Open-source authorization software
526 open-source libraries, tools and applications tagged authorization, ranked by how closely authorization is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
526 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Misago Misago is a full-featured, modern forum application built with Django, Python, and HTMX, designed to be fast, scalable, and responsive. It … | 88 | 2777 | active |
| X-SpringBoot X-SpringBoot is a lightweight Java rapid development platform built on Spring Boot 3 and JDK 21 with virtual threads, offering RBAC permiss… | 53 | 2696 | active |
| MetapriseAI/OrgKernel OrgKernel is an open-source trust layer for AI agents providing cryptographic agent identity (Ed25519), scoped execution tokens, SHA-256 ha… | 52 | 2693 | active |
| Apache Casbin jCasbin is an Apache-licensed Java authorization library that enforces access control using models such as ACL, RBAC, and ABAC defined in c… | 86 | 2650 | stable |
| ory/fosite Fosite is a security-first, extensible OAuth 2.0 and OpenID Connect SDK for Go, implementing RFC 6749, RFC 6819, PKCE, and OpenID Connect C… | 54 | 2618 | active |
| FreeRADIUS/freeradius-server FreeRADIUS is a high-performance, highly configurable multi-protocol policy server supporting RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, wr… | 84 | 2614 | stable |
| tbruyelle/RxPermissions An Android library that wraps the Android M runtime permission model in RxJava2 reactive streams. It lets developers request permissions li… | 10 | 10393 | maintenance |
| liukuo362573/YiShaAdmin YiShaAdmin is an open-source admin management system built on .NET Core MVC with a clean Bootstrap/jQuery UI. It provides role-based permis… | 32 | 2578 | active |
| pac4j pac4j is a Java security engine for authenticating users, managing profiles, and enforcing authorizations across web applications and servi… | 77 | 2535 | stable |
| Symfony Security SecurityBundle is the official Symfony bundle that integrates the Security component into the Symfony full-stack framework. It provides con… | 93 | 2490 | stable |
| huanzi-qch/base-admin Base Admin is a simple, general-purpose Java admin management system built on Spring Boot, Spring Security, Spring Data JPA, Thymeleaf, and… | 69 | 2444 | active |
| panva/openid-client openid-client is a TypeScript library providing OAuth 2.0 and OpenID Connect client APIs for JavaScript runtimes including Node.js, Deno, b… | 95 | 2419 | stable |
| onury/accesscontrol A Node.js library implementing Role-Based Access Control (RBAC) merged with Attribute-Based Access Control (ABAC), including role inheritan… | 93 | 2330 | active |
| LuckPerms LuckPerms is a permissions plugin for Minecraft servers that lets admins control player access by creating groups and assigning permissions… | 77 | 2328 | stable |
| benedmunds/CodeIgniter-Ion-Auth Ion Auth is a simple and lightweight authentication library for the CodeIgniter 4 PHP framework. It provides user registration, login, grou… | 32 | 2306 | stable |
| a466350665/smart-sso Smart-SSO is a lightweight single sign-on (SSO) authentication and authorization center built on Spring Boot, implementing the OAuth2 autho… | 66 | 2299 | active |
| santigarcor/laratrust Laratrust is a PHP package for Laravel that manages roles and permissions (RBAC/ACL) for users, with support for multiple user models, team… | 67 | 2274 | active |
| nest-admin A Vue 3 + TypeScript admin dashboard template built with Vite and Ant Design Vue 4, featuring an RBAC permission system, JSON Schema dynami… | 62 | 2268 | active |
| zoujingli/ThinkAdmin ThinkAdmin is a minimal admin management system built on ThinkPHP 6/8 with annotation-based RBAC permissions, async multi-process tasks, an… | 71 | 2264 | active |
| Caddy Security (AuthCrunch) A security app and plugin for Caddy v2 providing authentication, authorization, and accounting (AAA). It supports Form-Based, Basic, Local,… | 98 | 2254 | active |
| mizhexiaoxiao/vue-fastapi-admin A modern, lightweight admin management platform built with FastAPI, Vue3, and Naive UI, featuring RBAC permission management, dynamic routi… | 39 | 2254 | active |
| Nan's BBS Nan's BBS (南生论坛) is an open-source Java forum/community platform styled after Juejin, built with SpringBoot on the backend and Vue on the f… | 70 | 2250 | active |
| ovh/the-bastion The Bastion is a self-hosted SSH bastion/gateway that acts as the single entry point for operational teams to access infrastructure devices… | 84 | 2189 | stable |
| ruby-oauth/oauth2 A Ruby gem implementing OAuth 2.0 and 2.1 client functionality, including OpenID Connect (OIDC) support. It handles token requests, grant t… | 93 | 2179 | active |
