#Authorization

Showing 60 of 152 repositories tagged #authorization, ranked by stars

goauthentik
goauthentik
authentik

The authentication glue you need.

Score
100
โ˜… 22.3k โ‘‚ 1.7k +4/day
Python
apache
apache
casbin

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

Score
100
โ˜… 20.2k โ‘‚ 1.7k +26/day
Go
ory
ory
hydra

Internet-scale OpenID Certifiedโ„ข OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

Score
97
โ˜… 17.4k โ‘‚ 1.6k +5/day
Go
zitadel
zitadel
zitadel

ZITADEL - Identity infrastructure, simplified forย you.

Score
93
โ˜… 14.3k โ‘‚ 1.2k +13/day
Go
logto-io
logto-io
logto

๐Ÿง‘โ€๐Ÿš€ Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

Score
100
โ˜… 14.0k โ‘‚ 962 +237/day
TypeScript
open-policy-agent
open-policy-agent
opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Score
90
โ˜… 11.9k โ‘‚ 1.6k +4/day
Go
tadata-org
tadata-org
fastapi_mcp

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

Score
83
โ˜… 11.9k โ‘‚ 952 +3/day
Python
authzed
authzed
spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Score
86
โ˜… 6.8k โ‘‚ 404 +6/day
Go
hexclave
hexclave
hexclave

The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.

Score
93
โ˜… 6.8k โ‘‚ 521 +4/day
TypeScript
Permify
Permify
permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. โ€” Permify is now part of FusionAuth ๐ŸŽ‰

Score
79
โ˜… 5.9k โ‘‚ 322 โ€”
Go
permitio
permitio
opal

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

Score
92
โ˜… 5.5k โ‘‚ 286 โ€”
Python
openfga
openfga
openfga

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

Score
76
โ˜… 5.4k โ‘‚ 434 +31/day
Go
unkeyed
unkeyed
unkey

The Developer Platform for Modern APIs

Score
83
โ˜… 5.4k โ‘‚ 626 +1/day
Go
ory
ory
keto

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

Score
72
โ˜… 5.4k โ‘‚ 385 +3/day
Go
build-trust
build-trust
ockam

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications โ€“ at massive scale.

Score
100
โ˜… 4.6k โ‘‚ 556 โ€”
Rust
google
google
santa

A binary authorization and monitoring system for macOS

Score
70
โ˜… 4.5k โ‘‚ 288 โ€”
Objective-C++
cerbos
cerbos
cerbos

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

Score
69
โ˜… 4.5k โ‘‚ 199 โ€”
Go
zoontek
zoontek
react-native-permissions

An unified permissions API for React Native on iOS, Android and Windows.

Score
100
โ˜… 4.4k โ‘‚ 849 โ€”
Objective-C++
marmotedu
marmotedu
iam

ไผไธš็บง็š„ Go ่ฏญ่จ€ๅฎžๆˆ˜้กน็›ฎ๏ผš่ฎค่ฏๅ’ŒๆŽˆๆƒ็ณป็ปŸ๏ผˆๅธฆ้…ๅฅ—่ฏพ็จ‹๏ผ‰

Score
41
โ˜… 4.2k โ‘‚ 1.1k โ€”
Go
JosephSilber
JosephSilber
bouncer

Laravel Eloquent roles and abilities.

Score
96
โ˜… 3.6k โ‘‚ 336 โ€”
PHP
oauthlib
oauthlib
oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

Score
75
โ˜… 3.0k โ‘‚ 514 +3/day
Python
zenstackhq
zenstackhq
zenstack

Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services

Score
87
โ˜… 2.9k โ‘‚ 149 โ€”
TypeScript
ory
ory
fosite

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

Score
55
โ˜… 2.6k โ‘‚ 343 +1/day
Go
supabase
supabase
supabase-py

Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.

