1.goauthentik / authentik
The authentication glue you need.
+409 stars
from 25,783 · score 6.02
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
43 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
+341 stars
from 15,151 · score 5.83
3.logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
+234 stars
from 14,597 · score 5.46
4.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
+163 stars
from 5,909 · score 5.10
5.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
+114 stars
from 12,305 · score 4.74
6.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
+77 stars
from 20,398 · score 4.36
7.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+76 stars
from 7,108 · score 4.34
8.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
+70 stars
from 17,573 · score 4.26
9.dromara / Sa-Token
✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
+62 stars
from 19,046 · score 4.14
10.unkeyed / unkey
The Developer Platform for Modern APIs
+31 stars
from 5,451 · score 3.47
11.tadata-org / fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
+24 stars
from 11,999 · score 3.22
12.stalniy / casl
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
+24 stars
from 7,085 · score 3.22
13.panva / node-oidc-provider
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
+22 stars
from 3,822 · score 3.14
14.apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
+18 stars
from 11,374 · score 2.94
15.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
+15 stars
from 5,953 · score 2.77
16.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
+12 stars
from 5,404 · score 2.56
17.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
+12 stars
from 785 · score 2.56
18.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
+10 stars
from 5,522 · score 2.40
19.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+10 stars
from 2,529 · score 2.40
20.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
+7 stars
from 895 · score 2.08
21.build-trust / ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
+6 stars
from 4,633 · score 1.95
22.apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
+6 stars
from 2,916 · score 1.95
23.cerberauth / awesome-openid-connect
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
+5 stars
from 129 · score 1.79
24.apache / casbin-Casbin.NET
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
+4 stars
from 1,338 · score 1.61
25.oauthlib / oauthlib
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
+3 stars
from 2,983 · score 1.39
26.Abblix / Oidc.Server
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
+3 stars
from 110 · score 1.39
27.coorasse / cancancan
The authorization Gem for Ruby on Rails.
+2 stars
from 5,680 · score 1.10
28.simov / grant
OAuth Proxy
+2 stars
from 4,161 · score 1.10
29.thephpleague / oauth2-client
Easy integration with OAuth 2.0 service providers.
+2 stars
from 3,816 · score 1.10
30.JosephSilber / bouncer
Laravel Eloquent roles and abilities.
+2 stars
from 3,576 · score 1.10
31.jwt-dotnet / jwt
Jwt.Net, a JWT (JSON Web Token) implementation for .NET
+2 stars
from 2,184 · score 1.10
32.ruby-oauth / oauth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
+2 stars
from 2,179 · score 1.10
33.dfunckt / django-rules
Awesome Django authorization, without the database
+2 stars
from 1,975 · score 1.10
34.enkodellc / blazorboilerplate
Blazor Boilerplate / Starter Template with MudBlazor
+2 stars
from 1,910 · score 1.10
35.ueberauth / ueberauth
An Elixir Authentication System for Plug-based Web Applications
+2 stars
from 1,716 · score 1.10
36.pow-auth / pow
Robust, modular, and extendable user authentication system
+2 stars
from 1,668 · score 1.10
37.palkan / action_policy
Authorization framework for Ruby/Rails applications
+1 stars
from 1,563 · score 0.69
38.google / hiba
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
+1 stars
from 389 · score 0.69
39.inspektor-dev / inspektor
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
+1 stars
from 285 · score 0.69
40.dereuromark / cakephp-tinyauth
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.
+1 stars
from 131 · score 0.69
41.theronic / eacl
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
+1 stars
from 97 · score 0.69
42.OpenIdentityPlatform / OpenIG
OpenIG is an open-source identity gateway (reverse-proxy) that secures, routes, and manages web traffic. It enables authentication, access control, and integration with identity providers, delivering single sign-on and API security for web and cloud applications.
+1 stars
from 93 · score 0.69
43.zakariagharzouli / sparda
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
+1 stars
from 8 · score 0.69