Projects in Awesome Lists tagged with authorization

https://github.com/casbin/casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

abac access-control acl auth authentication authn authorization authz cas casbin casdoor cloudos cloudsecurity iam oauth oidc permission rbac saml sso

Last synced: 12 May 2025

https://github.com/hsluoyz/casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

abac access-control acl auth authentication authn authorization authz cas casbin casdoor cloudos cloudsecurity iam oauth oidc permission rbac saml sso

Last synced: 26 Mar 2025

https://github.com/goauthentik/authentik

The authentication glue you need.

authentication authentik authorization kubernetes oauth2 oauth2-client oauth2-server oidc oidc-client oidc-provider proxy reverse-proxy saml saml-idp saml-sp security sso

Last synced: 09 Sep 2025

https://github.com/dromara/sa-token

一个轻量级 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式Session会话、微服务网关鉴权、单点登录、OAuth2.0

aouth2 authorization java springcloud sso token

Last synced: 12 May 2025

https://github.com/ory/hydra

The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.

authorization cloud docker federation hacktoberfest hydra identity oauth oauth-provider oauth2 oauth2-provider oauth2-server oidc openid openid-connect openid-connect-provider openid-provider security server sso

Last synced: 12 May 2025

https://github.com/dromara/Sa-Token

这可能是史上功能最全的Java权限认证框架！目前已集成——登录认证、权限认证、分布式Session会话、微服务网关鉴权、单点登录、OAuth2.0、踢人下线、Redis集成、前后台分离、记住我模式、模拟他人账号、临时身份切换、账号封禁、多账号认证体系、注解式鉴权、路由拦截式鉴权、花式token生成、自动续签、同端互斥登录、会话治理、密码加密、jwt集成、Spring集成、WebFlux集成...

aouth2 authorization java springcloud sso token

Last synced: 24 Mar 2025

https://github.com/apereo/cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

authentication authorization aws duosecurity fido identity-provider java ldap-authentication mfa oauth2 open-source openidconnect saml2 spring-boot spring-cloud spring-framework spring-webflow sso sso-authentication websso

Last synced: 09 Sep 2025

https://github.com/zitadel/zitadel

ZITADEL - Identity infrastructure, simplified for you.

2fa authentication authorization fido2 identity login mfa multitenancy oauth2 oidc openid-connect passkeys saml scim sso user

Last synced: 13 May 2025

https://github.com/open-policy-agent/opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

authorization cloud-native compliance declarative doge json lolcat opa open-policy-agent policy

Last synced: 09 Sep 2025

https://github.com/logto-io/logto

🧑‍🚀 The better auth and identity infrastructure and the open-source alternative to Auth0. No framework restrictions.

authentication authorization email identity jwt login logto mfa oauth2 openid-connect password passwordless rbac saml signup sms social-login sso totp typescript

Last synced: 13 May 2025

https://github.com/stalniy/casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

acl authorization cancan casl isomorphic-javascript permissions

Last synced: 30 Dec 2025

https://github.com/authzed/spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

abac acl authorization ciam cloud-native database distributed-systems entitlements fga fine-grained-access-control fine-grained-authorization kubernetes permissions rbac rebac security security-tools zanzibar

Last synced: 14 May 2025

https://github.com/cancancommunity/cancancan

The authorization Gem for Ruby on Rails.

authorization cancancan rails

Last synced: 11 Nov 2025

https://github.com/CanCanCommunity/cancancan

The authorization Gem for Ruby on Rails.

authorization cancancan rails

Last synced: 14 Mar 2025

https://github.com/doorkeeper-gem/doorkeeper

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

authentication authorization doorkeeper grape identity oauth oauth2 oauth2-provider oauth2-server ruby-on-rails

Last synced: 09 Sep 2025

https://github.com/permify/permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.

abac access-control acl authorization ciam cloud-native distributed fga fine-grained-access-control golang grpc kubernetes least-privilege permission permissions rbac rebac security zanzibar

