Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Authorization

Authorization is the process of granting or denying permissions based on rules. This should not be confused with authentication, which is the act of verifying someone’s identitiy.

https://github.com/node-casbin/koa-authz

koa-authz is an authorization middleware for Koa2 based on Casbin

authorization casbin koa2 koajs middleware node-casbin

Last synced: 12 Apr 2025

https://github.com/embesozzi/keycloak-openfga-event-publisher

Keycloak OpenFGA Event Publisher enables event integration between Keycloak and OpenFGA for Fine-Grained Authorization (FGA) using the OpenFGA SDK.

authorization fine-grained-access-control keycloak keycloak-spi openfga openfga-client zanzibar

Last synced: 25 Oct 2025

https://github.com/pgorecki/django-cancan

🔓Authorization library for Django

authorization django permissions

Last synced: 08 Nov 2025

https://github.com/descope/descope-dotnet

.NET library used to integrate with Descope

authentication authorization descope dotnet dotnet-sdk sdk

Last synced: 20 Feb 2026

https://github.com/aurorawebsoftware/aauth

Hierarchical Rol-Permission Based Laravel Auth Package with Limitless Hierarchical Level of Organizations

abac access-control access-management auth authentication authorization laravel laravel-framework laravel-package permissions php php8

Last synced: 05 Feb 2026

https://github.com/WuliRuler/AutorizePro

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

ai authorization bounty-hunters bounty-hunting-tools broken-access-control bugbounty burp-extensions burpsuite idor idor-vulnerability llm pentest-tool pentesting sdlc-tools security-tools unauthorized unauthorized-access-tool vulnerability-detection

Last synced: 01 Apr 2025

https://github.com/Neoteroi/GuardPost

Classes to handle authentication and authorization for async Python application.

asyncio authentication authorization strategy synchronous

Last synced: 14 Oct 2025

https://github.com/bezkoder/redux-refresh-token-axios

Build Redux Refresh Token with Axios Interceptors and JWT example - React Redux for JWT Authentication & Authorization

authentication authorization jwt jwt-auth jwt-authentication react react-redux reactjs redux refresh-token token-based-authentication

Last synced: 06 Oct 2025

https://github.com/openfga/dotnet-sdk

OpenFGA SDK for .NET - https://www.nuget.org/packages/OpenFga.Sdk

access-control authorization fga fine-grained-authorization openfga security zanzibar

Last synced: 18 Apr 2025

https://github.com/Hawxy/Fga.Net

OpenFGA & Auth0 FGA for ASP.NET Core + Worker Services

aspnetcore auth auth0 authentication authorization fga okta-authentication openfga

Last synced: 24 Nov 2025

https://github.com/awes-io/auth

🔑 Laravel Authentication package with built-in two-factor (Authy) and social authentication (Socialite).

2fa auth authentication authorisation authorization authy laravel registration socialite

Last synced: 30 Oct 2025

https://github.com/openfga/js-sdk

OpenFGA SDK for node.js and JavaScript - https://www.npmjs.com/package/@openfga/sdk

access-control authorization fga fine-grained-authorization openfga security zanzibar

Last synced: 16 Apr 2025

https://github.com/kuadrant/kuadrant-operator

The Operator to install and manage the lifecycle of the Kuadrant components deployments.

authentication authorization k8s-services kubernetes rate-limiting

Last synced: 07 Apr 2025

https://github.com/openfga/python-sdk

OpenFGA SDK for Python 3 - https://pypi.org/project/openfga-sdk/

access-control authorization fga fine-grained-authorization hacktoberfest openfga security zanzibar

Last synced: 09 Apr 2025

https://github.com/hawxy/fga.net

OpenFGA & Auth0 FGA for ASP.NET Core + Worker Services

aspnetcore auth auth0 authentication authorization fga okta-authentication openfga

Last synced: 06 Apr 2025

https://github.com/permitio/permit-node

Node.js SDK for Permit.io: Plug & Play Application Level Authorization

attribute-based-access-control authorization javascript permissions rbac role-based-access-control sdk typescript

Last synced: 11 May 2025

https://github.com/h0ru5/apo

A.P.O. - "Authorized Personnel Only" is a minimalist OAuth IAM written in Go

authorization go golang htpasswd iam jwt oauth2 rest-api

Last synced: 02 Mar 2026

https://github.com/mblarsen/browser-acl

Simple acceess control (ACL) library for the browser inspired by Laravel's guards and policies.

