authorization

The authentication glue you need.

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

ZITADEL - Identity infrastructure, simplified for you.

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.

Open-source Auth0/Clerk alternative

Open-source Auth0/Clerk alternative

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

The Developer Platform for Modern APIs

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

Easy integration with OAuth 2.0 service providers.

Laravel Eloquent roles and abilities.

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.

A JWT based API for managing users and issuing JWT tokens