GitHub stars · StarDay

1goauthentik / authentikThe authentication glue you need.PythonLicense not declared26,258

2apache / casbinApache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.GoApache-2.0 · Permissive20,482

3dromara / Sa-Token✨ Open source, free, one-stop Java permission authentication framework makes authentication simple and elegant! - Login authentication, permission authentication, distributed session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signatureJavaApache-2.0 · Permissive19,111

4ory / hydraInternet-scale OpenID CertifiedTM OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.GoApache-2.0 · Permissive17,649

5zitadel / zitadelZITADEL - Identity infrastructure, simplified for you.GoAGPL-3.0 · Share derivative source15,533

6logto-io / logto🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.TypeScriptMPL-2.0 · Share derivative source14,851

7open-policy-agent / opaOpen Policy Agent (OPA) is an open source, general-purpose policy engine.GoApache-2.0 · Permissive12,442

8tadata-org / fastapi_mcpIntegration component exposing authenticated FastAPI endpoints as MCP tools.PythonMIT · Permissive12,028

9apereo / casApereo CAS - Identity & Single Sign On for all earthlings and beyond.JavaApache-2.0 · Permissive11,393

10authzed / spicedbOpen Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization dataGoApache-2.0 · Permissive7,198

11stalniy / caslCASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to accessTypeScriptMIT · Permissive7,110

12hexclave / hexclaveThe user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.TypeScriptLicense not declared6,886

13openfga / openfgaA high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.GoApache-2.0 · Permissive6,103

14Permify / permifyAn open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉GoAGPL-3.0 · Share derivative source5,968

15coorasse / cancancanThe authorization Gem for Ruby on Rails.RubyMIT · Permissive5,682

16doorkeeper-gem / doorkeeperDoorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.RubyMIT · Permissive5,534

17permitio / opalPolicy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)PythonApache-2.0 · Permissive5,521

18unkeyed / unkeyThe Developer Platform for Modern APIsGoLicense not declared5,483

19ory / ketoThe most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.GoApache-2.0 · Permissive5,418

20cerbos / cerbosCerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.GoApache-2.0 · Permissive4,646