Authorization is the process of granting or denying permissions based on rules. This should not be confused with authentication, which is the act of verifying someone’s identitiy.

The authentication glue you need.

• UpdatedFeb 20, 2026
• Python

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang:https://discord.gg/S5UjpzGZjN

• UpdatedFeb 6, 2026
• Go

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

• UpdatedFeb 20, 2026
• Java

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

• UpdatedFeb 19, 2026
• Go

ZITADEL - Identity infrastructure, simplified for you.

• UpdatedFeb 20, 2026
• Go

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

• UpdatedFeb 20, 2026
• TypeScript

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

• UpdatedNov 24, 2025
• Python

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• UpdatedFeb 20, 2026
• Java

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

• UpdatedFeb 20, 2026
• Go

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

• UpdatedFeb 19, 2026
• TypeScript

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

• UpdatedFeb 20, 2026
• Go

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

• UpdatedFeb 20, 2026
• Go

The authorization Gem for Ruby on Rails.

• UpdatedJan 27, 2025
• Ruby

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

• UpdatedFeb 12, 2026
• Ruby

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

• UpdatedFeb 11, 2026
• Python

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• UpdatedFeb 20, 2026
• Go

The Developer Platform for Modern APIs

• UpdatedFeb 20, 2026
• TypeScript

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

• UpdatedFeb 20, 2026
• Go

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

• UpdatedJan 4, 2026
• Rust

A binary authorization and monitoring system for macOS

• UpdatedFeb 5, 2025
• Objective-C++