Open-source authorization software
526 open-source libraries, tools and applications tagged authorization, ranked by how closely authorization is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
526 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| alcideio/rbac-tool A kubectl plugin and standalone CLI that simplifies Kubernetes RBAC by visualizing, analyzing, generating, and querying RBAC policies. It h… | 23 | 1085 | active |
| apache/ranger Apache Ranger is a framework to enable, monitor, and manage comprehensive data security across the Hadoop platform and beyond. It provides … | 76 | 1081 | stable |
| Qihoo360/wayne Wayne is a web-based Kubernetes multi-cluster management and publishing platform developed by Qihoo360. It provides visualized Kubernetes o… | 23 | 3697 | maintenance |
| zmartzone/lua-resty-openidc A Lua library for NGINX/OpenResty implementing an OpenID Connect Relying Party and OAuth 2.0 Resource Server. It authenticates users via Op… | 90 | 1072 | stable |
| auth0/auth0.js Auth0's client-side JavaScript SDK for browser-based authentication and authorization against the Auth0 platform. It provides WebAuth, Auth… | 91 | 1062 | active |
| authomatic/authomatic Authomatic is a framework-agnostic Python library that simplifies user authentication and authorization via third-party providers like Face… | 54 | 1054 | active |
| jeremykenedy/laravel-roles A Laravel package for managing roles, permissions, and user levels with Eloquent integration, including Blade extensions, middleware, and a… | 90 | 1051 | stable |
| clarkeash/doorman Doorman is a Laravel package that limits access to Laravel applications using invite codes. Invite codes can be tied to specific emails, ha… | 43 | 1045 | active |
| 4jean/lav_sms LAVSMS is a self-hosted school management web application built on Laravel 8 for schools and colleges. It provides role-based accounts for … | 32 | 1043 | active |
| openkoda/openkoda Openkoda is an open-source business application platform built on Java 17 and Spring Boot that accelerates development of enterprise system… | 30 | 1038 | active |
| jaredhanson/oauth2orize OAuth2orize is a Node.js toolkit for building OAuth 2.0 authorization servers. It provides Express-compatible middleware plus a pluggable s… | 32 | 3531 | maintenance |
| osohq/oso Oso is an embedded authorization framework with a declarative policy language (Polar) for building RBAC, relationships, and collection filt… | 23 | 3489 | maintenance |
| everyauth everyauth is a Node.js authentication and authorization library supporting password login and many OAuth/OpenID providers (Facebook, Twitte… | 32 | 3467 | maintenance |
| maxcountryman/axum-login A Rust crate providing user identification, authentication, and authorization as tower middleware for the Axum web framework. It supports a… | 59 | 1020 | active |
| auth0/auth0-spa-js Auth0's official JavaScript SDK for adding authentication to Single Page Applications using the Authorization Code Grant flow with PKCE. It… | 98 | 1015 | active |
| AthenZ/athenz Athenz is an open source platform for X.509 certificate-based service authentication and fine-grained role-based access control (RBAC) in d… | 100 | 1013 | active |
| seeden/rbac A Node.js library implementing hierarchical role-based access control (RBAC) with roles, permissions, and grant inheritance. It supports in… | 63 | 1005 | active |
| SUSE/Portus Portus is an open-source authorization service and web UI for the Docker Registry v2 API, providing fine-grained push/pull permissions via … | 10 | 2981 | maintenance |
| OptimalBits/node_acl A minimalistic access control list (ACL) library for Node.js applications, inspired by Zend_ACL. It manages users, roles, hierarchies, and … | 32 | 2600 | maintenance |
| Swizec/useAuth useAuth is a React hook library that adds authentication to React apps with minimal setup, supporting Auth0 and Netlify Identity via a prov… | 23 | 2567 | maintenance |
| White Jotter White-Jotter is a simple content management system (CMS) built with a Vue.js frontend and Spring Boot backend, demonstrating a full front-e… | 23 | 2536 | maintenance |
| ory/ladon Ladon is a Go SDK for policy-based access control (authorization), inspired by AWS IAM policies. It provides fine-grained, condition-based … | 64 | 2458 | maintenance |
| mjrussell/redux-auth-wrapper redux-auth-wrapper is a React Higher Order Component (HOC) library for handling authentication and authorization in React + Redux applicati… | 32 | 2171 | maintenance |
| panique/huge HUGE is a simple user-authentication solution embedded in a minimal PHP framework skeleton, using PHP's official bcrypt password hashing. I… | 23 | 2158 | maintenance |
