Authentication projects on GitHub

1. 1
   #1 · open-webui/open-webui

   open-webui

   Open WebUI is a self-hosted AI platform that gives you a chat-style web interface for Ollama and any OpenAI-compatible API, built to run entirely offline if you want.

   155.9K
2. 2
   #2 · hoppscotch/hoppscotch

   hoppscotch

   Hoppscotch is an open-source API development ecosystem for building, testing and debugging REST, GraphQL, WebSocket, MQTT, Server-Sent Events and Socket.IO APIs, positioned as an open alternative to Postman or Insomnia.

   80.6K
3. 3
   #3 · strapi/strapi

   strapi

   Strapi is the leading open-source headless CMS: 100% JavaScript/TypeScript, it lets developers build content APIs fast while giving content creators a friendly editing interface.

   73.3K

4. 4

   vaultwarden

   69.2Kdani-garcia/vaultwarden · Rust

   Vaultwarden is an unofficial, Rust-written server that implements the Bitwarden Client API, so you can run your own password-manager backend instead of using Bitwarden's official hosted service.

   • password-manager
   • selfhosted
   • self-hosted-ai
   • vps
5. 5

   pocketbase

   61.5Kpocketbase/pocketbase · Go

   PocketBase is an open source backend written in Go that packs an embedded SQLite database, realtime subscriptions, file and user management, an Admin dashboard UI, and a REST-ish API all into a single file.

   • realtime
   • admin-dashboard
   • embedded
   • golang
6. 6

   appwrite

   57.7Kappwrite/appwrite · TypeScript

   Appwrite is an open-source, all-in-one backend platform for building web, mobile, and AI apps, bundling authentication, databases, storage, serverless functions, messaging, realtime, and web hosting in one place.

   • backend-as-a-service
   • hosting
   • selfhosted
   • supabase
7. 7

   requests

   54.5Kpsf/requests · Python

   It is a simple, yet elegant, HTTP library for Python that lets you send HTTP/1.1 requests extremely easily.

   • rest-client
   • sessions
   • client
   • ssl
8. 8

   gogs

   47.9Kgogs/gogs · Go

   Gogs is a self-hosted Git service that lets you run your own GitHub-like platform on your own server, written in Go.

   • sqlite3
   • ldap
   • wiki
   • webhooks
9. 9

   full-stack-fastapi-template

   46Kfastapi/full-stack-fastapi-template · TypeScript

   A full-stack web application template that bundles a FastAPI Python backend with a React/TypeScript frontend, a PostgreSQL database, and Docker Compose, giving you authentication, an admin dashboard, and deployment config already wired up.

   • tanstack-router
   • shadcn-ui
   • openapi
   • boilerplate
10. 10

    LibreChat

    45.8KLibreChat-AI/LibreChat · TypeScript

    LibreChat is a self-hosted AI chat platform that unifies all major AI providers (OpenAI, Anthropic, Google, AWS Bedrock, Azure, Mistral, OpenRouter and more) in a single ChatGPT-like interface, with Agents, MCP support, Code Interpreter and Artifacts built in.

    • gpt-5
    • saml
    • ldap
    • vision
11. 11

    reactive-resume

    44.4Kreactive-resume/reactive-resume · TypeScript

    Reactive Resume is a free, open-source resume builder that lets you create, update, and share your resume with live preview and multiple templates.

    • resume-builder
    • 2fa
    • orm
    • dark-mode
12. 12

    kong

    44.3KKong/kong · Lua

    Kong is a cloud-native API gateway that also acts as an AI and MCP gateway, handling routing, load balancing, authentication, and traffic management for microservices and LLM/agentic traffic.

    • api-management
    • llm-ops
    • apis
    • mcp-gateway
13. 13

    istio

    38.4Kistio/istio · Go

    Istio is an open-source service mesh that layers transparently onto existing distributed applications, giving you a uniform way to secure, connect, and monitor microservices with few or no code changes.

    • api-management
    • consul
    • resiliency
    • service-mesh
14. 14

    keycloak

    37.4Kkeycloak/keycloak · Java

    Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

    • identity-management
    • identity
    • saml
    • authorization
15. 15

    vault

    36.4Khashicorp/vault · Go

    Vault is a tool for securely accessing secrets such as API keys, passwords, and certificates, giving you a unified interface with tight access control and detailed audit logging.

    • secret-management
    • secrets
    • key-value
    • audit-log
16. 16

    filebrowser

    35.9Kfilebrowser/filebrowser · Go

    File Browser is a self-hosted file manager you point at a directory on your server, giving you a web interface to upload, delete, preview, and edit files inside it.

    • file-manager
    • file-sharing
    • jwt
    • material-design
17. 17

    hackathon-starter

    35.3Ksahat/hackathon-starter · JavaScript

    Hackathon Starter is a boilerplate for Node.js web applications that bundles login, OAuth, and dozens of API integrations so you don't have to set them up from scratch during a hackathon.

    • csrf
    • hackathon
    • passkeys
    • starter-kit
18. 18

    rustfs

    35Krustfs/rustfs · Rust

    An open-source, high-performance distributed object storage system written in Rust. It speaks the S3 API, is optimized for data lakes, AI and big data workloads, and supports migration and coexistence with MinIO and Ceph.

    • amazon-s3
    • multi-cloud
    • bigdata
    • storage-engine
19. 19

    nginx-proxy-manager

    34.4KNginxProxyManager/nginx-proxy-manager · TypeScript

    Nginx Proxy Manager is a pre-built Docker container that gives you a web admin interface to manage Nginx reverse proxy hosts, including free SSL certificates, without needing to know Nginx configuration.