acl authorization browser user-management users ux

Last synced: 26 Jan 2026

https://github.com/Ahoo-Wang/CoSec

RBAC-based And Policy-based Multi-Tenant Reactive Security Framework | 基于 RBAC 和策略的多租户响应式安全框架

authentication authorization cloud-native gateway identity java jwt kotlin microservice multi-tenant oauth2 policy project-reactor rbac reactive redis security spring-boot spring-cloud spring-cloud-gateway

Last synced: 02 Apr 2025

https://github.com/ahoo-wang/cosec

RBAC-based And Policy-based Multi-Tenant Reactive Security Framework | 基于 RBAC 和策略的多租户响应式安全框架

authentication authorization cloud-native gateway identity java jwt kotlin microservice multi-tenant oauth2 policy project-reactor rbac reactive redis security spring-boot spring-cloud spring-cloud-gateway

Last synced: 01 Apr 2026

https://github.com/jchristn/gatekeeper

Lightweight library in C# for implementing roles-based access control (RBAC). With Gatekeeper, you can define users, roles, resources, and permissions, and authorize requests.

api authentication authorization gatekeeper nuget rbac rbac-management roles-management roles-permission-management

Last synced: 24 Apr 2025

https://github.com/tx7do/kratos-casbin

kratos casbin middleware

access-control acl authorization casbin kratos rbac

Last synced: 10 Apr 2025

https://github.com/maacpiash/minimal-api-jwt-auth

🔐 🛂 ASP.NET (versions 8 and 9) minimal API with JWT authentication and authorization

asp-net asp-net-core aspnet aspnetcore auth authentication authorization jwt jwt-authentication minimal-api minimal-apis minimalapi minimalapis

Last synced: 15 Apr 2025

https://github.com/rscarrera27/Sanic-JWT-Extended

⚡️An open source Sanic extension that provides "extended" JWT support

authentication authorization jwt jwt-authentication sanic

Last synced: 05 May 2025

https://github.com/rscarrera27/sanic-jwt-extended

⚡️An open source Sanic extension that provides "extended" JWT support

authentication authorization jwt jwt-authentication sanic

Last synced: 21 Mar 2025

https://github.com/bezkoder/angular-14-jwt-auth

Angular 14 JWT Authentication & Authorization with Web API and HttpOnly Cookie - Token Based Auth, Router, Forms, HttpClient, BootstrapBootstrap

angular angular-14 angular14 auth authentication authorization bootstrap bootstrap-4 bootstrap4 httponly-cookie jwt jwt-auth jwt-authentication jwt-token login registration token-authorization token-based-authentication

Last synced: 10 Aug 2025

https://github.com/idlesign/django-sitegate

Reusable application for Django to ease sign up & sign in processes

authentication authorization django python signin signup

Last synced: 30 Apr 2025

https://github.com/pycasbin/django-authorization

Per object permissions for Django, see example at: https://github.com/pycasbin/django-authorization-example

access-control authorization casbin django django-framework middleware python rbac

Last synced: 26 Oct 2025

https://github.com/eclipse-biscuit/biscuit-java

Java implementation of the Biscuit authentication and authorization token

authorization

Last synced: 04 Jan 2026

https://github.com/vincezk/authorization

An Object Oriented Authorization Framework for Node.js

acl authorization authorization-profiles identity nodejs passport security

Last synced: 29 Jun 2025

https://github.com/intuit/identity-authz-apl

Attribute-based access control (ABAC), also known as policy-based access control, defines an access control paradigm whereby access rights are granted to users through the use of policies which reason over data in attributes. The policies can use any type of attributes (user attributes, resource attributes, object, environment attributes etc.). Read more here - https://en.wikipedia.org/wiki/Attribute-based_access_control ABAC Policy Language is used by ABAC to author policies. A policy consists of rules, which have "when" conditions and "then" actions. Policies are executed in a bounded time, goaled to reach a decision as quickly as possible in deterministic, fast and reliable way. Further light-weight execution consumes minimal resources.

authorization authz

Last synced: 23 Jul 2025

https://github.com/summerwind/opa-nginx-rbac

A proof of concept for RBAC on nginx with Open Policy Agent

authorization nginx openpolicyagent

Last synced: 04 Apr 2025

https://github.com/innovatorved/authenticationsystem

A Simple API based Authentication System Implemented in nodejs and a Express template for creating Backend RestAPI

auth authentication authorization cookie-parser express innovatorved jwt jwt-authentication mongoose nodejs rest-api

