function: authorization
504 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| LuckPerms/LuckPerms LuckPerms is a permissions plugin for Minecraft servers that lets admins control player access by creating groups and assigning permissions… | 77 | 2306 | stable |
| a466350665/smart-sso Smart-SSO is a lightweight single sign-on (SSO) authentication and authorization center built on Spring Boot, implementing the OAuth2 autho… | 57 | 2303 | active |
| santigarcor/laratrust Laratrust is a PHP package for Laravel that manages roles and permissions (RBAC/ACL) for users, with support for multiple user models, team… | 73 | 2275 | active |
| nest-admin A Vue 3 + TypeScript admin dashboard template built with Vite and Ant Design Vue 4, featuring an RBAC permission system, JSON Schema dynami… | 66 | 2268 | active |
| zoujingli/ThinkAdmin ThinkAdmin is a minimal admin management system built on ThinkPHP 6/8 with annotation-based RBAC permissions, async multi-process tasks, an… | 73 | 2262 | active |
| maliangnansheng/bbs-springboot Nan's BBS (南生论坛) is an open-source Java forum/community platform styled after Juejin, built with SpringBoot on the backend and Vue on the f… | 74 | 2257 | active |
| mizhexiaoxiao/vue-fastapi-admin A modern, lightweight admin management platform built with FastAPI, Vue3, and Naive UI, featuring RBAC permission management, dynamic routi… | 42 | 2240 | active |
| greenpau/caddy-security A security app and plugin for Caddy v2 providing authentication, authorization, and accounting (AAA). It supports Form-Based, Basic, Local,… | 92 | 2225 | active |
| ruby-oauth/oauth2 A Ruby gem implementing OAuth 2.0 and 2.1 client functionality, including OpenID Connect (OIDC) support. It handles token requests, grant t… | 97 | 2179 | active |
| ovh/the-bastion The Bastion is a self-hosted SSH bastion/gateway that acts as the single entry point for operational teams to access infrastructure devices… | 90 | 2177 | stable |
| continew-org/continew-admin ContiNew Admin is a full-stack, multi-tenant admin management framework/scaffold built on Spring Boot 3 (Java 17) and Vue 3 with Arco Desig… | 80 | 2104 | active |
| macrozheng/mall-tiny mall-tiny is a rapid development scaffold based on SpringBoot and MyBatis-Plus with complete role-based permission management built in. It … | 57 | 2081 | active |
| xuxueli/xxl-sso XXL-SSO is a lightweight, distributed single sign-on (SSO) framework for Java/Spring applications. It supports login, permission, and role … | 93 | 2011 | active |
| authgear/authgear-server Authgear is an open-source customer identity and access management (CIAM) platform serving as a self-hostable alternative to Auth0, Clerk, … | 95 | 2010 | active |
| authorizerdev/authorizer Authorizer is an open-source, self-hosted authentication and authorization server written in Go, providing OAuth2/OIDC, SAML SSO, MFA, soci… | 98 | 1984 | active |
| dfunckt/django-rules A Python library providing object-level permissions for Django without requiring a database, built on a generic rule-based predicate framew… | 44 | 1977 | stable |
| tiger1103/gfast GFast is a full-stack, front-end/back-end separated admin management system built on GoFrame 2.x and Vue3 + Element Plus. It ships with RBA… | 70 | 1959 | active |
| dromara/MaxKey MaxKey is an open-source IAM/IDaaS product providing Single Sign-On (SSO), identity management, and RBAC-based access control. It supports … | 92 | 1940 | active |
| fastadminnet/fastadmin FastAdmin is a rapid backend admin development framework built on ThinkPHP and Bootstrap (with AdminLTE). It provides one-click CRUD genera… | 71 | 1922 | active |
| jeremyevans/rodauth Rodauth is Ruby's most advanced authentication framework, providing a comprehensive set of composable authentication features built on the … | 77 | 1919 | stable |
| mainmatter/ember-simple-auth Ember Simple Auth is a lightweight library for implementing authentication and authorization in Ember.js applications. It maintains a clien… | 91 | 1908 | active |
| symfony/security-core The core library of the Symfony Security component, providing infrastructure for authentication tokens, user providers, role hierarchies, a… | 95 | 1877 | stable |
| retspen/webvirtcloud WebVirtCloud is a Django-based web interface for managing QEMU/KVM virtualization hosts via the libvirt API. It lets admins create, update,… | 58 | 1875 | active |
| zitadel/oidc A Go library implementing both the OpenID Connect client (Relying Party) and server (OpenID Provider) sides of the OIDC/OAuth2 standards, c… | 98 | 1872 | active |
| yanzhenjie/AndPermission AndPermission is an Android library that simplifies requesting runtime permissions and special permissions like installing unknown-source A… | 32 | 6624 | maintenance |
