1.tailscale / tailscale
The easiest, most secure way to use WireGuard and 2FA.
+420 stars
from 38,067 · score 6.04
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
21 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.goauthentik / authentik
The authentication glue you need.
+95 stars
from 26,097 · score 4.56
3.better-auth / better-auth
The most comprehensive authentication framework
+85 stars
from 30,459 · score 4.45
4.fosrl / pangolin
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
+71 stars
from 23,217 · score 4.28
5.casdoor / casdoor
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
+67 stars
from 14,659 · score 4.22
6.authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
+65 stars
from 29,409 · score 4.19
7.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
+60 stars
from 15,432 · score 4.11
8.logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
+47 stars
from 14,784 · score 3.87
9.oauth2-proxy / oauth2-proxy
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
+41 stars
from 15,267 · score 3.74
10.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
+14 stars
from 17,629 · score 2.71
11.nilsteampassnet / TeamPass
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
+12 stars
from 1,861 · score 2.56
12.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
+6 stars
from 20,469 · score 1.95
13.dromara / Sa-Token
✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
+6 stars
from 19,102 · score 1.95
14.andrii-kryvoviaz / slink
Self-hosted image hosting and sharing platform with private links, collections, S3/SMB storage, OIDC SSO and ShareX support.
+4 stars
from 1,613 · score 1.61
15.apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
+3 stars
from 11,389 · score 1.39
16.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
+3 stars
from 899 · score 1.39
17.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+2 stars
from 2,537 · score 1.10
18.OpenIDC / mod_auth_openidc
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
+2 stars
from 1,094 · score 1.10
19.ory / polis
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
+1 stars
from 2,268 · score 0.69
20.error311 / FileRise
🗂️ FileRise – lightweight, self-hosted file manager & storage hub with granular ACLs, resumable uploads, encrypted folders, WebDAV & SSO. Fully Docker / Unraid compatible.
+1 stars
from 1,023 · score 0.69
21.engity-com / bifroest
SSH server and gateway for standard SSH clients: OIDC Device Authorization, Docker/Kubernetes sessions, verifiable audit and recording.
+1 stars
from 86 · score 0.69