GitHub stars · StarDay

1kdeldycke / awesome-falsehood😱 Falsehoods Programmers Believe inCC0-1.0 · Permissive27,829

2ory / hydraInternet-scale OpenID CertifiedTM OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.GoApache-2.0 · Permissive17,649

3zitadel / zitadelZITADEL - Identity infrastructure, simplified for you.GoAGPL-3.0 · Share derivative source15,533

4logto-io / logto🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.TypeScriptMPL-2.0 · Share derivative source14,851

5ory / kratosAuthor description: Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.GoApache-2.0 · Permissive13,947

6microsoft / Security-1018 Lessons, Kick-start Your Cybersecurity Learning.HTMLCC0-1.0 · Permissive7,029

7kanidm / kanidmKanidm: A simple, secure, and fast identity management platformRustMPL-2.0 · Share derivative source5,544

8doorkeeper-gem / doorkeeperDoorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.RubyMIT · Permissive5,534

9pomerium / pomeriumPomerium is an identity and context-aware access proxy.GoApache-2.0 · Permissive5,091

10build-trust / ockamOrchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.RustApache-2.0 · PermissiveInactive4,639

11oauthlib / oauthlibA generic, spec-compliant, thorough implementation of the OAuth request-signing logicPythonBSD-3-Clause · Permissive2,987

12pac4j / pac4jSecurity engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...JavaApache-2.0 · Permissive2,538

13authgear / authgear-serverOpen source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile appsGoApache-2.0 · Permissive2,144

14dromara / MaxKeyDromara MaxKey 🗝️ SSO, Leading-Edge IAM-IDaas (Identity and Access Management) Product, Under Apache-2.0 is free, the industry-leading IAM-IDaas identity management and authentication product, follows Apache-2.0 open source and free, supports OAuth2.x, OpenID SSO standard protocols such as Connect, SAML2.0, CAS, JWT, and SCIM are based on RBAC unified permission control to achieve user life cycle management, open source, security, compliance, and independent controllability.JavaApache-2.0 · Permissive1,987

15fusiondirectory / fusiondirectoryFusionDirectory is a modern, efficient and secure Identity Management (IAM) solution.PHPGPL-2.0 · Share derivative source189