goauthentik/authentik
The authentication glue you need.
A star delta has been computed for 62,252 of 63,107 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 07:55 and 12:02 (BKK).
The authentication glue you need.
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
A comprehensive security repo for modern Java backend applications. The only identity provider you’ll ever need.
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
A secure local gateway for AI agents to reliably call approved enterprise APIs, tools, and services.
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.
Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.
CasOS: a cloud operating system built on Kubernetes, Live Demo: https://demo.casos.net
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
The Developer Platform for Modern APIs
A JWT based API for managing users and issuing JWT tokens
🗝️🐝✨ Rust workspace for Keyhive and related crates
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
An execution-authority gateway for AI agents and APIs. It intercepts consequential HTTP actions, asks Decionis whether they are authorized, and forwards exactly the authorized request once on a single-use grant, holds it for a person, or refuses it, leaving chained evidence of each. Installs by Homebrew, Linux package, Docker or Helm.
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
ZITADEL - Identity infrastructure, simplified for you.
ThunderID, an LF Decentralized Trust project, is a high-performance, open-source identity stack designed for developers to secure and manage access for humans, AI agents, and machines through fully composable identity flows.
Showing 30 of 78 repositories