| renrenio/renren-security renren-security is a lightweight, front-end/back-end separated Java rapid development platform and permission (RBAC) system built on Spring… | 23 | 2023 | maintenance |
| florianheinemann/passwordless A Node.js/Express module that enables passwordless user authentication using one-time password (OTPW) tokens delivered via email or SMS. It… | 23 | 1938 | maintenance |
| jakubgarfield/Bonobo-Git-Server Bonobo Git Server is a free, open-source ASP.NET web application for hosting and managing Git repositories on Windows via IIS. It provides … | 32 | 1838 | maintenance |
| nodeSolidServer/node-solid-server NodeSolidServer is an implementation of the Solid protocol that runs a Solid personal data server (pod server) on top of the local file sys… | 75 | 1795 | maintenance |
| SpringMVC-Mybatis-Shiro-redis An upgraded demo application showing Apache Shiro permission/role-based access control integrated with SpringMVC, Mybatis, Redis, and Freem… | 32 | 1775 | maintenance |
| baijunyao/thinkphp-bjyadmin A ThinkPHP-based admin starter project that integrates common features and third-party SDKs (Auth/RBAC permissions, Alipay and WeChat payme… | 10 | 1755 | maintenance |
| DotNetOpenAuth DotNetOpenAuth is a C# library implementing the OpenID and OAuth protocols for .NET applications. It lets developers build both Identity Pr… | 10 | 1714 | maintenance |
| lsgwr/spring-boot-online-exam A self-hosted online examination system built with Spring Boot (backend) and Vue + Ant Design (frontend), supporting single-choice, multipl… | 67 | 1691 | maintenance |
| xuhuisheng/lemon Lemon is an open-source office automation (OA) system written in Java, providing typical enterprise features like approval workflows, forms… | 46 | 1629 | maintenance |
| koush/Superuser An open-source Superuser management app and su binary for rooted Android devices, written in C and Java. It grants and manages root permiss… | 32 | 1565 | maintenance |
| jly8866/archer Archer is a self-hosted web platform for automated SQL operations on MySQL, built on Django and the Inception SQL audit engine. It provides… | 23 | 1563 | maintenance |
| outmoded/oz Oz is a web authorization protocol and Node.js library for granting and authenticating third-party access to an API on behalf of a user or … | 10 | 1510 | maintenance |
| mitreid-connect/OpenID-Connect-Java-Spring-Server A certified OpenID Connect reference implementation in Java on the Spring platform, providing an identity provider server, OAuth 2.0 author… | 32 | 1507 | maintenance |
| corneliusweig/rakkess rakkess is a kubectl plugin that displays an access matrix showing the current user's permissions across all Kubernetes server resources, s… | 23 | 1401 | maintenance |
| sighupio/permission-manager A web UI application for managing Kubernetes RBAC and users. It lets admins create users, assign namespace permissions via templates, and d… | 23 | 1376 | maintenance |
| microsoft/agent-governance-toolkit A Microsoft open-source toolkit providing policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for au… | 76 | 6444 | experimental |
| Netflix/hubcommander HubCommander is a user-extendable Slack bot for chat-ops style GitHub organization management, letting users perform privileged tasks like … | 54 | 1313 | maintenance |
| longguikeji/arkid ArkID is an open-source enterprise IDaaS/IAM platform providing unified identity, authentication, and authorization management. It supports… | 68 | 1284 | maintenance |
| jaliss/securesocial SecureSocial is an authentication module for Play Framework applications supporting OAuth, OAuth2, OpenID, and username/password login, wit… | 32 | 1183 | maintenance |
| mdmsoft/yii2-admin A GUI-based RBAC (Role-Based Access Control) manager extension for the Yii2 PHP framework. It provides an administrative interface for mana… | 23 | 1147 | maintenance |
| romanbican/roles A Laravel 5 package for managing user roles and permissions, including role levels, permission inheritance, Blade template extensions, and … | 10 | 1146 | maintenance |
| ABP MicroService Platform A low-code admin platform built on ABP vNext microservice architecture with a vue-element-admin frontend. It provides tenant/user/role mana… | 23 | 1141 | maintenance |
| RafaelVidaurre/angular-permission angular-permission is an AngularJS library providing role and permission based access control for routes. It lets developers declaratively … | 23 | 1115 | maintenance |
| liggitt/audit2rbac audit2rbac is a Go CLI tool that takes a Kubernetes audit log and a username as input and generates RBAC Role and RoleBinding objects cover… | 23 | 1113 | maintenance |
| lingthio/Flask-User Flask-User is a Flask extension providing customizable user authentication and account management, including registration, email confirmati… | 23 | 1074 | maintenance |
