function: authorization
504 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| auth0/auth0-spa-js Auth0's official JavaScript SDK for adding authentication to Single Page Applications using the Authorization Code Grant flow with PKCE. It… | 98 | 1009 | active |
| AthenZ/athenz Athenz is an open source platform for X.509 certificate-based service authentication and fine-grained role-based access control (RBAC) in d… | 100 | 1006 | active |
| seeden/rbac A Node.js library implementing hierarchical role-based access control (RBAC) with roles, permissions, and grant inheritance. It supports in… | 69 | 1005 | active |
| SUSE/Portus Portus is an open-source authorization service and web UI for the Docker Registry v2 API, providing fine-grained push/pull permissions via … | 10 | 2981 | maintenance |
| OptimalBits/node_acl A minimalistic access control list (ACL) library for Node.js applications, inspired by Zend_ACL. It manages users, roles, hierarchies, and … | 32 | 2605 | maintenance |
| Swizec/useAuth useAuth is a React hook library that adds authentication to React apps with minimal setup, supporting Auth0 and Netlify Identity via a prov… | 23 | 2567 | maintenance |
| Antabot/White-Jotter White-Jotter is a simple content management system (CMS) built with a Vue.js frontend and Spring Boot backend, demonstrating a full front-e… | 23 | 2536 | maintenance |
| ory/ladon Ladon is a Go SDK for policy-based access control (authorization), inspired by AWS IAM policies. It provides fine-grained, condition-based … | 44 | 2457 | maintenance |
| mjrussell/redux-auth-wrapper redux-auth-wrapper is a React Higher Order Component (HOC) library for handling authentication and authorization in React + Redux applicati… | 32 | 2175 | maintenance |
| panique/huge HUGE is a simple user-authentication solution embedded in a minimal PHP framework skeleton, using PHP's official bcrypt password hashing. I… | 23 | 2160 | maintenance |
| renrenio/renren-security renren-security is a lightweight, front-end/back-end separated Java rapid development platform and permission (RBAC) system built on Spring… | 23 | 2025 | maintenance |
| florianheinemann/passwordless A Node.js/Express module that enables passwordless user authentication using one-time password (OTPW) tokens delivered via email or SMS. It… | 23 | 1941 | maintenance |
| jakubgarfield/Bonobo-Git-Server Bonobo Git Server is a free, open-source ASP.NET web application for hosting and managing Git repositories on Windows via IIS. It provides … | 32 | 1834 | maintenance |
| nodeSolidServer/node-solid-server NodeSolidServer is an implementation of the Solid protocol that runs a Solid personal data server (pod server) on top of the local file sys… | 82 | 1796 | maintenance |
| baichengzhou/SpringMVC-Mybatis-Shiro-redis-0.2 An upgraded demo application showing Apache Shiro permission/role-based access control integrated with SpringMVC, Mybatis, Redis, and Freem… | 32 | 1778 | maintenance |
| baijunyao/thinkphp-bjyadmin A ThinkPHP-based admin starter project that integrates common features and third-party SDKs (Auth/RBAC permissions, Alipay and WeChat payme… | 10 | 1757 | maintenance |
| DotNetOpenAuth/DotNetOpenAuth DotNetOpenAuth is a C# library implementing the OpenID and OAuth protocols for .NET applications. It lets developers build both Identity Pr… | 10 | 1716 | maintenance |
| lsgwr/spring-boot-online-exam A self-hosted online examination system built with Spring Boot (backend) and Vue + Ant Design (frontend), supporting single-choice, multipl… | 23 | 1688 | maintenance |
| xuhuisheng/lemon Lemon is an open-source office automation (OA) system written in Java, providing typical enterprise features like approval workflows, forms… | 50 | 1631 | maintenance |
| jly8866/archer Archer is a self-hosted web platform for automated SQL operations on MySQL, built on Django and the Inception SQL audit engine. It provides… | 23 | 1566 | maintenance |
| koush/Superuser An open-source Superuser management app and su binary for rooted Android devices, written in C and Java. It grants and manages root permiss… | 32 | 1560 | maintenance |
| outmoded/oz Oz is a web authorization protocol and Node.js library for granting and authenticating third-party access to an API on behalf of a user or … | 10 | 1514 | maintenance |
| mitreid-connect/OpenID-Connect-Java-Spring-Server A certified OpenID Connect reference implementation in Java on the Spring platform, providing an identity provider server, OAuth 2.0 author… | 32 | 1508 | maintenance |
| corneliusweig/rakkess rakkess is a kubectl plugin that displays an access matrix showing the current user's permissions across all Kubernetes server resources, s… | 23 | 1401 | maintenance |