Score
0
โ˜… 2.5k โ‘‚ 506 +1/day
Python
pac4j
pac4j
pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

Score
100
โ˜… 2.5k โ‘‚ 710 โ€”
Java
supabase
supabase
auth

A JWT based API for managing users and issuing JWT tokens

Score
66
โ˜… 2.5k โ‘‚ 696 +4/day
Go
onury
onury
accesscontrol

Role and Attribute based Access Control for Node.js

Score
94
โ˜… 2.3k โ‘‚ 182 +3/day
TypeScript
greenpau
greenpau
caddy-security

๐Ÿ” Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. ๐Ÿ’Ž Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. ๐Ÿ’Ž Authorization with JWT/PASETO tokens. ๐Ÿ”

Score
92
โ˜… 2.2k โ‘‚ 101 +3/day
Go
ruby-oauth
ruby-oauth
oauth2

๐Ÿ” oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

Score
98
โ˜… 2.2k โ‘‚ 627 โ€”
Ruby
authorizerdev
authorizerdev
authorizer

Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.

Score
62
โ˜… 2.0k โ‘‚ 210 โ€”
Go
callicoder
callicoder
spring-security-react-ant-design-polls-app

Full Stack Polls App built using Spring Boot, Spring Security, JWT, React, and Ant Design

Score
53
โ˜… 1.9k โ‘‚ 1.1k โ€”
Java
FairwindsOps
FairwindsOps
rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

Score
100
โ˜… 1.7k โ‘‚ 133 +1/day
Go
cartalyst
cartalyst
sentinel

A framework agnostic authentication & authorization system.

Score
88
โ˜… 1.5k โ‘‚ 245 โ€”
PHP
akto-api-security
akto-api-security
akto

Proactive, Open source API security โ†’ API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

Score
90
โ˜… 1.5k โ‘‚ 285 โ€”
Java
cyberark
cyberark
KubiScan

A tool to scan Kubernetes cluster for risky permissions

Score
70
โ˜… 1.4k โ‘‚ 141 โ€”
Python
corneliusweig
corneliusweig
rakkess

Review Access - kubectl plugin to show an access matrix for k8s server resources

Score
57
โ˜… 1.4k โ‘‚ 60 โ€”
Go
aserto-dev
aserto-dev
topaz

Cloud-native authorization for modern applications and APIs

Score
86
โ˜… 1.3k โ‘‚ 44 +1/day
Go
php-casbin
php-casbin
php-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

Score
82
โ˜… 1.3k โ‘‚ 135 +1/day
PHP
FredericHeem
FredericHeem
starhackit

StarHackIt: React/Native/Node fullstack starter kit with authentication and authorisation, data backed by SQL, the infrastructure deployed with GruCloud

Score
61
โ˜… 1.3k โ‘‚ 175 โ€”
JavaScript
delight-im
delight-im
PHP-Auth

Authentication for PHP. Simple, lightweight and secure.

Score
52
โ˜… 1.2k โ‘‚ 240 โ€”
PHP
casosorg
casosorg
casos

CasOS: a cloud operating system built on Kubernetes, Live Demo: https://demo.casos.net

Score
59
โ˜… 1.2k โ‘‚ 86 +1/day
JavaScript
yezz123
yezz123
authx

Ready-to-use and customizable Authentications and Oauth2 management for FastAPI โœจ

Score
58
โ˜… 1.2k โ‘‚ 62 +3/day
Python
liggitt
liggitt
audit2rbac

Autogenerate RBAC policies based on Kubernetes audit logs

Score
52
โ˜… 1.1k โ‘‚ 81 โ€”
Go
alcideio
alcideio
rbac-tool

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

Score
40
โ˜… 1.1k โ‘‚ 71 +2/day
Go
tower1229
tower1229
Vue-Access-Control

:gem: Frontend access control framework based Vue

Score
27
โ˜… 1.1k โ‘‚ 202 โ€”
Vue
maxcountryman
maxcountryman
axum-login

๐Ÿชช User identification, authentication, and authorization for Axum.

