1.goauthentik / authentik
The authentication glue you need.
+95 stars
from 26,097 · score 4.56
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
28 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
+60 stars
from 15,432 · score 4.11
3.NyxFoundation / nyxis
A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.
+53 stars
from 264 · score 3.99
4.logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
+47 stars
from 14,784 · score 3.87
5.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
+36 stars
from 6,036 · score 3.61
6.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
+17 stars
from 12,402 · score 2.89
7.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
+14 stars
from 17,629 · score 2.71
8.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+14 stars
from 7,170 · score 2.71
9.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
+6 stars
from 20,469 · score 1.95
10.dromara / Sa-Token
✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
+6 stars
from 19,102 · score 1.95
11.stalniy / casl
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
+6 stars
from 7,103 · score 1.95
12.unkeyed / unkey
The Developer Platform for Modern APIs
+5 stars
from 5,477 · score 1.79
13.panva / node-oidc-provider
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
+5 stars
from 3,839 · score 1.79
14.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
+5 stars
from 792 · score 1.79
15.tadata-org / fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
+3 stars
from 12,020 · score 1.39
16.apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
+3 stars
from 11,389 · score 1.39
17.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
+3 stars
from 899 · score 1.39
18.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
+2 stars
from 5,414 · score 1.10
19.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+2 stars
from 2,537 · score 1.10
20.pow-auth / pow
Robust, modular, and extendable user authentication system
+2 stars
from 1,668 · score 1.10
21.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
+1 stars
from 5,967 · score 0.69
22.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
+1 stars
from 5,531 · score 0.69
23.build-trust / ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
+1 stars
from 4,638 · score 0.69
24.enkodellc / blazorboilerplate
Blazor Boilerplate / Starter Template with MudBlazor
+1 stars
from 1,911 · score 0.69
25.cpjk / canary
:hatching_chick: Elixir authorization and resource-loading library for Plug applications.
+1 stars
from 486 · score 0.69
26.cerberauth / awesome-openid-connect
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
+1 stars
from 133 · score 0.69
27.dereuromark / cakephp-tinyauth
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.
+1 stars
from 131 · score 0.69
28.zakariagharzouli / sparda
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
+1 stars
from 8 · score 0.69