Last synced: 08 May 2025

https://github.com/permitio/opal

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

authorization cedar hacktoberfest microservices opa opal open-policy-agent openfga policy policy-as-code pubsub realtime websocket

Last synced: 05 Sep 2025

https://github.com/Permify/permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.

abac access-control acl authorization ciam cloud-native distributed fga fine-grained-access-control golang grpc kubernetes least-privilege permission permissions rbac rebac security zanzibar

Last synced: 24 Mar 2025

https://github.com/unkeyed/unkey

Open source API management platform

api api-keys authentication authorization gateway hacktoberfest open-source rate-limiter

Last synced: 15 Dec 2025

https://github.com/build-trust/ockam

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

authentication authorization credentials distributed-systems e2ee encrypted-connections encrypted-messages encryption end-to-end-encryption identity kafka key-management messaging rust security snowflake trust zero-trust

Last synced: 11 Dec 2025

https://github.com/google/santa

A binary authorization and monitoring system for macOS

allowlist authorization blocklist endpoint-security macos santa security system-extension

Last synced: 16 Dec 2025

https://github.com/zoontek/react-native-permissions

An unified permissions API for React Native on iOS, Android and Windows.

authorization permissions react react-native

Last synced: 13 May 2025

https://github.com/openfga/openfga

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

abac authorization entitlements fga fine-grained-access-control fine-grained-authorization go golang hacktoberfest openfga pbac permissions rbac rebac security zanzibar

Last synced: 03 Oct 2025

https://github.com/simov/grant

OAuth Proxy

authentication authorization aws aws-lambda azure express gcp hapi javascript js koa lambda middleware node nodejs oauth oauth2 server serverless vercel

Last synced: 06 May 2025

https://github.com/tadata-org/fastapi_mcp

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

ai authentication authorization claude cursor fastapi llm mcp mcp-server mcp-servers modelcontextprotocol openapi windsurf

Last synced: 14 May 2025

https://github.com/marmotedu/iam

企业级的 Go 语言实战项目：认证和授权系统（带配套课程）

application authentication authorization gin go golang gorm iam project

Last synced: 13 May 2025

https://github.com/thephpleague/oauth2-client

Easy integration with OAuth 2.0 service providers.

authentication authorization oauth oauth2 php sso

Last synced: 18 Jun 2025

https://github.com/cerbos/cerbos

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

access-control authorization go golang kubernetes policy security

Last synced: 05 Apr 2025

https://github.com/osohq/oso

Deprecated: See README

abac access-control authorization authorization-framework go java logic-programming nodejs policy-engine python rbac rbac-authorization rbac-roles ruby rust security

Last synced: 14 May 2025

https://github.com/josephsilber/bouncer

Laravel Eloquent roles and abilities.

acl auth authorization eloquent laravel multitenancy permissions php roles security

Last synced: 14 May 2025

https://github.com/JosephSilber/bouncer

Laravel Eloquent roles and abilities.

acl auth authorization eloquent laravel multitenancy permissions php roles security

Last synced: 13 Mar 2025

https://github.com/panva/node-oidc-provider

OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

authorization authorization-server connect oauth2 oidc openid openid-connect openid-provider provider server

Last synced: 14 May 2025

https://github.com/oauthlib/oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

authentication authorization identity jwt-authentication jwt-bearer-tokens library oauth oauth1 oauth2 oidc oidc-provider openid-connect python python-2 python-3 python2 python3 token-based-authentication

Last synced: 19 Oct 2025

https://github.com/casbin/node-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

abac access-control acl auth authorization authz casbin javascript js node nodejs permission permissions rbac

Last synced: 03 Jan 2026

https://github.com/zenstackhq/zenstack

Fullstack TypeScript toolkit that enhances Prisma ORM with flexible Authorization layer for RBAC/ABAC/PBAC/ReBAC, offering auto-generated type-safe APIs and frontend hooks.

access-control acl api auth authorization authz fullstack javascript nextjs node nodejs openapi orm permission permissions prisma rbac rls saas trpc

