authorization

The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.

docker security identity oauth oauth2 cloud server oauth2-provider authorization hydra sso openid oauth2-server openid-connect oauth-provider openid-provider federation oidc hacktoberfest openid-connect-provider

UpdatedMar 17, 2025
Go

goauthentik /authentik

Star15.3k

The authentication glue you need.

kubernetes security saml oauth2 authentication proxy reverse-proxy authorization sso oauth2-server oidc oauth2-client oidc-provider oidc-client saml-idp saml-sp authentik

UpdatedMar 20, 2025
Python

apereo /cas

Star11k

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

java open-source aws oauth2 spring-boot authentication spring-cloud openidconnect authorization fido sso saml2 ldap-authentication spring-framework identity-provider mfa sso-authentication websso spring-webflow duosecurity

UpdatedMar 20, 2025
Java

open-policy-agent /opa

Star10k

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

json declarative policy authorization opa cloud-native compliance doge lolcat open-policy-agent

UpdatedMar 19, 2025
Go

zitadel /zitadel

Star10k

ZITADEL - Identity infrastructure, simplified for you.

identity saml oauth2 authentication login authorization sso user openid-connect oidc mfa scim multitenancy 2fa fido2 passkeys

UpdatedMar 20, 2025
Go

logto-io /logto

Sponsor

Star9.7k

🧑‍🚀 An identity and access management (IAM) infrastructure with authentication, authorization, MFA, SSO, user management, and multi-tenancy features. Supports OAuth 2.0, OIDC, and SAML. No framework restrictions.

identity jwt oauth2 typescript signup authentication login email sms password auth authorization totp rbac sso openid-connect social-login mfa passwordless logto

UpdatedMar 20, 2025
TypeScript

stalniy /casl

Star6.3k

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

permissions acl authorization cancan casl isomorphic-javascript

UpdatedMar 17, 2025
JavaScript

CanCanCommunity /cancancan

Star5.6k

The authorization Gem for Ruby on Rails.

rails authorization cancancan

UpdatedJan 27, 2025
Ruby

doorkeeper-gem /doorkeeper

Star5.4k

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

grape identity oauth oauth2 authentication oauth2-provider authorization oauth2-server ruby-on-rails doorkeeper

UpdatedJan 31, 2025
Ruby

Permify /permify

Sponsor

Star5.3k

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.

kubernetes golang security permissions acl grpc distributed authorization permission rbac cloud-native access-control abac ciam fga least-privilege fine-grained-access-control zanzibar rebac

UpdatedMar 20, 2025
Go

permitio /opal

Star5.2k

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

microservices websocket realtime pubsub policy authorization opa opal hacktoberfest cedar open-policy-agent policy-as-code openfga

UpdatedMar 11, 2025
Python

unkeyed /unkey

Star4.6k

Open source API management platform

api open-source authentication gateway authorization rate-limiter hacktoberfest api-keys

UpdatedMar 20, 2025
TypeScript

build-trust /ockam

Sponsor

Star4.5k

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.