| sighupio/permission-manager A web UI application for managing Kubernetes RBAC and users. It lets admins create users, assign namespace permissions via templates, and d… | 23 | 1373 | maintenance |
| microsoft/agent-governance-toolkit A Microsoft open-source toolkit providing policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for au… | 78 | 6128 | experimental |
| Netflix/hubcommander HubCommander is a user-extendable Slack bot for chat-ops style GitHub organization management, letting users perform privileged tasks like … | 57 | 1312 | maintenance |
| longguikeji/arkid ArkID is an open-source enterprise IDaaS/IAM platform providing unified identity, authentication, and authorization management. It supports… | 23 | 1283 | maintenance |
| jaliss/securesocial SecureSocial is an authentication module for Play Framework applications supporting OAuth, OAuth2, OpenID, and username/password login, wit… | 32 | 1185 | maintenance |
| mdmsoft/yii2-admin A GUI-based RBAC (Role-Based Access Control) manager extension for the Yii2 PHP framework. It provides an administrative interface for mana… | 23 | 1150 | maintenance |
| romanbican/roles A Laravel 5 package for managing user roles and permissions, including role levels, permission inheritance, Blade template extensions, and … | 10 | 1146 | maintenance |
| WilliamXu96/ABP-MicroService A low-code admin platform built on ABP vNext microservice architecture with a vue-element-admin frontend. It provides tenant/user/role mana… | 23 | 1144 | maintenance |
| RafaelVidaurre/angular-permission angular-permission is an AngularJS library providing role and permission based access control for routes. It lets developers declaratively … | 23 | 1116 | maintenance |
| liggitt/audit2rbac audit2rbac is a Go CLI tool that takes a Kubernetes audit log and a username as input and generates RBAC Role and RoleBinding objects cover… | 23 | 1112 | maintenance |
| lingthio/Flask-User Flask-User is a Flask extension providing customizable user authentication and account management, including registration, email confirmati… | 23 | 1075 | maintenance |
| tower1229/Vue-Access-Control Vue-Access-Control is a frontend access control framework built on Vue, Vue Router, and axios. It controls user permissions at three levels… | 32 | 1071 | maintenance |
| yeqifu/warehouse A Java Spring Boot web application for warehouse/inventory management with business modules for customers, suppliers, goods, purchases, sal… | 62 | 1026 | maintenance |
| lucia-auth/lucia Lucia is a TypeScript authentication library for managing user sessions and OAuth in web applications. It was deprecated in March 2025 and … | 75 | 10450 | abandoned |
| spring-attic/spring-security-oauth A Spring Security library providing OAuth 1(a) and OAuth 2 support for both consumers and providers in Spring web applications. It was arch… | 10 | 4690 | abandoned |
| google/santa Santa is a binary and file access authorization system for macOS, consisting of a system extension that monitors executions, a daemon that … | 10 | 4511 | abandoned |
| skoruba/IdentityServer4.Admin A web-based administration UI for managing IdentityServer4 clients, resources, and ASP.NET Core Identity users, roles, and claims. It ships… | 10 | 3578 | abandoned |
| Netflix/consoleme ConsoleMe is a web service from Netflix that centralizes AWS IAM permission management, offering console login, self-service permission req… | 10 | 3196 | abandoned |
| buzzfeed/sso sso (S.S. Octopus) is a single sign-on solution built at BuzzFeed for securing internal services behind OAuth-based authentication. It acts… | 10 | 3123 | abandoned |
| Caiyeon/goldfish Goldfish is a web-based UI and workflow tool for HashiCorp Vault, built with VueJS on the frontend and a Go backend using Vault's native AP… | 10 | 2127 | abandoned |
| aspnet/Identity ASP.NET Core Identity is the membership system for ASP.NET Core web applications, providing login, membership, and user data management. Th… | 10 | 1946 | abandoned |
| andrewelkins/Laravel-4-Bootstrap-Starter-Site A Laravel 4 starter application providing a basic blog with Bootstrap 3 front-end and an admin back-end. It bundles community packages like… | 23 | 1761 | abandoned |
| pallets-eco/flask-security-3.0 Flask-Security 3.0 is a Flask extension providing quick and simple authentication and security features such as login, registration, and ro… | 10 | 1624 | abandoned |
| technoweenie/restful-authentication A widely-used Ruby on Rails plugin/generator that provides a foundation for user authentication, including login/logout, secure password ha… | 10 | 1564 | abandoned |
| cartalyst/sentry Sentry is a deprecated, framework-agnostic PHP authentication and authorization library providing user groups, permissions, activation, thr… | 32 | 1525 | abandoned |