Last synced: 17 Mar 2025

https://github.com/intelygenz/igzlocation

CLLocationManager Swift wrapper with multiple closure handlers and delegates allowed, notifications, sequential geofencing, self-authorization and, of course, everything is testable. #InCodeWeTrust

authorization carthage cllocationmanager cllocationmanager-swift-wrapper closure corelocation delegates geofencing handlers notifications permissions swift swift-3 swift-framework swift-library swift3 testability

Last synced: 04 Oct 2025

https://github.com/permitio/pdp

Permit Policy Decision Point service. High-performance, policy-driven authorization for your apps and service.

authorization microservice opa opal open-policy-agent permit permitio policy policy-as-code python realtime rust websocket

Last synced: 13 May 2026

https://github.com/casbin/k8s-authz

Kubernetes (k8s) RBAC & ABAC authorization middleware based on Casbin

abac acl auth authorization authz casbin cloud-native docker k8s kubernetes middleware plugin rbac

Last synced: 22 Apr 2025

https://github.com/joaomdmoura/keeper

Flexible and Simple authentication solution for Phoenix

authentication authorization elixir keeper phoenix

Last synced: 22 Apr 2025

https://github.com/permify/targe

Open-source CLI for managing IAM (Identity and Access Management) operations with AI assistance.

authorization aws awscli azure cloud gcp iam security

Last synced: 14 Jun 2025

https://github.com/klemola/extending-tea

Example of an extension to The Elm Architecture

authorization elm elm-architecture example pattern

Last synced: 12 Jul 2025

https://github.com/azutoolkit/authly

OAuth2 Provider Library - Authly is an OAuth2 Library for creating Authorization Servers that follows OAuth2 authorization mechanisms.

authorization crystal crystal-lang oauth2 provider shard

Last synced: 04 Jul 2025

https://github.com/kylepw/spotify-api-auth-examples

Examples of Spotify API's authentication flows using Python/Flask.

auth authentication authorization flask javascript oauth oauth2 python spotify spotify-api spotify-web-api

Last synced: 09 Apr 2025

https://github.com/kzemek/macaroons

An Erlang Macaroons library compatible with libmacaroons

authorization erlang libmacaroons macaroons tokens

Last synced: 04 Nov 2025

https://github.com/hashimthepassionate/django-for-everyone

Welcome to the ultimate Django repository! Whether you're a beginner or seasoned developer, here you'll find everything to master Django. Dive into tutorials, projects, and join a vibrant community to stay updated with the latest in Django development. Start building powerful web applications today!

authentication authorization django django-rest-framework form models oops-in-python orm templates validation

Last synced: 11 Apr 2025

https://github.com/egor-s/pocketbase-sveltekit-static

PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image (from 59 MB) for deploying.

authorization pocketbase sveltekit

Last synced: 14 Jul 2025

https://github.com/DeluxeOwl/kala-go

An authorization framework written in Go based on Google's Zanzibar.

authorization go graph react zanzibar

Last synced: 22 Jul 2025

https://github.com/chrissainty/rolebasedauthwithblazor

Companion code sample for my blog post - Configuring Role-based Authorization with client-side Blazor

aspnetcore aspnetcorewebapi authorization blazor blazor-client

Last synced: 01 May 2025

https://github.com/aajtodd/riam

AWS IAM inspired policy engine in Rust

authorization iam permissions rust

Last synced: 11 Mar 2026

https://github.com/gnur/beyondauth

a traefik / nginx companion to create an identity aware proxy like beyondcorp

authorization beyondcorp identity openid-connect traefik

Last synced: 30 Jan 2026

https://github.com/bezkoder/vue-axios-refresh-token

Vue Refresh Token with Axios Interceptors and JWT example - Vuex, Vue Router

authentication authorization axios jwt jwt-auth jwt-authentication refresh-token token-based-authentication vue vuejs vuejs2 vuex

Last synced: 15 Oct 2025

https://github.com/bezkoder/angular-17-refresh-token

Angular 17 JWT refresh token example & Interceptor - Handle token expiration in Angular 17 - Refresh token before expiration example

angular angular-17 angular17 authentication authorization json-web-token jsonwebtoken jwt jwt-auth jwt-authentication jwt-authorization jwt-refresh-token jwt-token jwt-tokens refresh-token refresh-tokens

Last synced: 14 Apr 2025

https://github.com/heremaps/here-aaa-java-sdk

HERE Authentication, Authorization, and Accounting Java Client library.

