jeremyevans/rodauth

Health v2 · maintenance only

Flags: no_releases no_readme

Adoption not part of the score

1919 stars · 111 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Rodauth is Ruby's most advanced authentication framework, providing a comprehensive set of composable authentication features built on the Roda web toolkit. It supports login, account creation, password management, multifactor authentication (OTP, WebAuthn, recovery codes), JSON/JWT APIs, and works standalone or as middleware in Rack apps.

Use cases

• add user login and registration to a Ruby web app
• implement two-factor authentication with OTP and WebAuthn
• build a JSON API with JWT-based authentication
• manage password resets, changes, and account closure flows
• add audit logging for authentication actions
• integrate authentication into Rails or Sinatra via Rack middleware
• enforce session security with active session tracking and single logout

When to choose

• you need a full-featured, security-hardened authentication system in Ruby
• you want granular control by enabling only the features you need
• you need multifactor authentication, WebAuthn, or JWT support out of the box
• you use Roda, Rails, Sinatra, or any Rack-based application

When to avoid

• you need authentication in a non-Ruby stack
• you want a zero-configuration hosted auth service instead of a self-managed framework
• your app is trivial and a simple session-based login suffices

Facets

library · maturity stable

auth authorization middleware web-framework web-development backend security developer-tools ruby authentication roda rails sinatra mfa webauthn jwt password-management account-management web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jeremyevans/rodauth")