The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
47,133 repositories indexed
1–24 of 41 · Most stars
The authentication glue you need.
Daemon to ban hosts that cause multiple authentication errors
Deduplicating archiver with compression and authenticated encryption.
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
OAuth2 goodies for the Djangonauts!
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Awesome Django authorization, without the database
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
☁️ Python package for interacting with Steam
Simple yet powerful authorization / authentication client library for Python web applications.
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.
Django registration and authentication with GraphQL.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
Simplifying third-party authentication for web applications.
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
2 Factor Authentication for Wagtail