Identity, Auth & Secrets Repositories

tinyauth

by tinyauthapp

Total Stargazers:8243

Total Subscribers:16

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

omniauth

by omniauth

Total Stargazers:8100

Total Subscribers:119

OmniAuth is a flexible authentication system utilizing Rack middleware.

warpgate

by warp-tech

Total Stargazers:7870

Total Subscribers:42

Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software

node.bcrypt.js

by kelektiv

Total Stargazers:7801

Total Subscribers:62

bcrypt for NodeJs

jose

by panva

Total Stargazers:7790

Total Subscribers:39

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

acme-companion

by nginx-proxy

Total Stargazers:7726

Total Subscribers:91

Automated ACME SSL certificate generation for nginx-proxy

jwt

by lcobucci

Total Stargazers:7479

Total Subscribers:131

A simple library to work with JSON Web Token and JSON Web Signature

openauth

by anomalyco

Total Stargazers:7396

Total Subscribers:25

▦ Universal, standards-based auth provider.

openbao

by openbao

Total Stargazers:7345

Total Subscribers:37

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

gopass

by gopasspw

Total Stargazers:7143

Total Subscribers:72

The slightly more awesome standard unix password manager for teams

casl

by stalniy

Total Stargazers:7074

Total Subscribers:40

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

spicedb

by authzed

Total Stargazers:7047

Total Subscribers:51

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

hexclave

by hexclave

Total Stargazers:6859

Total Subscribers:15

The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.

external-secrets

by external-secrets

Total Stargazers:6852

Total Subscribers:63

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

pig

by pig-mesh

Total Stargazers:6682

Total Subscribers:99

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

oauth2-server

by thephpleague

Total Stargazers:6663

Total Subscribers:201

A spec compliant, secure by default PHP OAuth 2.0 Server

goth

by markbates

Total Stargazers:6599

Total Subscribers:61

Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.

lldap

by lldap

Total Stargazers:6497

Total Subscribers:19

Light LDAP implementation

cosign

by sigstore

Total Stargazers:6296

Total Subscribers:62

Code signing and transparency for containers and binaries

dehydrated

by dehydrated-io

Total Stargazers:6249

Total Subscribers:160

ACME client implemented as a simple shell-script – just add water

fastapi-users

by fastapi-users

Total Stargazers:6242

Total Subscribers:53

Ready-to-use and customizable users management for FastAPI

java-jwt

by auth0

Total Stargazers:6235

Total Subscribers:217

Java implementation of JSON Web Token (JWT)

passbolt_api

by passbolt

Total Stargazers:6115

Total Subscribers:88

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

permify

by Permify

Total Stargazers:5948

Total Subscribers:24

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

oauth2

by golang

Total Stargazers:5897

Total Subscribers:120

Go OAuth2

win-acme

by win-acme

Total Stargazers:5790

Total Subscribers:182

Automate SSL/TLS certificates on Windows with ease

dotenvx

by dotenvx

Total Stargazers:5780

Total Subscribers:12

a secure dotenv–from the creator of `dotenv`

openfga

by openfga

Total Stargazers:5762

Total Subscribers:39

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

boulder

by letsencrypt

Total Stargazers:5747

Total Subscribers:131

An ACME-based certificate authority, written in Go.

socialite

by laravel

Total Stargazers:5746

Total Subscribers:161

Laravel wrapper around OAuth 1 & OAuth 2 libraries.

pyjwt

by jpadilla

Total Stargazers:5699

Total Subscribers:60

JSON Web Token implementation in Python

cancancan

by CanCanCommunity

Total Stargazers:5683

Total Subscribers:94

The authorization Gem for Ruby on Rails.

next-terminal

by next-terminal

Total Stargazers:5634

Total Subscribers:55

A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.

certmagic

by caddyserver

Total Stargazers:5597

Total Subscribers:61

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

doorkeeper

by doorkeeper-gem

Total Stargazers:5521

Total Subscribers:99

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

opal

by permitio

Total Stargazers:5505

Total Subscribers:28

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

scribejava

by scribejava

Total Stargazers:5456

Total Subscribers:298

Simple OAuth library for Java

unkey

by unkeyed

Total Stargazers:5435

Total Subscribers:12

The Developer Platform for Modern APIs

authlib

by authlib

Total Stargazers:5418

Total Subscribers:57

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.