| apache/casbin-pycasbin PyCasbin is the Python implementation of Apache Casbin, an authorization library that enforces access control via configurable models such … | 87 | 1764 | stable |
| privacyidea/privacyidea privacyIDEA is an open-source, self-hosted multi-factor authentication (MFA) server that centrally manages authentication tokens—OTP (HOTP/… | 93 | 1759 | stable |
| veops/oneterm OneTerm is a lightweight, flexible enterprise bastion host (jump server) built on the 4A model: authentication, authorization, account, and… | 59 | 1732 | active |
| symfony/security-http The Symfony Security HTTP component provides HTTP integration of the Symfony Security Core component. It secures (parts of) applications us… | 95 | 1701 | stable |
| sudo-project/sudo Sudo is a Unix utility that allows a system administrator to delegate limited root or other-user privileges to users on a per-command basis… | 78 | 1699 | stable |
| cedar-policy/cedar Cedar is a purpose-built policy language and Rust implementation for writing and enforcing fine-grained authorization policies in applicati… | 95 | 1693 | stable |
| fastapi-users/fastapi-users FastAPI Users is a ready-to-use and customizable user management library for FastAPI applications. It provides registration, login, passwor… | 87 | 6227 | maintenance |
| inverse-inc/packetfence PacketFence is a free and open source network access control (NAC) solution with a captive portal for registration and remediation, 802.1X … | 88 | 1678 | stable |
| cjbi/admin3 Admin3 is a lightweight admin management framework built on Java 21/Spring Boot 3.2 for the backend and TypeScript/Vite/Vue3/Element Plus f… | 58 | 1675 | active |
| mikespook/gorbac goRBAC is a lightweight role-based access control (RBAC) library for Go, supporting many-to-many role/permission mappings and hierarchical … | 65 | 1674 | active |
| pow-auth/pow Pow is a robust, modular, and extendable authentication and user management library for Elixir, built for Phoenix and Plug-based applicatio… | 24 | 1668 | stable |
| FairwindsOps/rbac-manager RBAC Manager is a Kubernetes operator that simplifies authorization management by allowing declarative configuration of Role Bindings and S… | 94 | 1665 | active |
| userfrosting/UserFrosting UserFrosting is a modern PHP user management framework built on Slim, Twig, Eloquent ORM, Vite, and Vue, providing login, registration, and… | 93 | 1665 | active |
| cloudfoundry/uaa Cloud Foundry's User Account and Authentication (UAA) server, a multi-tenant identity management service that acts as an OAuth2 provider an… | 99 | 1638 | active |
| izhaorui/Zr.Admin.NET ZR.Admin.NET is a cross-platform, front-end/back-end separated general-purpose admin management system based on .NET 8 and Vue (with Ant De… | 76 | 1635 | active |
| Zizaco/entrust Entrust is a Laravel package that adds role-based permissions (RBAC) to Laravel applications, providing Role and Permission models, migrati… | 23 | 6003 | maintenance |
| SELinuxProject/selinux The upstream userspace repository for Security Enhanced Linux (SELinux), providing the libraries and tools that complement SELinux support … | 88 | 1619 | stable |
| DuendeSoftware/products Duende Products is a suite of identity and access management SDKs for ASP.NET Core, centered on Duende IdentityServer, a standards-complian… | 93 | 1614 | stable |
| Permify/permify Permify is an open-source authorization-as-a-service inspired by Google Zanzibar, providing a permission database and policy decision point… | 95 | 5940 | maintenance |
| palkan/action_policy Action Policy is an authorization framework for Ruby and Rails applications, built around resource-specific policy classes with composable … | 65 | 1560 | stable |
| lampo1024/DncZeus DncZeus is a general-purpose admin management framework built on .NET 7 (ASP.NET Core Web API + EF Core) and Vue.js (iview-admin) with full… | 39 | 1555 | active |
| cartalyst/sentinel Sentinel is a PHP 8.3+ framework-agnostic authentication and authorization library by Cartalyst. It provides user authentication, roles, pe… | 61 | 1526 | active |
| infrahq/infra Infra is an open-source authentication and access management service for servers, Kubernetes clusters, and databases. It provides identity-… | 66 | 1467 | active |
| Sorcery/sorcery Sorcery is a stripped-down authentication library for Ruby on Rails supporting ActiveRecord, Mongoid, and other ORMs. It provides core auth… | 71 | 1464 | active |
| cyberark/KubiScan KubiScan is a Python CLI tool that scans Kubernetes clusters for risky permissions in the RBAC authorization model. It identifies risky rol… | 33 | 1431 | active |
