1.goauthentik / authentik
The authentication glue you need.
+5,078 stars
from 21,114 · score 8.53
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
73 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.mikeroyal / Self-Hosting-Guide
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
+3,995 stars
from 19,434 · score 8.29
3.pocketbase / pocketbaseArchived
Open Source realtime backend in 1 file
+3,976 stars
from 57,637 · score 8.29
4.logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
+2,945 stars
from 11,886 · score 7.99
5.better-auth / better-auth
The most comprehensive authentication framework
+2,673 stars
from 27,871 · score 7.89
6.wasp-lang / open-saas
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
+2,020 stars
from 14,211 · score 7.61
7.authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
+1,977 stars
from 27,497 · score 7.59
8.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
+1,923 stars
from 13,569 · score 7.56
9.casdoor / casdoor
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
+1,302 stars
from 13,424 · score 7.17
10.trailbaseio / trailbase
An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, MCP and admin UI built on Rust, SQLite (PG) & Wasmtime.
+918 stars
from 4,824 · score 6.82
11.git-ecosystem / git-credential-manager
Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.
+656 stars
from 8,764 · score 6.49
12.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
+492 stars
from 19,983 · score 6.20
13.supertokens / supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
+404 stars
from 14,937 · score 6.00
14.nextauthjs / next-auth
Authentication for the Web.
+356 stars
from 28,020 · score 5.88
15.nhost / nhost
The Open Source Firebase Alternative with GraphQL.
+305 stars
from 9,076 · score 5.72
16.tadata-org / fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
+302 stars
from 11,721 · score 5.71
17.unkeyed / unkey
The Developer Platform for Modern APIs
+237 stars
from 5,245 · score 5.47
18.apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
+123 stars
from 11,269 · score 4.82
19.pennersr / django-allauth
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
+117 stars
from 10,266 · score 4.77
20.heartcombo / devise
Flexible authentication solution for Rails with Warden.
+97 stars
from 24,258 · score 4.58
21.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+87 stars
from 16 · score 4.48
22.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
+63 stars
from 5,469 · score 4.16
23.omniauth / omniauth
OmniAuth is a flexible authentication system utilizing Rack middleware.
+59 stars
from 8,045 · score 4.09
24.vvo / iron-session
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
+56 stars
from 4,096 · score 4.04
25.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
+51 stars
from 746 · score 3.95
26.tymondesigns / jwt-auth
🔐 JSON Web Token Authentication for Laravel & Lumen
+46 stars
from 11,440 · score 3.85
27.TaloDev / godot
Talo's Godot plugin for open source leaderboards, stats, auth, game saves and more
+43 stars
from 206 · score 3.78
28.build-trust / ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
+41 stars
from 4,598 · score 3.74
29.Badgerati / Pode
Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers
+41 stars
from 1,029 · score 3.74
30.ValvePython / steam
☁️ Python package for interacting with Steam
+39 stars
from 1,251 · score 3.69
31.ramosbugs / openidconnect-rs
OpenID Connect Library for Rust
+38 stars
from 610 · score 3.66
32.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+34 stars
from 2,505 · score 3.56
33.thephpleague / oauth2-client
Easy integration with OAuth 2.0 service providers.
+32 stars
from 3,786 · score 3.50
34.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
+31 stars
from 871 · score 3.47
35.cossacklabs / themis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
+25 stars
from 1,957 · score 3.26
36.davidfowl / TodoApp
Todo application with ASP.NET Core Blazor WASM, Minimal APIs and Authentication
+24 stars
from 3,079 · score 3.22
37.oauthlib / oauthlib
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
+24 stars
from 2,962 · score 3.22
38.vahiiiid / go-rest-api-boilerplate
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
+22 stars
from 49 · score 3.14
39.ruby-oauth / oauth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
+20 stars
from 2,161 · score 3.04
40.sidebase / nuxt-auth
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
+20 stars
from 1,535 · score 3.04
41.janko / rodauth-rails
Rails integration for Rodauth authentication framework
+18 stars
from 742 · score 2.94
42.simov / grant
OAuth Proxy
+17 stars
from 4,146 · score 2.89
43.leodip / goiabada
Goiabada is an OAuth2 / OpenID Connect server written in Go.