| 9p4/jellyfin-plugin-sso A Jellyfin server plugin that enables single sign-on (SSO) login through external identity providers such as Google, Microsoft, Keycloak, A… | 10 | 1462 | abandoned |
| honraytech/VueThink VueThink is a front-end/back-end separated framework combining the Vue 2.x ecosystem (Vue, Vue-Router, Vuex, Element-UI) with ThinkPHP 5 on… | 32 | 1327 | abandoned |
| aspnet/Security The former home of security and authorization middleware for ASP.NET Core, including authentication handlers for cookies, OAuth, and social… | 10 | 1292 | abandoned |
| nathanl/authority Authority is a Ruby gem that helps you authorize actions in Rails apps by grouping models under Authorizer classes with plain Ruby methods.… | 10 | 1197 | abandoned |
| strongloop/microgateway IBM API Connect Microgateway is an extensible Node.js-based API gateway framework for securing and controlling access to microservices and … | 32 | 1186 | abandoned |
| cemerick/friend Friend is an extensible authentication and authorization library for Clojure Ring web applications and services. It provides authentication… | 10 | 1152 | abandoned |
| megagao/production_ssm A production management ERP system built with the SSM stack (Spring, SpringMVC, MyBatis) and jQuery EasyUI, developed as part of a manufact… | 32 | 1087 | abandoned |
| loft-sh/kiosk Kiosk is a multi-tenancy extension for Kubernetes that lets cluster admins securely share a single cluster among multiple tenants. It provi… | 10 | 1070 | abandoned |
| RealmTeam/django-rest-framework-social-oauth2 A Django package that integrates python-social-auth and django-oauth-toolkit to provide OAuth2 social authentication for Django REST Framew… | 67 | 1066 | abandoned |
| Supabase Supabase is an open-source Postgres development platform that bundles a hosted (or self-hosted) Postgres database with authentication, auto… | 98 | 108441 | stable |
| JeecgBoot JeecgBoot is an enterprise-grade AI low-code platform for Java that combines low-code and zero-code development with AI Skills that generat… | 95 | 47483 | active |
| payloadcms/payload Payload is an open-source, MIT-licensed fullstack Next.js framework and headless CMS written in TypeScript. A single config instantly gener… | 94 | 44422 | stable |
| directus/directus Directus is an open-source backend application that wraps any SQL database into instant REST and GraphQL APIs, a no-code data studio, and a… | 99 | 37603 | active |
| Vault HashiCorp Vault is a secrets management server that securely stores, generates, and controls access to credentials, certificates, and encry… | 98 | 36180 | stable |
| symfony/symfony Symfony is a full-stack PHP framework for building web and console applications, plus a set of reusable, decoupled PHP components used by p… | 95 | 31135 | stable |
| Harbor Harbor is an open source cloud native container registry that stores, signs, and scans container images and other OCI artifacts. It extends… | 96 | 29236 | stable |
| Infisical/infisical Infisical is an open-source platform for secrets management, certificate lifecycle management, KMS, and privileged access management, usabl… | 95 | 28981 | stable |
| lenve/vhr vhr (微人事) is a full-stack, front-end/back-end separated human resources management system built with Spring Boot and Vue, covering employee… | 32 | 28078 | active |
| marmelab/react-admin React-admin is an open-source frontend framework for building single-page admin panels, dashboards, and B2B applications on top of REST or … | 92 | 26914 | stable |
| eip-work/kuboard-press Kuboard is a free, self-hosted web-based management interface for Kubernetes, supporting multi-cluster management, RBAC, monitoring and log… | 77 | 25187 | active |
| flipped-aurora/gin-vue-admin A full-stack admin development platform combining a Go (Gin) backend with a Vue 3 + Element Plus frontend, featuring JWT auth, Casbin-based… | 92 | 24971 | active |
| nocobase/nocobase NocoBase is an open-source AI + no-code platform for building business systems and internal tools, combining a WYSIWYG no-code interface wi… | 95 | 23877 | active |
| Saleor Saleor is an open-source, headless e-commerce platform exposing a GraphQL-only API for catalog, checkout, orders, payments, and promotions.… | 95 | 23266 | stable |
| apache/rocketmq Apache RocketMQ is a distributed cloud-native messaging and streaming platform built for low-latency, high-throughput, financially reliable… | 90 | 22570 | stable |
| ELAdmin ELADMIN is a front-end/back-end separated admin management system built on Spring Boot 2.7.18, JPA, Spring Security, JWT, Redis, and Vue. I… | 59 | 21918 | active |
| lin-xin/vue-manage-system vue-manage-system is an admin dashboard template built with Vue 3, Pinia, TypeScript, and Element Plus. It provides a ready-made backend ma… | 23 | 19626 | active |
