Auth & permissions
Repositories in this selection 46 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Oopenssl / opensslGeneral-purpose library for TLS and cryptographic operations.CApache-2.0 · PermissiveInsufficient rank history31,16311,571——2026-11-02
2—Bbetter-auth / better-authAdd authentication, sessions and extensible identity features to applications.TypeScriptMIT · PermissiveInsufficient rank history30,5533,052——2026-11-01
3—OOpenZeppelin / openzeppelin-contractsOpenZeppelin component library for smart contract development.SolidityMIT · PermissiveInsufficient rank history27,34212,418——2026-11-02
4—Hheartcombo / deviseAuthentication solution for Rails built on Warden.RubyMIT · PermissiveInsufficient rank history24,3565,470——2026-10-06
5—Jjaredhanson / passportSimple, unobtrusive authentication for Node.js.JavaScriptMIT · PermissiveInsufficient rank history23,5201,245——2024-08-16
6—Aapache / casbinApache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.GoApache-2.0 · PermissiveInsufficient rank history20,4761,767——2026-11-02
7—Kkgretzky / evilginx2Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authenticationGoBSD-3-Clause · PermissiveInsufficient rank history15,8212,760——2026-06-10
8—Ggoogleapis / google-api-nodejs-clientGoogle's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.TypeScriptApache-2.0 · PermissiveInsufficient rank history12,2852,045——2026-10-30
9—Ggo-resty / restySimple HTTP, REST, and SSE client library for GoGoMIT · PermissiveInsufficient rank history11,824829——2026-10-19
10—Ddexidp / dexAn OIDC identity and OAuth 2.0 provider with pluggable connectors.GoApache-2.0 · PermissiveInsufficient rank history11,2272,015——2026-11-02
11—Aakveo / nebular:boom: Customizable Angular UI Library based on Eva Design System :new_moon_with_face::sparkles:Dark ModeTypeScriptMIT · PermissiveInsufficient rank history8,1201,493——2026-01-15
12—Aangular / angularfireA Firebase integration library for Angular, with dependency injection, RxJS streams, authentication route guards, and lazy loading support.TypeScriptMIT · PermissiveInsufficient rank history7,7932,152——2026-10-29
13—Sstalniy / caslCASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to accessTypeScriptMIT · PermissiveInsufficient rank history7,111301——2026-11-03
14—Ffirebase / firebase-ios-sdkFirebase SDK for Apple App DevelopmentC++Apache-2.0 · PermissiveInsufficient rank history6,9791,831——2026-11-02
15—Oopenfga / openfgaA high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.GoApache-2.0 · PermissiveInsufficient rank history6,083549——2026-11-02
16—Ffirebase / firebase-js-sdkThe Firebase JavaScript SDK.TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history5,1571,043——2026-11-03
17—Ddpgaspar / Flask-AppBuilderSimple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/PythonBSD-3-Clause · PermissiveInsufficient rank history4,9621,438——2026-10-22
18—Nnetlify / gotrueAn authentication API for managing users and issuing JWTs.GoMIT · PermissiveInsufficient rank history4,502327——2026-10-27
19—Aapache / shiroApache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session managementJavaApache-2.0 · PermissiveInsufficient rank history4,4632,290——2026-11-02
20—Jjazzband / djangorestframework-simplejwtA JSON Web Token authentication plugin for the Django REST Framework.PythonMIT · PermissiveInsufficient rank history4,337708——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.