | stable |
| aws-samples/aws-serverless-ecommerce-platform A sample serverless backend implementation for an e-commerce website built on AWS services like Lambda, EventBridge, AppSync, and API Gatew… | 10 | 1146 | active |
| samba-team/samba Samba is the standard open-source Windows interoperability suite for Linux and Unix, implementing the SMB/CIFS protocol for file and print … | 76 | 1145 | stable |
| Apache Casbin Casbin-RS is the Rust implementation of Apache Casbin, an authorization library that enforces access control based on configurable models s… | 82 | 1144 | active |
| hrshadhin/school-management-system CloudSchool is a self-hosted school management web application built with Laravel and PHP, covering admissions, academic calendars, exams, … | 27 | 1144 | active |
| SimpleSAMLphp SimpleSAMLphp is a native PHP application for handling authentication, primarily as a SAML 2.0 Service Provider and Identity Provider. It a… | 95 | 1142 | stable |
| auth0/lock Auth0 Lock is an embeddable, configurable login form widget for web applications that integrates with the Auth0 identity platform. It suppo… | 89 | 1142 | stable |
| Flyrell/axios-auth-refresh A TypeScript library that adds automatic authorization token refresh to Axios via interceptors. When a request fails with an authorization … | 76 | 1142 | active |
| dnnsoftware/Dnn.Platform DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) built on the Microsoft/.NET ecosystem, used to build comm… | 99 | 1141 | active |
| diyan/pywinrm pywinrm is a Python client library for the Windows Remote Management (WinRM) service, enabling remote command and PowerShell script executi… | 62 | 1140 | stable |