1.goauthentik / authentik
The authentication glue you need.
+3,700 stars
from 22,492 · score 8.22
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
49 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
+927 stars
from 14,565 · score 6.83
3.logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
+652 stars
from 14,179 · score 6.48
4.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
+550 stars
from 5,522 · score 6.31
5.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
+373 stars
from 12,046 · score 5.92
6.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+287 stars
from 6,897 · score 5.66
7.dromara / Sa-Token
✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
+218 stars
from 18,890 · score 5.39
8.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
+217 stars
from 20,258 · score 5.38
9.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
+217 stars
from 17,426 · score 5.38
10.stalniy / casl
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
+101 stars
from 7,008 · score 4.62
11.tadata-org / fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
+100 stars
from 11,923 · score 4.62
12.unkeyed / unkey
The Developer Platform for Modern APIs
+96 stars
from 5,386 · score 4.57
13.panva / node-oidc-provider
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
+65 stars
from 3,779 · score 4.19
14.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
+57 stars
from 5,911 · score 4.06
15.apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
+54 stars
from 11,338 · score 4.01
16.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
+44 stars
from 5,372 · score 3.81
17.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
+30 stars
from 767 · score 3.43
18.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
+23 stars
from 5,509 · score 3.18
19.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
+23 stars
from 879 · score 3.18
20.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+22 stars
from 2,517 · score 3.14
21.build-trust / ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
+18 stars
from 4,621 · score 2.94
22.apache / casbin-Casbin.NET
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
+17 stars
from 1,325 · score 2.89
23.apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
+16 stars
from 2,906 · score 2.83
24.thephpleague / oauth2-client
Easy integration with OAuth 2.0 service providers.
+14 stars
from 3,804 · score 2.71
25.oauthlib / oauthlib
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
+14 stars
from 2,972 · score 2.71
26.cerberauth / awesome-openid-connect
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
+13 stars
from 121 · score 2.64
27.theronic / eacl
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
+10 stars
from 88 · score 2.40
28.enkodellc / blazorboilerplate
Blazor Boilerplate / Starter Template with MudBlazor
+6 stars
from 1,906 · score 1.95
29.Abblix / Oidc.Server
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
+6 stars
from 107 · score 1.95
30.google / santaArchived
A binary authorization and monitoring system for macOS
+5 stars
from 4,492 · score 1.79
31.jwt-dotnet / jwt
Jwt.Net, a JWT (JSON Web Token) implementation for .NET
+5 stars
from 2,181 · score 1.79
32.ruby-oauth / oauth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
+5 stars
from 2,176 · score 1.79
33.dfunckt / django-rules
Awesome Django authorization, without the database
+5 stars
from 1,972 · score 1.79
34.leodip / goiabada
Goiabada is an OAuth2 / OpenID Connect server written in Go.
+5 stars
from 199 · score 1.79
35.OpenIdentityPlatform / OpenIG
OpenIG is an open-source identity gateway (reverse-proxy) that secures, routes, and manages web traffic. It enables authentication, access control, and integration with identity providers, delivering single sign-on and API security for web and cloud applications.
+5 stars
from 89 · score 1.79
36.zakariagharzouli / sparda
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
+5 stars
from 4 · score 1.79
37.simov / grant
OAuth Proxy
+4 stars
from 4,159 · score 1.61
38.JosephSilber / bouncer
Laravel Eloquent roles and abilities.
+4 stars
from 3,574 · score 1.61
39.santigarcor / laratrust
Handle roles and permissions in your Laravel application
+4 stars
from 2,270 · score 1.61
40.ueberauth / ueberauth
An Elixir Authentication System for Plug-based Web Applications
+4 stars
from 1,714 · score 1.61
41.pow-auth / pow
Robust, modular, and extendable user authentication system
+4 stars
from 1,666 · score 1.61
42.palkan / action_policy
Authorization framework for Ruby/Rails applications
+4 stars
from 1,560 · score 1.61
43.coorasse / cancancan
The authorization Gem for Ruby on Rails.
+3 stars
from 5,679 · score 1.39
44.authomatic / authomatic
Simple yet powerful authorization / authentication client library for Python web applications.
+2 stars
from 1,052 · score 1.10
45.schrockwell / bodyguard
Simple authorization conventions for Phoenix apps
+2 stars
from 795 · score 1.10
46.Egor-S / pocketbase-sveltekit-static
PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.
+2 stars
from 47 · score 1.10
47.google / hiba
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
+1 stars
from 389 · score 0.69
48.inspektor-dev / inspektor
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
+1 stars
from 285 · score 0.69
49.dereuromark / cakephp-tinyauth
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.
+1 stars
from 131 · score 0.69