Authorization

Star

Authorization is the process of granting or denying permissions based on rules. This should not be confused with authentication, which is the act of verifying someone’s identitiy.

Here are 6,206 public repositories matching this topic...

Language:All

Filter by language

All6,206 JavaScript1,696 TypeScript903 C#607 Java597 Python462 Go427 PHP371 Ruby153 HTML139 Rust86

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

casbin /casbin

Sponsor

Star19.6k

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang:https://discord.gg/S5UjpzGZjN

oauth saml authentication iam acl auth authorization cas permission rbac sso oidc access-control abac authz authn cloudsecurity casbin cloudos casdoor

UpdatedDec 13, 2025
Go

goauthentik /authentik

Star19.3k

The authentication glue you need.

kubernetes security saml oauth2 authentication proxy reverse-proxy authorization sso oauth2-server oidc oauth2-client oidc-provider oidc-client saml-idp saml-sp authentik

UpdatedDec 17, 2025
Python

dromara /Sa-Token

Sponsor

Star18.4k

一个轻量级 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式Session会话、微服务网关鉴权、单点登录、OAuth2.0

java authorization sso token springcloud aouth2

UpdatedNov 30, 2025
Java

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

docker security identity oauth oauth2 cloud server oauth2-provider authorization hydra sso openid oauth2-server openid-connect oauth-provider openid-provider federation oidc hacktoberfest openid-connect-provider

UpdatedDec 16, 2025
Go

zitadel /zitadel

Sponsor

Star12.5k

ZITADEL - Identity infrastructure, simplified for you.

identity saml oauth2 authentication login authorization sso user openid-connect oidc mfa scim multitenancy 2fa fido2 passkeys

UpdatedDec 17, 2025
Go

tadata-org /fastapi_mcp

Sponsor

Star11.3k

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

ai authentication mcp openapi authorization cursor claude windsurf fastapi llm mcp-servers mcp-server modelcontextprotocol

UpdatedNov 24, 2025
Python

apereo /cas

Star11.2k

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

java open-source aws oauth2 spring-boot authentication spring-cloud openidconnect authorization fido sso saml2 ldap-authentication spring-framework identity-provider mfa sso-authentication websso spring-webflow duosecurity

UpdatedDec 17, 2025
Java

logto-io /logto

Sponsor

Star11.2k

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

identity jwt saml oauth2 typescript signup authentication login email sms password authorization totp rbac sso openid-connect social-login mfa passwordless logto

UpdatedDec 17, 2025
TypeScript

open-policy-agent /opa

Star11k

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

json declarative policy authorization opa cloud-native compliance open-policy-agent

UpdatedDec 17, 2025
Go

stalniy /casl

Star6.7k

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

permissions acl authorization cancan casl isomorphic-javascript

UpdatedDec 16, 2025
JavaScript

authzed /spicedb

Star6.3k

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

kubernetes security distributed-systems database permissions acl authorization rbac cloud-native entitlements abac security-tools ciam fga fine-grained-access-control zanzibar fine-grained-authorization rebac

UpdatedDec 16, 2025
Go

Permify /permify

Sponsor

Star5.7k

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

kubernetes golang security permissions acl grpc distributed authorization permission rbac cloud-native access-control abac ciam fga least-privilege fine-grained-access-control zanzibar rebac

UpdatedDec 17, 2025
Go

CanCanCommunity /cancancan

Star5.7k

The authorization Gem for Ruby on Rails.

rails authorization cancancan

UpdatedJan 27, 2025
Ruby

doorkeeper-gem /doorkeeper

Star5.4k

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

grape identity oauth oauth2 authentication oauth2-provider authorization oauth2-server ruby-on-rails doorkeeper

UpdatedDec 9, 2025
Ruby

permitio /opal

Star5.4k

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

microservices websocket realtime pubsub policy authorization opa opal hacktoberfest cedar open-policy-agent policy-as-code openfga

UpdatedDec 16, 2025
Python

ory /keto

Star5.2k

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

permissions iam acl authorization rbac access-control hacktoberfest abac policy-management permission-management zanzibar rebac fine-grained-permissions relation-tuples

UpdatedDec 15, 2025
Go

unkeyed /unkey

Star5.1k

The Developer Platform for Modern APIs

api open-source authentication gateway authorization rate-limiter api-keys

UpdatedDec 16, 2025
TypeScript

build-trust /ockam

Sponsor

Star4.6k

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.