| ContiNew Admin ContiNew Admin is a full-stack, multi-tenant admin management framework/scaffold built on Spring Boot 3 (Java 17) and Vue 3 with Arco Desig… | 78 | 2131 | active |
| authorizerdev/authorizer Authorizer is an open-source, self-hosted authentication and authorization server written in Go, providing OAuth2/OIDC, SAML SSO, MFA, soci… | 97 | 2107 | active |
| authgear/authgear-server Authgear is an open-source customer identity and access management (CIAM) platform serving as a self-hostable alternative to Auth0, Clerk, … | 98 | 2098 | active |
| macrozheng/mall-tiny mall-tiny is a rapid development scaffold based on SpringBoot and MyBatis-Plus with complete role-based permission management built in. It … | 54 | 2093 | active |
| xuxueli/xxl-sso XXL-SSO is a lightweight, distributed single sign-on (SSO) framework for Java/Spring applications. It supports login, permission, and role … | 91 | 2011 | active |
| veops/oneterm OneTerm is a lightweight, flexible enterprise bastion host (jump server) built on the 4A model: authentication, authorization, account, and… | 93 | 1985 | active |
| dfunckt/django-rules A Python library providing object-level permissions for Django without requiring a database, built on a generic rule-based predicate framew… | 40 | 1976 | stable |
| dromara/MaxKey MaxKey is an open-source IAM/IDaaS product providing Single Sign-On (SSO), identity management, and RBAC-based access control. It supports … | 96 | 1974 | active |
| gfast GFast is a full-stack, front-end/back-end separated admin management system built on GoFrame 2.x and Vue3 + Element Plus. It ships with RBA… | 67 | 1967 | active |
| jeremyevans/rodauth Rodauth is Ruby's most advanced authentication framework, providing a comprehensive set of composable authentication features built on the … | 77 | 1944 | stable |
| fastadminnet/fastadmin FastAdmin is a rapid backend admin development framework built on ThinkPHP and Bootstrap (with AdminLTE). It provides one-click CRUD genera… | 77 | 1929 | active |
| mainmatter/ember-simple-auth Ember Simple Auth is a lightweight library for implementing authentication and authorization in Ember.js applications. It maintains a clien… | 94 | 1905 | active |
| zitadel/oidc A Go library implementing both the OpenID Connect client (Relying Party) and server (OpenID Provider) sides of the OIDC/OAuth2 standards, c… | 94 | 1900 | active |
| Symfony Security The core library of the Symfony Security component, providing infrastructure for authentication tokens, user providers, role hierarchies, a… | 93 | 1877 | stable |
| retspen/webvirtcloud WebVirtCloud is a Django-based web interface for managing QEMU/KVM virtualization hosts via the libvirt API. It lets admins create, update,… | 66 | 1876 | active |
| Cedar Policy Language Cedar is a purpose-built policy language and Rust implementation for writing and enforcing fine-grained authorization policies in applicati… | 98 | 1801 | stable |
| privacyIDEA privacyIDEA is an open-source, self-hosted multi-factor authentication (MFA) server that centrally manages authentication tokens—OTP (HOTP/… | 92 | 1777 | stable |
| Apache Casbin PyCasbin is the Python implementation of Apache Casbin, an authorization library that enforces access control via configurable models such … | 85 | 1771 | stable |
| yanzhenjie/AndPermission AndPermission is an Android library that simplifies requesting runtime permissions and special permissions like installing unknown-source A… | 32 | 6619 | maintenance |
| sudo-project/sudo Sudo is a Unix utility that allows a system administrator to delegate limited root or other-user privileges to users on a per-command basis… | 79 | 1728 | stable |
| inverse-inc/packetfence PacketFence is a free and open source network access control (NAC) solution with a captive portal for registration and remediation, 802.1X … | 86 | 1704 | stable |
| Symfony Security The Symfony Security HTTP component provides HTTP integration of the Symfony Security Core component. It secures (parts of) applications us… | 93 | 1701 | stable |
| FastAPI Users FastAPI Users is a ready-to-use and customizable user management library for FastAPI applications. It provides registration, login, passwor… | 80 | 6254 | maintenance |
| cjbi/admin3 Admin3 is a lightweight admin management framework built on Java 21/Spring Boot 3.2 for the backend and TypeScript/Vite/Vue3/Element Plus f… | 55 | 1682 | active |
| mikespook/gorbac goRBAC is a lightweight role-based access control (RBAC) library for Go, supporting many-to-many role/permission mappings and hierarchical … | 61 | 1676 | active |