Last synced: 12 May 2025

https://github.com/pac4j/pac4j

Security engine for Java (authentication, authorization, multi frameworks): OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...

authentication authorization cas dropwizard j2e java jax-rs jwt ldap oauth openid-connect play-framework ratpack saml security shiro sparkjava spring-mvc spring-security vertx

Last synced: 14 May 2025

https://github.com/casbin/jcasbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

abac access-control acl auth authorization authz casbin java permission rbac xacml

Last synced: 02 Jan 2026

https://github.com/ory/fosite

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

auth authentication authorization golang hacktoberfest library oauth oauth2 openid-connect sdk security

Last synced: 12 May 2025

https://github.com/onury/accesscontrol

Role and Attribute based Access Control for Node.js

abac access-control acl attributes authorization nodejs permissions rbac roles security

Last synced: 09 Apr 2025

https://github.com/santigarcor/laratrust

Handle roles and permissions in your Laravel application

acl admin-panel authorization laratrust laravel multiuser permissions php rbac roles secure teams

Last synced: 15 May 2025

https://github.com/jwt-dotnet/jwt

Jwt.Net, a JWT (JSON Web Token) implementation for .NET

authorization c-sharp json jwt

Last synced: 17 Dec 2025

https://github.com/panique/huge

Simple user-authentication solution, embedded into a small framework.

auth authentication authorization framework password password-hash php user-auth

Last synced: 16 Dec 2025

https://github.com/ruby-oauth/oauth2

A Ruby wrapper for OAuth 2.0 protocol, including OIDC

authentication authorization oauth2 oauth2-client oidc oidc-client security

Last synced: 15 Aug 2025

https://github.com/supabase/supabase-py

Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.

auth authentication authorization community data-science databases django fastapi flask good-first-issue machine-learning postgres postgresql python supabase

Last synced: 12 May 2025

https://github.com/xuxueli/xxl-sso

A distributed single-sign-on framework.（单点登录框架XXL-SSO）

authentication authorization distributed java spring-boot sso xxl-sso

Last synced: 15 May 2025

https://github.com/dfunckt/django-rules

Awesome Django authorization, without the database

authorization django permissions predicates python rules

Last synced: 14 May 2025

https://github.com/enkodellc/blazorboilerplate

Blazor Boilerplate / Starter Template with MudBlazor

authentication authorization blazor blazor-boilerplate boilerplate identiyserver4 material-design starter-kit starter-template webassembly

Last synced: 15 May 2025

https://github.com/supabase/auth

A JWT based API for managing users and issuing JWT tokens

auth authentication authorization client-auth go jwt supabase

Last synced: 29 Dec 2025

https://github.com/callicoder/spring-security-react-ant-design-polls-app

Full Stack Polls App built using Spring Boot, Spring Security, JWT, React, and Ant Design

ant-design antd authentication authorization database jwt login mysql react react-router react-router-v4 reactjs spring-boot spring-mvc spring-security spring-security-jwt spring-security-react spring-security-tutorial

Last synced: 15 May 2025

https://github.com/authorizerdev/authorizer

Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.

2fa auth authentication authorization docker golang graphdb graphql hacktoberfest magic-link microservice nosql oauth2 role-based-access-control security social-logins sql typescript user-privileges

Last synced: 25 Apr 2025

https://github.com/greenpau/caddy-security

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

access-control acl auth authentication authorization caddy-plugin caddy2 jwt ldap oauth2 openid paseto paseto-tokens saml secdevops secops security sso webauthn websecurity

