GitHub stars · StarDay

1sahat / hackathon-starterA starter boilerplate for Node.js web applications.JavaScriptMIT · Permissive35,264

2nextauthjs / next-authAuthentication for the Web.TypeScriptISC · Permissive28,374

3goauthentik / authentikThe authentication glue you need.PythonLicense not declared26,258

4jaredhanson / passportSimple, unobtrusive authentication for Node.js.JavaScriptMIT · PermissiveInactive23,522

5shieldfy / API-Security-ChecklistChecklist of the most important security countermeasures when designing, testing, and releasing your APIMIT · Permissive23,345

6ory / hydraInternet-scale OpenID CertifiedTM OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.GoApache-2.0 · Permissive17,649

7justauth / JustAuth🏆Gitee's most valuable open source project 🚀:100: Small, comprehensive and beautiful third-party login open source component. Currently supports Github, Gitee, Weibo, DingTalk, Baidu, Coding, Tencent Cloud Developer Platform, OSChina, Alipay, QQ, WeChat, Taobao, Google, Facebook, Douyin, LinkedIn, Xiaomi, Microsoft, and Toutiao , Teambition, StackOverflow, Pinterest, Renren, Huawei, WeChat Enterprise, Kujiale, Gitlab, Meituan, Ele.me, Twitter, Feishu, JD.com, Alibaba Cloud, Himalaya, Amazon, Slack and Authorized login to third-party platforms such as Line. Login, so easy!JavaMIT · PermissiveInactive17,534

8corsairdev / corsairConnect your users to their appsTypeScriptLicense not declared15,690

9zitadel / zitadelZITADEL - Identity infrastructure, simplified for you.GoAGPL-3.0 · Share derivative source15,533

10oauth2-proxy / oauth2-proxyA reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.GoMIT · Permissive15,331

11logto-io / logto🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.TypeScriptMPL-2.0 · Share derivative source14,851

12InsForge / InsForgeThe all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.TypeScriptApache-2.0 · Permissive13,300

13NangoHQ / nangoConnect your agents & product to 1,000 APIs.TypeScriptLicense not declared13,138

14apereo / casApereo CAS - Identity & Single Sign On for all earthlings and beyond.JavaApache-2.0 · Permissive11,393

15pennersr / django-allauthIntegrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/PythonMIT · Permissive10,383

16paascloud / paascloud-masterSpring cloud + vue + oAuth2.0 is implemented in the whole family bucket. The front-end and back-end are separated to simulate the mall. The complete shopping process and back-end operation platform can quickly build enterprise-level microservice projects. Supports three-party login such as WeChat login.JavaApache-2.0 · PermissiveInactive9,850

17zhoutaoo / SpringCloudOpensabre is a microservice development platform based on SpringCloud2023, integrating Spring Security, Springcloud Alibaba and other components. It includes basic system management applications such as basic RBAC permission management, authorization authentication, gateway management, service governance, and audit logs. Relevant development specifications and styles are defined and implemented at the service framework layer. It can be used out of the box and supports the deployment of Docker and Kubenetes. Allow project developers to quickly enter business development without spending too much time on infrastructure construction and coding style specifications. The goal is to build a financial-grade, high-security microservice solution.Apache-2.0 · Permissive8,931

18pig-mesh / pig↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.JavaApache-2.0 · Permissive6,705

19thephpleague / oauth2-serverA spec compliant, secure by default PHP OAuth 2.0 ServerPHPMIT · Permissive6,670

20golang / oauth2Go OAuth2GoBSD-3-Clause · Permissive5,906