| FairwindsOps/rbac-manager RBAC Manager is a Kubernetes operator that simplifies authorization management by allowing declarative configuration of Role Bindings and S… | 92 | 1670 | active |
| Pow Pow is a robust, modular, and extendable authentication and user management library for Elixir, built for Phoenix and Plug-based applicatio… | 23 | 1668 | stable |
| userfrosting/UserFrosting UserFrosting is a modern PHP user management framework built on Slim, Twig, Eloquent ORM, Vite, and Vue, providing login, registration, and… | 93 | 1667 | active |
| izhaorui/Zr.Admin.NET ZR.Admin.NET is a cross-platform, front-end/back-end separated general-purpose admin management system based on .NET 8 and Vue (with Ant De… | 75 | 1648 | active |
| cloudfoundry/uaa Cloud Foundry's User Account and Authentication (UAA) server, a multi-tenant identity management service that acts as an OAuth2 provider an… | 98 | 1637 | active |
| SELinuxProject/selinux The upstream userspace repository for Security Enhanced Linux (SELinux), providing the libraries and tools that complement SELinux support … | 84 | 1634 | stable |
| Zizaco/entrust Entrust is a Laravel package that adds role-based permissions (RBAC) to Laravel applications, providing Role and Permission models, migrati… | 23 | 5999 | maintenance |
| Permify/permify Permify is an open-source authorization-as-a-service inspired by Google Zanzibar, providing a permission database and policy decision point… | 96 | 5956 | maintenance |
| DuendeSoftware/products Duende Products is a suite of identity and access management SDKs for ASP.NET Core, centered on Duende IdentityServer, a standards-complian… | 95 | 1614 | stable |
| Action Policy Action Policy is an authorization framework for Ruby and Rails applications, built around resource-specific policy classes with composable … | 65 | 1561 | stable |
| lampo1024/DncZeus DncZeus is a general-purpose admin management framework built on .NET 7 (ASP.NET Core Web API + EF Core) and Vue.js (iview-admin) with full… | 35 | 1550 | active |
| cartalyst/sentinel Sentinel is a PHP 8.3+ framework-agnostic authentication and authorization library by Cartalyst. It provides user authentication, roles, pe… | 57 | 1527 | active |
| dujiao-next/dujiao-next Dujiao-Next is an open-source digital goods e-commerce platform written in Go (Gin + GORM) with a Vue 3 customer storefront and admin panel… | 82 | 1496 | active |
| infrahq/infra Infra is an open-source authentication and access management service for servers, Kubernetes clusters, and databases. It provides identity-… | 68 | 1468 | active |
| Sorcery/sorcery Sorcery is a stripped-down authentication library for Ruby on Rails supporting ActiveRecord, Mongoid, and other ORMs. It provides core auth… | 65 | 1463 | active |
| cyberark/KubiScan KubiScan is a Python CLI tool that scans Kubernetes clusters for risky permissions in the RBAC authorization model. It identifies risky rol… | 30 | 1433 | active |
| nasirkhan/laravel-starter A CMS-like modular starter application built on Laravel 13.x and Livewire, providing authentication, role management, an admin backend, bac… | 96 | 1406 | active |
| yii-starter-kit/yii2-starter-kit A full-featured Yii2 application template designed to bootstrap advanced PHP websites quickly. It ships with a ready-made admin backend bas… | 51 | 1396 | active |
| casosorg/casos CasOS is a cloud operating system built on Kubernetes that embeds the full Kubernetes control plane (API server, controller manager, schedu… | 93 | 1374 | active |
| cesanta/docker_auth A standalone authentication and authorization server implementing the Docker Registry 2 token-based auth protocol. It issues tokens for Doc… | 54 | 1373 | active |
| bennylope/django-organizations A Django app that adds multi-user account and organization management to Django projects, separating individual user identity from group ac… | 82 | 1365 | stable |
| aserto-dev/topaz Topaz is an open-source, cloud-native authorization service that provides fine-grained, real-time, policy-based access control for applicat… | 98 | 1363 | active |
| emonney/QuickApp QuickApp is an opinionated full-stack project template combining Angular 21 and ASP.NET Core 10 with pre-built authentication, authorizatio… | 77 | 1352 | active |
| webdevcody/wdc-saas-starter-kit A GitHub template repository providing a Next.js SaaS starter kit with authentication, Stripe subscription billing, Drizzle ORM with Postgr… | 45 | 1347 | active |
| sebadob/rauthy Rauthy is a lightweight, Rust-based Identity Provider offering Single Sign-On via OpenID Connect, OAuth 2, and PAM, with strong emphasis on… | 92 | 1346 | active |
| php-casbin/php-casbin PHP-Casbin is a powerful and efficient open-source access control library for PHP projects that enforces authorization based on models like… | 94 | 1338 | active |