| nasirkhan/laravel-starter A CMS-like modular starter application built on Laravel 13.x and Livewire, providing authentication, role management, an admin backend, bac… | 97 | 1403 | active |
| yii-starter-kit/yii2-starter-kit A full-featured Yii2 application template designed to bootstrap advanced PHP websites quickly. It ships with a ready-made admin backend bas… | 55 | 1396 | active |
| cesanta/docker_auth A standalone authentication and authorization server implementing the Docker Registry 2 token-based auth protocol. It issues tokens for Doc… | 57 | 1370 | active |
| bennylope/django-organizations A Django app that adds multi-user account and organization management to Django projects, separating individual user identity from group ac… | 85 | 1364 | stable |
| aserto-dev/topaz Topaz is an open-source, cloud-native authorization service that provides fine-grained, real-time, policy-based access control for applicat… | 99 | 1360 | active |
| emonney/QuickApp QuickApp is an opinionated full-stack project template combining Angular 21 and ASP.NET Core 10 with pre-built authentication, authorizatio… | 65 | 1349 | active |
| webdevcody/wdc-saas-starter-kit A GitHub template repository providing a Next.js SaaS starter kit with authentication, Stripe subscription billing, Drizzle ORM with Postgr… | 48 | 1347 | active |
| warrant-dev/warrant Warrant is a highly scalable, centralized fine-grained authorization service inspired by Google Zanzibar, written in Go. It lets applicatio… | 46 | 1336 | active |
| php-casbin/php-casbin PHP-Casbin is a powerful and efficient open-source access control library for PHP projects that enforces authorization based on models like… | 98 | 1335 | active |
| apache/casbin-Casbin.NET Casbin.NET is the .NET (C#) implementation of Apache Casbin, an open-source authorization library that enforces access control via models s… | 95 | 1330 | stable |
| sebadob/rauthy Rauthy is a lightweight, Rust-based Identity Provider offering Single Sign-On via OpenID Connect, OAuth 2, and PAM, with strong emphasis on… | 95 | 1291 | active |
| freeipa/freeipa FreeIPA is an integrated security information management solution providing centralized identity, authentication, and access control for Li… | 77 | 1274 | stable |
| delight-im/PHP-Auth A lightweight, secure authentication library for PHP that handles registration, login, email verification, password resets, and session man… | 44 | 1244 | stable |
| ziishaned/opus Opus is an open-source, self-hosted knowledge base web application for teams, where members create wikis and nested pages organized into sp… | 29 | 1226 | active |
| transmissions11/solmate Solmate is a collection of gas-optimized, opinionated Solidity smart contract building blocks including token standards (ERC20, ERC721, ERC… | 37 | 4288 | maintenance |
| mineadmin/MineAdmin MineAdmin is an out-of-the-box, front-end/back-end separated admin management system built on the PHP Hyperf framework (Swoole) and Vue 3 +… | 94 | 1217 | active |
| casosorg/casos CasOS is a cloud operating system built on Kubernetes that embeds the full Kubernetes control plane (API server, controller manager, schedu… | 95 | 1215 | active |
| paralus/paralus Paralus is an open source, CNCF Sandbox zero-trust Kubernetes access manager that provides controlled, audited access to Kubernetes cluster… | 71 | 1209 | active |
| topiam/eiam TOPIAM is an open-source IAM/IDaaS identity and access management platform for centrally managing employee accounts, permissions, authentic… | 40 | 1204 | active |
| yezz123/authx AuthX is a Python library providing ready-to-use, customizable authentication and OAuth2 management for FastAPI applications. It offers JWT… | 92 | 1196 | active |
| symfony/security The Symfony Security Component provides a complete authentication and authorization system for PHP web applications. It supports HTTP basic… | 10 | 1196 | stable |
| zccbbg/wms-ruoyi RuoYi-WMS is an open-source warehouse management system (WMS) built on the RuoYi framework with a Spring Boot 3 / JDK 17 backend and Vue + … | 65 | 1183 | active |
| Quitten/Autorize Autorize is a Burp Suite extension, written in Jython, that automatically detects authorization and authentication enforcement flaws in web… | 56 | 1169 | active |
| apache/accumulo Apache Accumulo is a sorted, distributed key/value store built on Apache Hadoop's HDFS and Apache ZooKeeper for scalable storage and retrie… | 77 | 1167 | stable |
| nestjsx/nest-access-control A NestJS module providing role- and attribute-based access control (RBAC/ABAC), built on top of onury's accesscontrol library. It offers de… | 58 | 1158 | active |
| AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet Microsoft's IdentityModel extensions for .NET, a library for working with OpenID Connect, OAuth 2.0, and JSON Web Tokens (JWT) in .NET appl… | 98 | 1157 | active |
| eclipse-biscuit/biscuit Biscuit is a specification and reference implementation for a delegated, decentralized, capability-based authorization token, written in Ru… | 44 | 1142 | active |
| tesseral-labs/tesseral Tesseral is open-source, multi-tenant authentication infrastructure designed for B2B SaaS applications, runnable as a cloud service or self… | 43 | 1138 | active |
| apache/casbin-rs Casbin-RS is the Rust implementation of Apache Casbin, an authorization library that enforces access control based on configurable models s… | 88 | 1134 | active |
| dujiao-next/dujiao-next Dujiao-Next is an open-source digital goods e-commerce platform written in Go (Gin + GORM) with a Vue 3 customer storefront and admin panel… | 83 | 1132 | active |
| cybercog/laravel-ban Laravel Ban is a PHP package that adds banning and blocking capabilities to any Laravel Eloquent model via traits and a BanService. It supp… | 66 | 1126 | stable |
| mpociot/teamwork A Laravel package that adds user-to-team associations with an invitation system via Eloquent models and migrations. It provides Team models… | 33 | 1098 | stable |
| caoqianming/django-vue-admin A full-stack admin platform built on RBAC permission control, with a Django + Django REST Framework backend and a Vue 2 + Element UI fronte… | 66 | 1096 | active |
| OpenIDC/mod_auth_openidc An OpenID Certified™ Apache HTTPd module implementing OpenID Connect 1.x and FAPI 2.x Relying Party functionality. It lets an Apache web se… | 99 | 1093 | stable |
| alcideio/rbac-tool A kubectl plugin and standalone CLI that simplifies Kubernetes RBAC by visualizing, analyzing, generating, and querying RBAC policies. It h… | 26 | 1083 | active |
| jaygajera17/E-commerce-project-springBoot A Java e-commerce web application built with Spring Boot, JSP, Spring Security, and Hibernate, structured as a layered MVC project with MyS… | 69 | 1080 | active |
| Qihoo360/wayne Wayne is a web-based Kubernetes multi-cluster management and publishing platform developed by Qihoo360. It provides visualized Kubernetes o… | 23 | 3700 | maintenance |
| apache/ranger Apache Ranger is a framework to enable, monitor, and manage comprehensive data security across the Hadoop platform and beyond. It provides … | 77 | 1074 | stable |
| zmartzone/lua-resty-openidc A Lua library for NGINX/OpenResty implementing an OpenID Connect Relying Party and OAuth 2.0 Resource Server. It authenticates users via Op… | 81 | 1073 | stable |
| fastapiadmin/FastapiAdmin FastapiAdmin is an open-source full-stack rapid development platform for building enterprise admin/back-office systems, combining a FastAPI… | 74 | 1058 | active |
| auth0/auth0.js Auth0's client-side JavaScript SDK for browser-based authentication and authorization against the Auth0 platform. It provides WebAuth, Auth… | 94 | 1057 | active |
| authomatic/authomatic Authomatic is a framework-agnostic Python library that simplifies user authentication and authorization via third-party providers like Face… | 57 | 1053 | active |
| jeremykenedy/laravel-roles A Laravel package for managing roles, permissions, and user levels with Eloquent integration, including Blade extensions, middleware, and a… | 76 | 1048 | stable |
| clarkeash/doorman Doorman is a Laravel package that limits access to Laravel applications using invite codes. Invite codes can be tied to specific emails, ha… | 49 | 1044 | active |
| jaredhanson/oauth2orize OAuth2orize is a Node.js toolkit for building OAuth 2.0 authorization servers. It provides Express-compatible middleware plus a pluggable s… | 32 | 3533 | maintenance |
| openkoda/openkoda Openkoda is an open-source business application platform built on Java 17 and Spring Boot that accelerates development of enterprise system… | 33 | 1036 | active |
| osohq/oso Oso is an embedded authorization framework with a declarative policy language (Polar) for building RBAC, relationships, and collection filt… | 26 | 3491 | maintenance |
| 4jean/lav_sms LAVSMS is a self-hosted school management web application built on Laravel 8 for schools and colleges. It provides role-based accounts for … | 32 | 1025 | active |
| bnoguchi/everyauth everyauth is a Node.js authentication and authorization library supporting password login and many OAuth/OpenID providers (Facebook, Twitte… | 32 | 3471 | maintenance |
| maxcountryman/axum-login A Rust crate providing user identification, authentication, and authorization as tower middleware for the Axum web framework. It supports a… | 65 | 1021 | active |