| zxwk1998/vue-admin-better A popular open-source Vue admin dashboard template (vue-admin-better) offering Vue 2 + Element UI and Vue 3 + Element Plus/Arco Design vari… | 77 | 18906 | active |
| apache/pulsar Apache Pulsar is a cloud-native, distributed pub-sub messaging and streaming platform originally developed at Yahoo and now a top-level Apa… | 98 | 15315 | stable |
| mickael-kerjean/filestash Filestash is a self-hosted, storage-agnostic web-based file manager that connects to nearly any storage backend (FTP, SFTP, S3, SMB, WebDAV… | 77 | 14554 | active |
| logto-io/logto Logto is an open-source identity and access management (IAM) infrastructure for SaaS and AI applications, built on OIDC, OAuth 2.1, and SAM… | 98 | 14468 | active |
| OpenNHP/opennhp OpenNHP is a lightweight, cryptography-powered open-source toolkit written in Go that implements the Cloud Security Alliance's Network-infr… | 94 | 13918 | active |
| tadata-org/fastapi_mcp FastAPI-MCP is a Python library that automatically exposes FastAPI endpoints as Model Context Protocol (MCP) tools, preserving request/resp… | 45 | 11988 | active |
| z-song/laravel-admin laravel-admin is an administrative interface builder for the Laravel PHP framework that generates full-featured CRUD backends with just a f… | 59 | 11142 | active |
| frappe/frappe Frappe Framework is a batteries-included, low-code full-stack web application framework written in Python and JavaScript, built around meta… | 95 | 10643 | stable |
| Spinnaker Spinnaker is an open-source, multi-cloud continuous delivery platform created at Netflix that combines flexible pipeline management with in… | 98 | 9776 | active |
| activeadmin/activeadmin Active Admin is a Ruby on Rails engine and framework for building elegant administration backends for web applications. It provides a DSL t… | 89 | 9705 | stable |
| GoAdminGroup/go-admin GoAdmin is a Go framework for rapidly building data visualization and admin panel applications, inspired by laravel-admin. It provides an o… | 35 | 8997 | active |
| cookieY/Yearning Yearning is a self-hosted web-based SQL audit platform for MySQL, providing audit tickets with approval workflows, automated syntax checkin… | 79 | 8964 | active |
| zhoutaoo/SpringCloud Opensabre is a microservices development platform built on Spring Cloud 2023, integrating Spring Security, Spring Cloud Alibaba (Nacos, Sen… | 76 | 8935 | active |
| yangzongzhuan/RuoYi RuoYi is a lightweight Java rapid development framework and admin management system built on Spring Boot, MyBatis, and Shiro. It ships with… | 82 | 8511 | active |
| hs-web/hsweb-framework hsweb is a fully reactive enterprise backend management framework built on Spring Boot 2.x, Spring WebFlux, and R2DBC. It provides modular … | 74 | 8401 | active |
| openedx/openedx-platform Open edX Platform is the open-source Learning Management System (LMS) and Studio (CMS) that powers online course delivery and authoring at … | 67 | 8173 | active |
| Orchard CMS Orchard Core is an open-source, modular, multi-tenant application framework built on ASP.NET Core, plus a full-featured content management … | 97 | 8167 | stable |
| HalseySpicy/Geeker-Admin Geeker-Admin is an open-source admin dashboard framework built on Vue 3.4, TypeScript, Vite 5, Pinia, and Element Plus. It ships with a pow… | 66 | 8073 | active |
| webiny/webiny-js Webiny is an open-source, self-hosted content platform built as a TypeScript framework that runs on AWS serverless infrastructure (Lambda, … | 98 | 8031 | active |
| railsadminteam/rails_admin RailsAdmin is a Rails engine that adds an easy-to-use admin interface for managing application data. It provides automatic CRUD, search, fi… | 77 | 7957 | active |
| mindoc-org/mindoc MinDoc is a self-hosted document management system for IT teams, built in Go on the beego framework, used to store and share API docs, data… | 73 | 7833 | active |
| deepstreamIO/deepstream.io deepstream is an open-source realtime server that synchronizes schema-less records, provides publish-subscribe events, and routes RPCs betw… | 96 | 7187 | active |
| openbao/openbao OpenBao is an open-source, identity-based secrets management system for storing, distributing, and rotating sensitive data such as secrets,… | 93 | 7177 | active |
| sandstorm-io/sandstorm Sandstorm is a self-hostable web productivity suite implemented as a security-hardened web app package manager. It lets users install and r… | 71 | 7068 | active |
| fullstackhero/dotnet-starter-kit A production-grade .NET 10 starter kit template combining a modular-monolith Web API (vertical slice architecture) with two React 19 front-… | 83 | 6734 | active |