access-control

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

kubernetes golang security permissions acl grpc distributed authorization permission rbac cloud-native access-control abac ciam fga least-privilege fine-grained-access-control zanzibar rebac

UpdatedFeb 20, 2026
Go

ory /keto

Star5.3k

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

permissions iam acl authorization rbac access-control hacktoberfest abac policy-management permission-management zanzibar rebac fine-grained-permissions relation-tuples

UpdatedFeb 20, 2026
Go

cerbos /cerbos

Star4.2k

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

go kubernetes golang security policy authorization access-control

UpdatedFeb 20, 2026
Go

casbin /node-casbin

Sponsor

Star2.9k

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

nodejs javascript node js permissions acl auth authorization permission rbac access-control abac authz casbin

UpdatedFeb 19, 2026
TypeScript

zenstackhq /zenstack

Sponsor

Star2.8k

Modern Data Layer for TypeScript Apps - type-safe ORM, built-in access control, automatic query services

javascript api node schema orm nextjs acl openapi auth saas authorization permission rbac fullstack access-control rls authz prisma ai-friendly

UpdatedFeb 20, 2026
TypeScript

casbin /jcasbin

Sponsor

Star2.6k

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

java acl auth authorization permission rbac access-control abac xacml authz casbin

UpdatedFeb 12, 2026
Java

onury /accesscontrol

Star2.3k

Role and Attribute based Access Control for Node.js

nodejs security attributes permissions acl roles authorization rbac access-control abac

UpdatedJan 24, 2026
TypeScript

cncf /tag-security

Star2.3k

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

security cncf assessment safety cloud-native access-control secure-access

UpdatedDec 8, 2025
HTML

greenpau /caddy-security

Sponsor

Star2.1k

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

security ldap jwt saml oauth2 authentication acl auth authorization secops sso openid access-control secdevops websecurity caddy-plugin webauthn paseto paseto-tokens caddy2

UpdatedMar 25, 2025
Go

casbin /pycasbin

Sponsor

Star1.7k

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

python acl auth authorization permission rbac access-control abac authz casbin pycasbin

UpdatedFeb 2, 2026
Python

esprfid /esp-rfid

Star1.5k

ESP8266 RFID (RC522, PN532, Wiegand, RDM6300) Access Control system featuring WebSocket, JSON, NTP Client, Javascript, SPIFFS

esp8266 flash board websocket access-control hacktoberfest rfid-reader mfrc522 pn532 access-management rfid-rc522 rc522 rfid-tags rfid-doorlock-application rdm6300 wiegand esp8266-rfid rfid-hardware esp8266-websocket esp-rfid

UpdatedJul 28, 2025
C++

warrant-dev /warrant

Star1.3k

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.