Last synced: 14 May 2025

https://github.com/ueberauth/ueberauth

An Elixir Authentication System for Plug-based Web Applications

authentication authorization elixir oauth oauth2 ueberauth

Last synced: 12 May 2025

https://github.com/pow-auth/pow

Robust, modular, and extendable user authentication system

authentication authorization elixir phoenix user-management

Last synced: 14 May 2025

https://github.com/danschultzer/pow

Robust, modular, and extendable user authentication system

authentication authorization elixir phoenix user-management

Last synced: 15 Mar 2025

https://github.com/fairwindsops/rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

authorization cluster crd fairwinds-official hacktoberfest kubernetes rbac

Last synced: 11 Apr 2025

https://github.com/FairwindsOps/rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

authorization cluster crd fairwinds-official hacktoberfest kubernetes rbac

Last synced: 03 Apr 2025

https://github.com/cartalyst/sentinel

A framework agnostic authentication & authorization system.

agnostic auth authentication authorization cartalyst laravel permissions php roles security sentinel

Last synced: 12 May 2025

https://github.com/casbin/pycasbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

abac access-control acl auth authorization authz casbin permission pycasbin python rbac

Last synced: 28 Dec 2025

https://github.com/reactiveops/rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

authorization cluster crd fairwinds-official hacktoberfest kubernetes rbac

Last synced: 05 Mar 2025

https://github.com/palkan/action_policy

Authorization framework for Ruby/Rails applications

authorization hacktoberfest rails ruby

Last synced: 13 May 2025

https://github.com/cyberark/kubiscan

A tool to scan Kubernetes cluster for risky permissions

authorization conjbot kubernetes rbac

Last synced: 14 May 2025

https://github.com/cyberark/KubiScan

A tool to scan Kubernetes cluster for risky permissions

authorization conjbot kubernetes rbac

Last synced: 23 Mar 2025

https://github.com/corneliusweig/rakkess

Review Access - kubectl plugin to show an access matrix for k8s server resources

authorization k8s kubectl kubectl-plugin kubectl-plugins kubernetes rbac rbac-management

Last synced: 16 May 2025

https://github.com/FredericHeem/starhackit

StarHackIt: React/Native/Node fullstack starter kit with authentication and authorisation, data backed by SQL, the infrastructure deployed with GruCloud

authentication authorization docker fullstack iac infrastructure-as-code kubernetes mobx sql

Last synced: 15 Mar 2025

https://github.com/fredericheem/starhackit

StarHackIt: React/Native/Node fullstack starter kit with authentication and authorisation, data backed by SQL, the infrastructure deployed with GruCloud

authentication authorization docker fullstack iac infrastructure-as-code kubernetes mobx sql

Last synced: 15 May 2025

https://github.com/php-casbin/php-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

abac access-control acl auth authorization framework middlewares permission php rbac roles security

Last synced: 13 May 2025

https://github.com/warrant-dev/warrant

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

abac access-control acl authorization authz ciam entitlements fgac fine-grained-access-control fine-grained-authorization golang iam permissions pricing-tiers rbac rebac relationship-based-access-control role-based-access-control zanzibar zero-trust

Last synced: 14 May 2025

https://github.com/casbin/casbin.net

An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)

abac access-control acl auth authorization authz casbin dotnet permission rbac

Last synced: 13 May 2025

https://github.com/php-casbin/php-casbin?utm_source=gold_browser_extension

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

abac access-control acl auth authorization framework middlewares permission php rbac roles security

Last synced: 25 Mar 2025

https://github.com/nathanl/authority

*CURRENTLY UNMAINTAINED*. Authority helps you authorize actions in your Rails app. It's ORM-neutral and has very little fancy syntax; just group your models under one or more Authorizer classes and write plain Ruby methods on them.

authorization ruby

Last synced: 25 Mar 2025

https://github.com/the-road-to-graphql/fullstack-apollo-express-postgresql-boilerplate

💥 A sophisticated GraphQL with Apollo, Express and PostgreSQL boilerplate project.

apollo-client apollo-server apollo-server-express apollographql authentication authorization boilerplate fullstack postgres postgresql postgresql-boilerplate postgresql-database react react-apollo react-apollo-graphql reactjs starter-kit

Last synced: 16 May 2025

https://github.com/aserto-dev/topaz

Cloud-native authorization for modern applications and APIs

abac access-control api authorization cloud-native golang opa rbac rebac security zanzibar

