access-control

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

kubernetes golang security permissions acl grpc distributed authorization permission rbac cloud-native access-control abac ciam fga least-privilege fine-grained-access-control zanzibar rebac

UpdatedDec 17, 2025
Go

ory /keto

Star5.2k

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

permissions iam acl authorization rbac access-control hacktoberfest abac policy-management permission-management zanzibar rebac fine-grained-permissions relation-tuples

UpdatedDec 17, 2025
Go

cerbos /cerbos

Star4.2k

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

go kubernetes golang security policy authorization access-control

UpdatedDec 17, 2025
Go

casbin /node-casbin

Sponsor

Star2.8k

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

nodejs javascript node js permissions acl auth authorization permission rbac access-control abac authz casbin

UpdatedDec 9, 2025
TypeScript

zenstackhq /zenstack

Sponsor

Star2.8k

Full-Stack TypeScript toolkit that enhances Prisma ORM with flexible Authorization layer for RBAC/ABAC/PBAC/ReBAC, offering auto-generated type-safe APIs and frontend hooks.

javascript api node schema orm nextjs acl openapi auth saas authorization permission rbac fullstack access-control rls authz prisma ai-friendly

UpdatedDec 4, 2025
TypeScript

casbin /jcasbin

Sponsor

Star2.6k

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

java acl auth authorization permission rbac access-control abac xacml authz casbin

UpdatedOct 12, 2025
Java

onury /accesscontrol

Star2.3k

Role and Attribute based Access Control for Node.js

nodejs security attributes permissions acl roles authorization rbac access-control abac

UpdatedJul 1, 2025
TypeScript

cncf /tag-security

Star2.2k

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

security cncf assessment safety cloud-native access-control secure-access

UpdatedDec 8, 2025
HTML

greenpau /caddy-security

Sponsor

Star2k

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

security ldap jwt saml oauth2 authentication acl auth authorization secops sso openid access-control secdevops websecurity caddy-plugin webauthn paseto paseto-tokens caddy2

UpdatedMar 25, 2025
Go

casbin /pycasbin

Sponsor

Star1.7k

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

python acl auth authorization permission rbac access-control abac authz casbin pycasbin

UpdatedNov 6, 2025
Python

esprfid /esp-rfid

Star1.5k

ESP8266 RFID (RC522, PN532, Wiegand, RDM6300) Access Control system featuring WebSocket, JSON, NTP Client, Javascript, SPIFFS

esp8266 flash board websocket access-control hacktoberfest rfid-reader mfrc522 pn532 access-management rfid-rc522 rc522 rfid-tags rfid-doorlock-application rdm6300 wiegand esp8266-rfid rfid-hardware esp8266-websocket esp-rfid

UpdatedJul 28, 2025
C++

php-casbin /php-casbin

Star1.3k

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

php security framework acl auth roles authorization middlewares permission rbac access-control abac

UpdatedDec 2, 2025
PHP

warrant-dev /warrant

Star1.3k

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.