Score
80
โ˜… 998 โ‘‚ 98 +1/day
Rust
FairwindsOps
FairwindsOps
rbac-lookup

Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster

Score
45
โ˜… 978 โ‘‚ 49 โ€”
Go
kawhii
kawhii
sso

casๅ•็‚น็™ปๅฝ•็ณป็ปŸ๏ผŒๅ…ถไธญๅŒ…ๆ‹ฌcas่ฎค่ฏๆœๅŠก๏ผŒ้…็ฝฎไธญๅฟƒ๏ผŒ็›‘ๆŽงๅนณๅฐ๏ผŒๆœๅŠก็ฎก็†็š„้ซ˜ๅฏ็”จ้กน็›ฎ

Score
74
โ˜… 936 โ‘‚ 423 โ€”
Java
usnistgov
usnistgov
OSCAL

Open Security Controls Assessment Language (OSCAL)

Score
84
โ˜… 925 โ‘‚ 244 +3/day
XSLT
python-social-auth
python-social-auth
social-core

Python Social Auth - Core

Score
67
โ˜… 916 โ‘‚ 574 โ€”
Python
golf-mcp
golf-mcp
golf

Production-Ready MCP Server Framework โ€ข Build, deploy & scale secure AI agent infrastructure โ€ข Includes Auth, Observability, Debugger, Telemetry & Runtime โ€ข Run real-world MCPs powering AI Agents

Score
50
โ˜… 834 โ‘‚ 69 โ€”
Python
IndominusByte
IndominusByte
fastapi-jwt-auth

FastAPI extension that provides JWT Auth support (secure, easy to use, and lightweight)

Score
25
โ˜… 827 โ‘‚ 178 โ€”
Python
eicrud
eicrud
eicrud

An opinionated backend framework based on NestJS. Get your CRUD app up and running in no time! โš™๏ธ๐Ÿ”’

Score
60
โ˜… 809 โ‘‚ 30 โ€”
TypeScript
panva
panva
oauth4webapi

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

Score
80
โ˜… 767 โ‘‚ 70 +1/day
TypeScript
apache
apache
casbin-gorm-adapter

GORM adapter for Casbin, see extended version of GORM Adapter Ex at: https://github.com/casbin/gorm-adapter-ex

Score
48
โ˜… 745 โ‘‚ 221 โ€”
Go
aaronn
aaronn
django-rest-framework-passwordless

Passwordless Auth for Django REST Framework

Score
17
โ˜… 734 โ‘‚ 155 โ€”
Python
damienbod
damienbod
AspNet6IdentityServer4AngularOidcFlows

OpenID Connect Code Flow PKCE / Implicit Flow with Angular and ASP.NET Core 6 IdentityServer4

Score
36
โ˜… 723 โ‘‚ 202 โ€”
TypeScript
northpolesec
northpolesec
santa

A binary and file access authorization system for macOS.

Score
80
โ˜… 687 โ‘‚ 52 +3/day
Objective-C++
watscho
watscho
express-mongodb-rest-api-boilerplate

A boilerplate for Node.js apps / Rest API / Authentication from scratch - express, mongodb (mongoose). Typescript

Score
39
โ˜… 651 โ‘‚ 90 โ€”
TypeScript
WuliRuler
WuliRuler
AutorizePro

๐Ÿงฟ AutorizeProๆ˜ฏไธ€ๆฌพๅผบๅคง่ถŠๆƒๆฃ€ๆต‹ Burp ๆ’ไปถ๏ผŒ้€š่ฟ‡ๅขžๅŠ  AI ่พ…ๅŠฉๅˆ†ๆž && ่ฟ›ไธ€ๆญฅไผ˜ๅŒ–ๆฃ€ๆต‹้€ป่พ‘๏ผŒๅคงๅน…้™ไฝŽ่ฏฏๆŠฅ็އ๏ผŒๆๅ‡่ถŠๆƒๆผๆดžๆฃ€ๅ‡บๆ•ˆ็އใ€‚ [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

Score
0
โ˜… 608 โ‘‚ 33 โ€”
Python
Related Topics
#authentication#security#rbac#auth#access-control#kubernetes#oauth2#acl#abac#permissions#golang#oidc

ยฉ 2026 GitRepoTrend ยท GitHub repositories by topic ยท Updated weekly