All projects
Repositories in this selection 15 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Jjaredhanson / passportSimple, unobtrusive authentication for Node.js.JavaScriptMIT · PermissiveInsufficient rank history23,5201,245——2024-08-16
2—Oory / hydraInternet-scale OpenID CertifiedTM OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.GoApache-2.0 · PermissiveInsufficient rank history17,6461,620——2026-07-29
3—Zzitadel / zitadelZITADEL - Identity infrastructure, simplified for you.GoAGPL-3.0 · Share derivative sourceInsufficient rank history15,4991,413——2026-11-02
4—Llogto-io / logto🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.TypeScriptMPL-2.0 · Share derivative sourceInsufficient rank history14,8371,212——2026-11-02
5—Ppennersr / django-allauthIntegrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/PythonMIT · PermissiveInsufficient rank history10,3833,107——2026-10-30
6—Aauthlib / authlibThe ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.PythonBSD-3-Clause · PermissiveInsufficient rank history5,448584——2026-11-02
7—Ppanva / node-oidc-providerOpenID CertifiedTM OAuth 2.0 Authorization Server implementation for Node.jsJavaScriptMIT · PermissiveInsufficient rank history3,844798——2026-11-02
8—Oory / oathkeeperA cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.GoApache-2.0 · PermissiveInsufficient rank history3,608418——2026-07-27
9—Ooauthlib / oauthlibA generic, spec-compliant, thorough implementation of the OAuth request-signing logicPythonBSD-3-Clause · PermissiveInsufficient rank history2,986542——2026-10-31
10—DDefGuard / defguardZero-Trust access management with true WireGuard® 2FA/MFARustNOASSERTION · Restricted / unknownInsufficient rank history2,894121——2026-11-02
11—Oory / fositeExtensible security first OAuth 2.0 and OpenID Connect SDK for Go.GoApache-2.0 · PermissiveInsufficient rank history2,631352——2025-11-20
12—Ppac4j / pac4jSecurity engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...JavaApache-2.0 · PermissiveInsufficient rank history2,539712——2026-11-02
13—Aauthgear / authgear-serverOpen source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile appsGoApache-2.0 · PermissiveInsufficient rank history2,139130——2026-11-02
14—Ddromara / MaxKeyDromara MaxKey 🗝️ SSO, Leading-Edge IAM-IDaas (Identity and Access Management) Product, Under Apache-2.0 is free, the industry-leading IAM-IDaas identity management and authentication product, follows Apache-2.0 open source and free, supports OAuth2.x, OpenID SSO standard protocols such as Connect, SAML2.0, CAS, JWT, and SCIM are based on RBAC unified permission control to achieve user life cycle management, open source, security, compliance, and independent controllability.JavaApache-2.0 · PermissiveInsufficient rank history1,981419——2026-10-27
15—Ffdonnet / ubik_accountingDouble entry accounting app in Net 9C#Apache-2.0 · PermissiveInsufficient rank history1045——2025-02-16
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.