authentication authorization oauth-client sdk

Last synced: 06 Sep 2025

https://github.com/ianwalter/bouncer

Token-based authorization and session management for Phoenix (Elixir)

authorization phoenix

Last synced: 27 Apr 2025

https://github.com/utkarsh867/typegraphql-authchecker

Use custom rules in TypeGraphQL Authorized()

authorization graphql

Last synced: 03 Apr 2025

https://github.com/innovatorved/authneu

NextJs | Prisma | MongoDB based ready to use Authentication Template

authentication authorization innovatorved javascript mongodb nextjs nextjs-auth prisma reactjs

Last synced: 20 Jun 2025

https://github.com/wednesday-solutions/node-mongo-express

An enterprise Mongo-Express REST API built using nodejs showcasing - Testing Strategy, mongoDB sharding, models, a REST API Interface, support for Redis, aggregation queries, aggregation caching, circuit-breakers, slack integration, RBAC, rate limited APIs and multi-container queues and schedulers.

authorization circuitbreaker express mongodb mongoose node-api node-i18n node-mongo-api node-mongo-express node-mongo-express-api nodejs oauth2 rbac rest-api sharding

Last synced: 13 Apr 2025

https://github.com/Egor-S/pocketbase-sveltekit-static

PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image (from 59 MB) for deploying.

authorization pocketbase sveltekit

Last synced: 07 May 2025

https://github.com/styrainc/enterprise-opa

Enterprise OPA is a distribution of Open Policy Agent with enterprise-grade features to get OPA into production quickly, easily, and inexpensively.

authorization opa open-policy-agent performance policy styra

Last synced: 05 Sep 2025

https://github.com/dapphub/ds-guard

Whitelist DSAuthority for use with DSAuth

authorization dappsys ds-auth ethereum solidity

Last synced: 13 Apr 2025

https://github.com/idlesign/django-oauthost

Reusable application for Django, introducing OAuth2 server functionality.

authentication authorization django oauth2 python

Last synced: 01 Sep 2025

https://github.com/go-authgate/authgate

A lightweight OAuth 2.0 Authorization Server supporting Device Authorization Grant (RFC 8628) and Authorization Code Flow with PKCE (RFC 6749 + RFC 7636), developed using Go and the Gin framework.

authorization authorization-code-grant device oauth2 oauth2-server

Last synced: 08 Mar 2026

https://github.com/ojkelly/bunjil

A GraphQL bastion server with schema merging, authentication and authorization with Policy Based Access Control

authentication authorization bastion graphql graphql-server koa prisma public-server wahn

Last synced: 05 Oct 2025

https://github.com/jferrater/opa-data-filter-spring-boot-starter

Spring Boot library for enforcing authorization on Spring Data JPA and MongoDB by filtering data using the Open Policy Agent (OPA) partial evaluation feature.

authorization cloud-native datafilter java java-library mongodb opa opa-data-filter openpolicyagent spring-data-jpa spring-data-mongo springboot sqldb

Last synced: 11 Sep 2025

https://github.com/ankitsharma-007/movieapp

A full-stack web application for managing movie data, created with ASP.NET Core and Angular, using SQL Server as a database.

angular angular-material ankit-sharma asp-net-core authentication authorization bootstrap csharp entity-framework-core form-validation jwt repository-pattern sql-server typescript web-api

Last synced: 16 Apr 2025

https://github.com/extrabb/open-psd2

An open source framework for using banking API's built for PSD2 regulation.

abn api authorization bank banking finance help-wanted http ing open psd2

Last synced: 17 Oct 2025

https://github.com/jenkinsci/folder-auth-plugin

Authorization Plugin for Jenkins that works on folders

authorization folder gsoc-2019 jenkins security

Last synced: 03 Apr 2025

https://github.com/cesurapp/pd-user

Simple user management system for Symfony 5.

authorization php7 symfony symfony4 user-management

Last synced: 15 Apr 2025

https://github.com/zhangwinning/simple_login

node-express|实现登录验证和授权

authentication authorization node-express passport session

Last synced: 30 Apr 2025

Authorization Awesome Lists
awesome-auth 94 awesome-authorization 54 awesome-spicedb 67 awesome-openid-connect 168 awesome-oauth-oidc 163 cybersecurity-auth 126 awesome-personal-data-stores 32 awesome-authorization 92 awesome-auth0 76
Authorization Categories
Security Concerns 128 Authz In Practice 127 Resources 89 Specification 78 Blog Posts 64 Useful Articles & Tutorials 56 Authorization 48 OpenID Providers (OP) 43 Authorization Development 34 Article 30 Relying Parties (RP) Libraries 29 Policy Engines & Frameworks 28 Authentication 25 `Authentication` 24 Client Library 24 Developer Ecosystem 24 Clients 22 `Authentication Development` 20 Standards & Specifications 18 Official Resources 17