All projects
Repositories in this selection 18 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Nnocobase / nocobaseNocoBase is the open-source platform for building, running, and evolving business systems with AI. Agents write the code and do the work, NocoBase provides the foundation and governance, and people make the decisions.TypeScriptUnknown · Restricted / unknownInsufficient rank history24,8212,948——2026-11-02
2—Ggravitational / teleportThe easiest, and most secure way to access and protect all of your infrastructure.GoAGPL-3.0 · Share derivative sourceInsufficient rank history21,0612,181——2026-10-20
3—Aapache / casbinApache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.GoApache-2.0 · PermissiveInsufficient rank history20,4761,767——2026-11-02
4—Llogto-io / logto🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.TypeScriptMPL-2.0 · Share derivative sourceInsufficient rank history14,8371,212——2026-11-02
5—Aauthzed / spicedbOpen Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization dataGoApache-2.0 · PermissiveInsufficient rank history7,188439——2026-11-01
6—Hhexclave / hexclaveThe user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history6,883530——2026-11-02
7—Oopenfga / openfgaA high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.GoApache-2.0 · PermissiveInsufficient rank history6,083549——2026-11-02
8—PPermify / permifyAn open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉GoAGPL-3.0 · Share derivative sourceInsufficient rank history5,968330——2026-11-02
9—Oory / ketoThe most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.GoApache-2.0 · PermissiveInsufficient rank history5,418394——2026-09-04
10—Iiflytek / skillhubSelf-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.JavaApache-2.0 · PermissiveInsufficient rank history5,365817——2026-11-03
11—Aanjoy8 / Blog.Core💖 ASP.NET Core 8.0 Family Bucket Tutorial, front-end and back-end separation back-end interface, vue tutorial companion, official documentation:C#Apache-2.0 · PermissiveInsufficient rank history5,2841,423——2026-04-16
12—Ddpgaspar / Flask-AppBuilderSimple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/PythonBSD-3-Clause · PermissiveInsufficient rank history4,9621,438——2026-10-22
13—Zzlt2000 / microservices-platformIt is based on SpringBoot2.x, SpringCloud and SpringCloudAlibaba and adopts an enterprise-level microservice multi-tenant system architecture with front-end and back-end separation. It also introduces the idea of componentization to achieve high cohesion and low coupling. The project code is concise and rich in comments and is easy to use. It is suitable for learning and enterprise use. It truly realizes a stateless unified authority authentication solution based on RBAC, jwt and oauth2. It is designed for the Internet and is suitable for both B-side and C-side users. It supports CI/CD multi-environment deployment and provides application management to facilitate third-party system access; it also integrates various microservice governance functions and monitoring functions. Modules include: enterprise-level authentication system, development platform, application monitoring, slow SQL monitoring, unified log, single sign-on, Redis distributed cache, configuration center, distributed task scheduling, interface documentation, code generation, etc.JavaApache-2.0 · PermissiveInsufficient rank history4,7511,680——2025-04-28
14—Ccerbos / cerbosCerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.GoApache-2.0 · PermissiveInsufficient rank history4,644219——2026-11-02
15—Eerupts / eruptCode as configuration. Annotate a Java entity with @Erupt and ship a production-grade admin backend in minutes — UI, RBAC, audit logs and APIs, all generated at runtime. No codegen, no frontend.JavaApache-2.0 · PermissiveInsufficient rank history3,991512——2026-11-02
16—Aapache / casbin-node-casbinAn authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and BrowserTypeScriptApache-2.0 · PermissiveInsufficient rank history2,921234——2026-11-01
17—Ddromara / MaxKeyDromara MaxKey 🗝️ SSO, Leading-Edge IAM-IDaas (Identity and Access Management) Product, Under Apache-2.0 is free, the industry-leading IAM-IDaas identity management and authentication product, follows Apache-2.0 open source and free, supports OAuth2.x, OpenID SSO standard protocols such as Connect, SAML2.0, CAS, JWT, and SCIM are based on RBAC unified permission control to achieve user life cycle management, open source, security, compliance, and independent controllability.JavaApache-2.0 · PermissiveInsufficient rank history1,981419——2026-10-27
18—Nnellavio / nellavio🚀 Next.js dashboard starter with auth, i18n, RBAC, 18 pages and 90+ UI componentsTypeScriptMIT · PermissiveInsufficient rank history51363——2026-08-28
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.