+16 stars
from 188 · score 2.83
44.Abblix / Oidc.Server
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
+16 stars
from 97 · score 2.83
45.UPDOT / payload-auth-plugin
Authentication plugin for Payload CMS
+15 stars
from 295 · score 2.77
46.lexik / LexikJWTAuthenticationBundle
JWT authentication for your Symfony API
+14 stars
from 2,589 · score 2.71
47.ueberauth / ueberauth
An Elixir Authentication System for Plug-based Web Applications
+14 stars
from 1,704 · score 2.71
48.OpenIDC / mod_auth_openidc
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
+14 stars
from 1,082 · score 2.71
49.lazaronixon / authentication-zero
An authentication system generator for Rails applications.
+13 stars
from 1,859 · score 2.64
50.damienbod / angular-auth-oidc-client
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
+13 stars
from 1,222 · score 2.64
51.enkodellc / blazorboilerplate
Blazor Boilerplate / Starter Template with MudBlazor
+11 stars
from 1,901 · score 2.48
52.lynndylanhurley / devise_token_auth
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
+10 stars
from 3,560 · score 2.40
53.ueberauth / guardian
Elixir Authentication
+10 stars
from 3,503 · score 2.40
54.dchest / tweetnacl-js
Port of TweetNaCl cryptographic library to JavaScript
+10 stars
from 1,913 · score 2.40
+9 stars
from 1,451 · score 2.30
56.o1egl / paseto
Platform-Agnostic Security Tokens implementation in GO (Golang)
+9 stars
from 931 · score 2.30
57.CodetrixStudio / CapacitorGoogleAuth
Capacitor plugin for Google Auth. Lightweight & no dependencies.
+8 stars
from 327 · score 2.20
58.pow-auth / pow
Robust, modular, and extendable user authentication system
+7 stars
from 1,663 · score 2.08
59.jferrl / go-githubauth
GitHub App authentication for Go: installation tokens, JWTs and PATs as oauth2.TokenSource, plus webhook signature verification and KMS/HSM signing
+6 stars
from 29 · score 1.95
60.rushisangani / BiometricAuthentication
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
+5 stars
from 824 · score 1.79
61.peburrows / goth
Elixir package for Oauth authentication via Google Cloud APIs
+5 stars
from 320 · score 1.79
62.authomatic / authomatic
Simple yet powerful authorization / authentication client library for Python web applications.
+4 stars
from 1,050 · score 1.61
63.shaj13 / go-guardian
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
+4 stars
from 609 · score 1.61
64.dwyl / elixir-auth-google
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
+3 stars
from 288 · score 1.39
65.HynekPetrak / sshame
brute force SSH public-key authentication
+3 stars
from 77 · score 1.39
66.pardnchiu / go-jwt
(module) A Go JWT authentication library with refresh token rotation, Redis-backed revocation, and Gin middleware
+3 stars
from 16 · score 1.39
67.hwi / HWIOAuthBundle
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.
+2 stars
from 2,357 · score 1.10
68.iaincollins / nextjs-starterArchived
A starter project for Next.js with authentication
+2 stars
from 1,363 · score 1.10
69.AmitJoki / Enigma
A full-fledged one-to-one chat app developed entirely in Flutter
+2 stars
from 400 · score 1.10
70.capacitor-community / generic-oauth2
Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!
+2 stars
from 278 · score 1.10
71.pac4j / vertx-pac4j
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+2 stars
from 133 · score 1.10
72.dereuromark / cakephp-tinyauth
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.
+2 stars
from 130 · score 1.10
73.stavroskasidis / BlazorWithIdentityArchived
A project template for a blazor hosted app using cookie based authentication with ef core identity.
+1 stars
from 467 · score 0.69