| tower1229/Vue-Access-Control Vue-Access-Control is a frontend access control framework built on Vue, Vue Router, and axios. It controls user permissions at three levels… | 32 | 1071 | maintenance |
| yeqifu/warehouse A Java Spring Boot web application for warehouse/inventory management with business modules for customers, suppliers, goods, purchases, sal… | 59 | 1028 | maintenance |
| lucia-auth/lucia Lucia is a TypeScript authentication library for managing user sessions and OAuth in web applications. It was deprecated in March 2025 and … | 72 | 10450 | abandoned |
| spring-attic/spring-security-oauth A Spring Security library providing OAuth 1(a) and OAuth 2 support for both consumers and providers in Spring web applications. It was arch… | 10 | 4688 | abandoned |
| google/santa Santa is a binary and file access authorization system for macOS, consisting of a system extension that monitors executions, a daemon that … | 10 | 4501 | abandoned |
| skoruba/IdentityServer4.Admin A web-based administration UI for managing IdentityServer4 clients, resources, and ASP.NET Core Identity users, roles, and claims. It ships… | 10 | 3574 | abandoned |
| ConsoleMe ConsoleMe is a web service from Netflix that centralizes AWS IAM permission management, offering console login, self-service permission req… | 10 | 3197 | abandoned |
| buzzfeed/sso sso (S.S. Octopus) is a single sign-on solution built at BuzzFeed for securing internal services behind OAuth-based authentication. It acts… | 10 | 3122 | abandoned |
| Caiyeon/goldfish Goldfish is a web-based UI and workflow tool for HashiCorp Vault, built with VueJS on the frontend and a Go backend using Vault's native AP… | 10 | 2128 | abandoned |
| aspnet/Identity ASP.NET Core Identity is the membership system for ASP.NET Core web applications, providing login, membership, and user data management. Th… | 10 | 1943 | abandoned |
| andrewelkins/Laravel-4-Bootstrap-Starter-Site A Laravel 4 starter application providing a basic blog with Bootstrap 3 front-end and an admin back-end. It bundles community packages like… | 23 | 1760 | abandoned |
| pallets-eco/flask-security-3.0 Flask-Security 3.0 is a Flask extension providing quick and simple authentication and security features such as login, registration, and ro… | 10 | 1624 | abandoned |
| technoweenie/restful-authentication A widely-used Ruby on Rails plugin/generator that provides a foundation for user authentication, including login/logout, secure password ha… | 10 | 1564 | abandoned |
| cartalyst/sentry Sentry is a deprecated, framework-agnostic PHP authentication and authorization library providing user groups, permissions, activation, thr… | 32 | 1526 | abandoned |
| 9p4/jellyfin-plugin-sso A Jellyfin server plugin that enables single sign-on (SSO) login through external identity providers such as Google, Microsoft, Keycloak, A… | 10 | 1455 | abandoned |
| honraytech/VueThink VueThink is a front-end/back-end separated framework combining the Vue 2.x ecosystem (Vue, Vue-Router, Vuex, Element-UI) with ThinkPHP 5 on… | 32 | 1325 | abandoned |
| aspnet/Security The former home of security and authorization middleware for ASP.NET Core, including authentication handlers for cookies, OAuth, and social… | 10 | 1296 | abandoned |
| nathanl/authority Authority is a Ruby gem that helps you authorize actions in Rails apps by grouping models under Authorizer classes with plain Ruby methods.… | 10 | 1197 | abandoned |
| strongloop/microgateway IBM API Connect Microgateway is an extensible Node.js-based API gateway framework for securing and controlling access to microservices and … | 32 | 1186 | abandoned |
| cemerick/friend Friend is an extensible authentication and authorization library for Clojure Ring web applications and services. It provides authentication… | 10 | 1152 | abandoned |
| megagao/production_ssm A production management ERP system built with the SSM stack (Spring, SpringMVC, MyBatis) and jQuery EasyUI, developed as part of a manufact… | 32 | 1088 | abandoned |
| loft-sh/kiosk Kiosk is a multi-tenancy extension for Kubernetes that lets cluster admins securely share a single cluster among multiple tenants. It provi… | 10 | 1071 | abandoned |
| RealmTeam/django-rest-framework-social-oauth2 A Django package that integrates python-social-auth and django-oauth-toolkit to provide OAuth2 social authentication for Django REST Framew… | 63 | 1065 | abandoned |
| Open WebUI Open WebUI is a self‑hosted, web‑based interface for interacting with large language models. It supports local Ollama models, OpenAI‑compat… | 88 | 152948 | active |