| Apache Casbin Casbin.NET is the .NET (C#) implementation of Apache Casbin, an open-source authorization library that enforces access control via models s… | 88 | 1338 | stable |
| warrant-dev/warrant Warrant is a highly scalable, centralized fine-grained authorization service inspired by Google Zanzibar, written in Go. It lets applicatio… | 43 | 1337 | active |
| FreeIPA FreeIPA is an integrated security information management solution providing centralized identity, authentication, and access control for Li… | 77 | 1295 | stable |
| delight-im/PHP-Auth A lightweight, secure authentication library for PHP that handles registration, login, email verification, password resets, and session man… | 40 | 1245 | stable |
| ziishaned/opus Opus is an open-source, self-hosted knowledge base web application for teams, where members create wikis and nested pages organized into sp… | 25 | 1227 | active |
| transmissions11/solmate Solmate is a collection of gas-optimized, opinionated Solidity smart contract building blocks including token standards (ERC20, ERC721, ERC… | 34 | 4286 | maintenance |
| MineAdmin MineAdmin is an out-of-the-box, front-end/back-end separated admin management system built on the PHP Hyperf framework (Swoole) and Vue 3 +… | 93 | 1219 | active |
| paralus/paralus Paralus is an open source, CNCF Sandbox zero-trust Kubernetes access manager that provides controlled, audited access to Kubernetes cluster… | 65 | 1213 | active |
| topiam/eiam TOPIAM is an open-source IAM/IDaaS identity and access management platform for centrally managing employee accounts, permissions, authentic… | 37 | 1213 | active |
| RuoYi WMS RuoYi-WMS is an open-source warehouse management system (WMS) built on the RuoYi framework with a Spring Boot 3 / JDK 17 backend and Vue + … | 62 | 1211 | active |
| fastapiadmin/FastapiAdmin FastapiAdmin is an open-source full-stack rapid development platform for building enterprise admin/back-office systems, combining a FastAPI… | 72 | 1204 | active |
| yezz123/authx AuthX is a Python library providing ready-to-use, customizable authentication and OAuth2 management for FastAPI applications. It offers JWT… | 88 | 1203 | active |
| Symfony Security The Symfony Security Component provides a complete authentication and authorization system for PHP web applications. It supports HTTP basic… | 10 | 1196 | stable |
| apache/accumulo Apache Accumulo is a sorted, distributed key/value store built on Apache Hadoop's HDFS and Apache ZooKeeper for scalable storage and retrie… | 77 | 1179 | stable |
| Quitten/Autorize Autorize is a Burp Suite extension, written in Jython, that automatically detects authorization and authentication enforcement flaws in web… | 52 | 1173 | active |
| Biscuit Biscuit is a specification and reference implementation for a delegated, decentralized, capability-based authorization token, written in Ru… | 41 | 1166 | active |
| nestjsx/nest-access-control A NestJS module providing role- and attribute-based access control (RBAC/ABAC), built on top of onury's accesscontrol library. It offers de… | 75 | 1159 | active |
| AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet Microsoft's IdentityModel extensions for .NET, a library for working with OpenID Connect, OAuth 2.0, and JSON Web Tokens (JWT) in .NET appl… | 98 | 1154 | active |
| Apache Casbin Casbin-RS is the Rust implementation of Apache Casbin, an authorization library that enforces access control based on configurable models s… | 82 | 1144 | active |
| tesseral-labs/tesseral Tesseral is open-source, multi-tenant authentication infrastructure designed for B2B SaaS applications, runnable as a cloud service or self… | 40 | 1138 | active |
| cybercog/laravel-ban Laravel Ban is a PHP package that adds banning and blocking capabilities to any Laravel Eloquent model via traits and a BanService. It supp… | 59 | 1127 | stable |
| jaygajera17/E-commerce-project-springBoot A Java e-commerce web application built with Spring Boot, JSP, Spring Security, and Hibernate, structured as a layered MVC project with MyS… | 65 | 1109 | active |
| caoqianming/django-vue-admin A full-stack admin platform built on RBAC permission control, with a Django + Django REST Framework backend and a Vue 2 + Element UI fronte… | 63 | 1104 | active |
| mpociot/teamwork A Laravel package that adds user-to-team associations with an invitation system via Eloquent models and migrations. It provides Team models… | 83 | 1098 | stable |
| OpenIDC/mod_auth_openidc An OpenID Certified™ Apache HTTPd module implementing OpenID Connect 1.x and FAPI 2.x Relying Party functionality. It lets an Apache web se… | 96 | 1096 | stable |