All projects
Repositories in this selection 43 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Ggoauthentik / authentikThe authentication glue you need.PythonNOASSERTION · Restricted / unknownInsufficient rank history26,2082,099——2026-11-02
2—Aapache / casbinApache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.GoApache-2.0 · PermissiveInsufficient rank history20,4761,767——2026-11-02
3—Ddromara / Sa-Token✨ Open source, free, one-stop Java permission authentication framework makes authentication simple and elegant! - Login authentication, permission authentication, distributed session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signatureJavaApache-2.0 · PermissiveInsufficient rank history19,1082,913——2026-10-16
4—Oory / hydraInternet-scale OpenID CertifiedTM OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.GoApache-2.0 · PermissiveInsufficient rank history17,6461,620——2026-07-29
5—Zzitadel / zitadelZITADEL - Identity infrastructure, simplified for you.GoAGPL-3.0 · Share derivative sourceInsufficient rank history15,4991,413——2026-11-02
6—Llogto-io / logto🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.TypeScriptMPL-2.0 · Share derivative sourceInsufficient rank history14,8371,212——2026-11-02
7—Oopen-policy-agent / opaOpen Policy Agent (OPA) is an open source, general-purpose policy engine.GoApache-2.0 · PermissiveInsufficient rank history12,4231,705——2026-11-03
8—Ttadata-org / fastapi_mcpIntegration component exposing authenticated FastAPI endpoints as MCP tools.PythonMIT · PermissiveInsufficient rank history12,024967——2025-11-24
9—Aapereo / casApereo CAS - Identity & Single Sign On for all earthlings and beyond.JavaApache-2.0 · PermissiveInsufficient rank history11,3943,955——2026-11-02
10—Aauthzed / spicedbOpen Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization dataGoApache-2.0 · PermissiveInsufficient rank history7,188439——2026-11-01
11—Sstalniy / caslCASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to accessTypeScriptMIT · PermissiveInsufficient rank history7,111301——2026-11-03
12—Hhexclave / hexclaveThe user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history6,883530——2026-11-02
13—Oopenfga / openfgaA high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.GoApache-2.0 · PermissiveInsufficient rank history6,083549——2026-11-02
14—PPermify / permifyAn open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉GoAGPL-3.0 · Share derivative sourceInsufficient rank history5,968330——2026-11-02
15—Ccoorasse / cancancanThe authorization Gem for Ruby on Rails.RubyMIT · PermissiveInsufficient rank history5,683625——2026-10-20
16—Ddoorkeeper-gem / doorkeeperDoorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.RubyMIT · PermissiveInsufficient rank history5,5321,078——2026-11-02
17—Ppermitio / opalPolicy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)PythonApache-2.0 · PermissiveInsufficient rank history5,524305——2026-11-02
18—Uunkeyed / unkeyThe Developer Platform for Modern APIsGoNOASSERTION · Restricted / unknownInsufficient rank history5,483636——2026-11-02
19—Oory / ketoThe most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.GoApache-2.0 · PermissiveInsufficient rank history5,418394——2026-09-04
20—Ccerbos / cerbosCerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.GoApache-2.0 · PermissiveInsufficient rank history4,644219——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.