keto

by ory

Total Stargazers:5397

Total Subscribers:55

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

kanidm

by kanidm

Total Stargazers:5369

Total Subscribers:23

Kanidm: A simple, secure, and fast identity management platform

Blog.Core

by anjoy8

Total Stargazers:5283

Total Subscribers:158

💖 ASP.NET Core 8.0 全家桶教程，前后端分离后端接口，vue教程姊妹篇，官方文档：

boundary

by hashicorp

Total Stargazers:4059

Total Subscribers:185

Boundary enables identity-based access management for dynamic infrastructure.

clearance

by thoughtbot

Total Stargazers:3736

Total Subscribers:64

Rails authentication with email & password.

Portus

by SUSE

Total Stargazers:2981

Total Subscribers:7

Authorization service and frontend for Docker registry (v2)

osin

by openshift

Total Stargazers:1935

Total Subscribers:68

Golang OAuth2 server library

leapp

by Noovolari

Total Stargazers:1774

Total Subscribers:27

Leapp is the DevTool to access your cloud

uaa

by cloudfoundry

Total Stargazers:1639

Total Subscribers:148

CloudFoundry User Account and Authentication (UAA) Server

the_role

by the-teacher

Total Stargazers:764

Total Subscribers:29

Authorization for Rails + GUI. Semantic, Flexible, Lightweight

keystone

by openstack

Total Stargazers:715

Total Subscribers:104

OpenStack Identity (Keystone). Mirror of code maintained at opendev.org.

next-firebase-auth-edge

by awinogrodzki

Total Stargazers:665

Total Subscribers:16

Next.js Firebase Authentication for Edge and Node.js runtimes. Compatible with latest Next.js features.

jans

by JanssenProject

Total Stargazers:646

Total Subscribers:31

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.

jwtproxy

by quay

Total Stargazers:415

Total Subscribers:23

An HTTP-Proxy that adds AuthN through JWTs

oauth-proxy

by openshift

Total Stargazers:286

Total Subscribers:11

A reverse proxy that provides authentication with OpenShift via OAuth and Kubernetes service accounts

authorino

by Kuadrant

Total Stargazers:269

Total Subscribers:7

K8s-native AuthN/AuthZ service to protect your APIs.

barbican

by openstack

Total Stargazers:248

Total Subscribers:24

Barbican is a ReST API designed for the secure storage, provisioning and management of secrets, including in OpenStack environments. Mirror of code maintained at opendev.org.

authz

by twistlock

Total Stargazers:245

Total Subscribers:35

Docker Authorization Plugin

certman-operator

by openshift

Total Stargazers:57

Total Subscribers:34

Operator to Manage Let's Encrypt certificates for OpenShift Clusters

cluster-authentication-operator

by openshift

Total Stargazers:55

Total Subscribers:10

Identity, Auth & Secrets

Authentication, authorization, SSO/OAuth, IAM, policy engines and secrets management.

tinyauth

by tinyauthapp

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

omniauth

by omniauth

OmniAuth is a flexible authentication system utilizing Rack middleware.

warpgate

by warp-tech

Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software

node.bcrypt.js

by kelektiv

bcrypt for NodeJs

jose

by panva

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

acme-companion

by nginx-proxy

Automated ACME SSL certificate generation for nginx-proxy

jwt

by lcobucci

A simple library to work with JSON Web Token and JSON Web Signature

openauth

by anomalyco

▦ Universal, standards-based auth provider.

openbao

by openbao

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

gopass

by gopasspw

The slightly more awesome standard unix password manager for teams

casl

by stalniy

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

spicedb

by authzed

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

hexclave

by hexclave

The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.

external-secrets

by external-secrets

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

pig

by pig-mesh

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

oauth2-server

by thephpleague

A spec compliant, secure by default PHP OAuth 2.0 Server

goth

by markbates

Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.

lldap

by lldap

Light LDAP implementation

cosign

by sigstore

Code signing and transparency for containers and binaries

dehydrated

by dehydrated-io

ACME client implemented as a simple shell-script – just add water

fastapi-users

by fastapi-users

Ready-to-use and customizable users management for FastAPI

java-jwt

by auth0

Java implementation of JSON Web Token (JWT)

passbolt_api

by passbolt

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

permify

by Permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

oauth2

by golang

Go OAuth2

win-acme

by win-acme

Automate SSL/TLS certificates on Windows with ease