| mall Mall is a complete Java-based e‑commerce system that provides both a front‑end shopping portal and a back‑office admin console. It is built… | 65 | 84934 | active |
| Plane Plane is an open‑source project management platform that lets teams track issues, run cycles, and manage roadmaps. It provides a modern web… | 97 | 61193 | active |
| Odoo Odoo is an open‑source suite of web‑based business applications that can be used individually or together as a full ERP system. It provides… | 77 | 55115 | active |
| Discourse Discourse is an open‑source, Ruby‑on‑Rails based community platform for discussion forums, Q&A, and real‑time chat. It can be self‑hosted o… | 83 | 47962 | active |
| Rocket.Chat Rocket.Chat is an open‑source, secure communications platform that provides real‑time messaging, voice, video and collaboration tools. It c… | 92 | 46207 | active |
| Hyperswitch Hyperswitch is an open‑source, composable payments infrastructure written in Rust. It provides modular services for payment orchestration, … | 95 | 45357 | active |
| Payload Payload is an open‑source full‑stack framework built on Next.js that provides a TypeScript backend, admin UI, and headless CMS capabilities… | 93 | 44931 | active |
| Payload Payload is an open-source, MIT-licensed fullstack Next.js framework and headless CMS written in TypeScript. A single config instantly gener… | 93 | 44931 | stable |
| ToolJet/ToolJet ToolJet is an open-source low-code platform for building internal tools, dashboards, and business applications with a visual drag‑and‑drop … | 93 | 41018 | active |
| yudao (ruoyi-vue-pro) Yudao Ruoyi Vue Pro is a full‑stack, open‑source admin platform built with Spring Boot, MyBatis Plus and Vue. It provides a rich set of ent… | 98 | 39530 | active |
| Directus Directus is an open-source backend application that wraps any SQL database into instant REST and GraphQL APIs, a no-code data studio, and a… | 99 | 38413 | active |
| Dokploy Dokploy is an open‑source, self‑hosted Platform as a Service that simplifies deploying applications and databases. It provides a web UI, CL… | 87 | 37756 | active |
| Symfony Symfony is a full-stack PHP framework for building web and console applications, plus a set of reusable, decoupled PHP components used by p… | 93 | 31168 | stable |
| Harbor Harbor is an open‑source cloud‑native container registry that adds security, identity, and management features to Docker Distribution. It p… | 99 | 29547 | stable |
| lenve/vhr vhr (微人事) is a full-stack, front-end/back-end separated human resources management system built with Spring Boot and Vue, covering employee… | 32 | 28025 | active |
| PostgREST PostgREST is a standalone web server that automatically creates a fully RESTful API from any PostgreSQL database. It translates database sc… | 98 | 27693 | active |
| OpenWork OpenWork is a free, open‑source desktop application that provides a Claude Cowork‑like AI workspace for macOS, Windows, and Linux. It lets … | 79 | 24170 | active |
| Apache RocketMQ Apache RocketMQ is a distributed cloud-native messaging and streaming platform built for low-latency, high-throughput, financially reliable… | 88 | 22629 | stable |
| docmost/docmost Docmost is an open‑source, self‑hosted collaborative wiki and documentation platform built with TypeScript. It provides real‑time editing, … | 94 | 21946 | active |
| EL-ADMIN ELADMIN is a front-end/back-end separated admin management system built on Spring Boot 2.7.18, JPA, Spring Security, JWT, Redis, and Vue. I… | 56 | 21905 | active |
| WordPress/WordPress WordPress is a PHP‑based open‑source publishing platform and content management system. It powers millions of websites, offering a block‑ba… | 77 | 21478 | active |
| BookStack BookStack is an open‑source, self‑hosted platform for creating and organizing documentation and wiki content. It is built with PHP and Lara… | 98 | 19078 | active |
| zxwk1998/vue-admin-better Vue Admin Better is a feature‑rich admin dashboard template built with Vue 3 (and Vue 2) and Element UI/Element Plus. It provides ready‑mad… | 76 | 18933 | active |
| Lichess Lichess is a free, ad‑less, open‑source online chess server written in Scala and TypeScript. It provides real‑time gameplay, analysis, tour… | 68 | 18865 | active |
| Apache Pulsar Apache Pulsar is a cloud-native, distributed pub-sub messaging and streaming platform originally developed at Yahoo and now a top-level Apa… | 99 | 15346 | stable |
| mickael-kerjean/filestash Filestash is a self-hosted, storage-agnostic web-based file manager that connects to nearly any storage backend (FTP, SFTP, S3, SMB, WebDAV… | 76 | 14777 | active |
| Logto Logto is an open-source identity and access management (IAM) infrastructure for SaaS and AI applications, built on OIDC, OAuth 2.1, and SAM… | 100 | 14728 | active |