Last synced: 11 Apr 2025

https://github.com/casbin-net/Casbin.NET

An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)

abac access-control acl auth authorization authz casbin dotnet permission rbac

Last synced: 05 Apr 2025

https://github.com/casbin/Casbin.NET

An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)

abac access-control acl auth authorization authz casbin dotnet permission rbac

Last synced: 24 Mar 2025

https://github.com/mrash/fwknop

Single Packet Authorization > Port Knocking

authentication authorization firewall hmac port-knocker spa zero-trust

Last synced: 15 May 2025

https://github.com/delight-im/php-auth

Authentication for PHP. Simple, lightweight and secure.

auth authentication authorization login php registration security

Last synced: 13 Apr 2025

https://github.com/delight-im/PHP-Auth

Authentication for PHP. Simple, lightweight and secure.

auth authentication authorization login php registration security

Last synced: 14 Mar 2025

https://github.com/liggitt/audit2rbac

Autogenerate RBAC policies based on Kubernetes audit logs

audit authorization kubernetes openshift rbac

Last synced: 12 Apr 2025

https://github.com/tower1229/vue-access-control

:gem: Frontend access control framework based Vue

access-control access-management authorization vue vue-router

Last synced: 15 May 2025

https://github.com/tower1229/Vue-Access-Control

:gem: Frontend access control framework based Vue

access-control access-management authorization vue vue-router

Last synced: 24 Mar 2025

https://github.com/authomatic/authomatic

Simple yet powerful authorization / authentication client library for Python web applications.

authentication authorization oauth-client oauth2-client openid-client python

Last synced: 17 Dec 2025

https://github.com/akto-api-security/akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

api-discovery api-security api-security-testing api-testing authentication authorization devsecops devsecops-pipeline hacktoberfest hacktoberfest2023 idor owasp-top-10 security security-testing sensitive-data-exposure threat-detection

Last synced: 05 Jan 2026

https://github.com/the-road-to-react-with-firebase/react-firebase-authentication

🔥 Boilerplate Project for Authentication with Firebase in React.

authentication authorization create-react-app firebase firebase-auth firebase-authentication firebase-database firebase-db protected-routes react react-router-4 react-router-v4 react-router4 reactjs

Last synced: 24 Oct 2025

https://github.com/auth0/auth0.js

Auth0 headless browser sdk

auth0 authentication authorization browser dx-sdk javascript jwt login oauth2 sdk

Last synced: 13 May 2025

https://github.com/Quitten/Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

application-security authorization authorization-enforcement burp-plugin burpsuite jython

Last synced: 02 Apr 2025

https://github.com/alcideio/rbac-tool

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

access-control acl authorization cluster k8s-cluster krew-plugin kubectl kubectl-plugin kubernetes kubernetes-api kubernetes-rbac least-privilege permissions podsecuritypolicies rapid7 rbac security who-can whoami

Last synced: 14 May 2025

https://github.com/quitten/autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

application-security authorization authorization-enforcement burp-plugin burpsuite jython

Last synced: 02 Apr 2025

https://github.com/seeden/rbac

Hierarchical Role Based Access Control for NodeJS

auth authentication authorization javascript permissions rbac role role-based-access-control

Last synced: 15 May 2025

https://github.com/yezz123/authx

Ready-to-use and customizable Authentications and Oauth2 management for FastAPI ✨

authentification authorization backend fastapi jwt pydantic python starlette

Last synced: 04 Jan 2026

https://github.com/casbin/casbin-rs

An authorization library that supports access control models like ACL, RBAC, ABAC in Rust.

abac access-control acl auth authorization authz casbin permission rbac rust

Last synced: 13 May 2025

https://github.com/athenz/athenz

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

access-token authorization cloud containers dynamic-infrastructures rbac role-based-access-control service-identity spiffe tls

Last synced: 12 May 2025

https://github.com/AthenZ/athenz

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

access-token authorization cloud containers dynamic-infrastructures rbac role-based-access-control service-identity spiffe tls