    • ssl-certificate
    • ssl
    • proxy-server
    • nginx
20. 20

    WeKnora

    34.4KTencent/WeKnora · Go

    WeKnora is an open-source, self-hosted knowledge platform that turns raw documents into a queryable RAG knowledge base, an autonomous ReAct agent, and a self-maintaining Wiki with an interactive knowledge graph.

    • reranking
    • notion
    • question-answering
    • multi-tenant
21. 21

    vue-vben-admin

    33.6Kvbenjs/vue-vben-admin · TypeScript

    Vue Vben Admin is a free, open-source middle and back-end admin panel template built with Vue3, Vite, TypeScript, and a monorepo structure, meant to be used out-of-the-box or as a learning reference.

    • element-plus
    • ant-design
    • admin-template
    • vue-router
22. 22

    WxJava

    33.2Kbinarywang/WxJava · Java

    WxJava is an open-source Java SDK for WeChat backend development, covering WeChat Pay, the Open Platform, Official Accounts, WeCom (Enterprise WeChat), Channels, and Mini Programs.

    • miniprogram
    • weixin
    • api-client
    • payments
23. 23

    awesome-php

    32.8Kziadoz/awesome-php

    A curated list of amazingly awesome PHP libraries, resources, frameworks and tools, organized by category.

    • php-framework
    • queue
    • php-library
    • e-commerce
24. 24

    TradingAgents-CN

    32.3Khsliuping/TradingAgents-CN · Python

    TradingAgents-CN is a Chinese-enhanced learning and research platform built on a multi-agent LLM trading framework, helping Chinese-speaking users systematically study stock analysis using multiple AI agents for A-share, Hong Kong, and US markets. It explicitly does not issue real trading orders and is positioned for education and research only.

    • a-share
    • news
    • sse
    • docx
25. 25

    jumpserver

    31.8Kjumpserver/jumpserver · Python

    JumpServer is an open-source Privileged Access Management (PAM) platform — a bastion host that gives DevOps and IT teams secure, on-demand access to SSH, RDP, Kubernetes, database, RemoteApp and other endpoints through a web browser.

    • pam
    • vnc
    • access-control
    • django
26. 26

    composio

    30.6KComposioHQ/composio · TypeScript

    Composio is a platform for AI agents: it gives your agents 1000+ pre-authenticated toolkits, per-user sessions, auth, triggers, and a sandbox, so they can take action across apps instead of just chatting.

    • aiagents
    • js
    • sse
    • function-calling
27. 27

    better-auth

    30.3Kbetter-auth/better-auth · TypeScript

    It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

    • two-factor-authentication
    • iam
    • stripe
    • authorization
28. 28

    django-rest-framework

    30.2Kencode/django-rest-framework · Python

    Django REST framework is a powerful and flexible toolkit for building Web APIs with Django: you add it to a project and get a full REST API around your data.

    • pip
    • django
    • rest
    • oauth2
29. 29

    ProxmoxVE

    29.8Kcommunity-scripts/ProxmoxVE · Shell

    A community-maintained set of one-command install scripts for Proxmox VE: paste a single line into your Proxmox shell and it sets up a popular self-hosted service as a ready container or VM.

    • alpine
    • proxmox
    • hypervisor
    • scripts
30. 30

    infisical

    29.8KInfisical/infisical · TypeScript

    Infisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.

    • pam
    • acme
    • environment-variables
    • secret-management
31. 31

    harbor

    29.6Kgoharbor/harbor · Go

    Harbor is an open source trusted cloud native registry that stores, signs, and scans content — mainly container images and Helm charts. It is a CNCF-hosted project.

    • helm-charts
    • container
    • devops-tools
    • helm
32. 32

    ente

    29.4Kente/ente · Dart

    Ente is a fully open source, end-to-end encrypted cloud: a place to keep photos, documents and 2FA codes without having to trust the provider. It ships three apps so far: Photos, Locker and Auth.

    • zero-knowledge
    • e2ee
    • password-manager
    • totp
33. 33

    authelia

    29.3Kauthelia/authelia · Go

    An open-source authentication and authorization server that adds single sign-on and two-factor authentication to your web apps via a web portal. It is OpenID Certified and Post-Quantum Cryptography Ready.

    • webauthn
    • mfa
    • openid-connect
    • two-factor-authentication
34. 34

    SpringAll

    28.9Kwuyouzhuguli/SpringAll · Java

    A large collection of hands-on Spring tutorials in Chinese covering Spring Boot, Spring Boot & Shiro, Spring Batch, Spring Cloud, Spring Cloud Alibaba, and Spring Security & OAuth2, each paired with runnable example code and a companion blog post.

    • spring-security
    • dubbo
    • rabbitmq
    • zookeeper
35. 35

    trufflehog

    28.5Ktrufflesecurity/trufflehog · Go

    TruffleHog is a CLI tool that discovers, classifies, validates, and analyzes leaked secrets like API keys, database passwords, and private keys across many sources (Git, GitHub, S3, Docker, Slack, filesystems, and more).

    • dynamic-analysis
    • scanning
    • credentials
    • secret-management
36. 36

    next-auth

    28.4Knextauthjs/next-auth · TypeScript

    Auth.js (the next-auth project) is a set of open-source packages for adding authentication to web apps, built on standard Web APIs and designed to work with any framework in any JS runtime.

    • csrf
    • remix
    • nuxtjs
    • sveltekit
37. 37

    fastmcp

    28.1KPrefectHQ/fastmcp · Python

    FastMCP is an open-source Python framework for building MCP (Model Context Protocol) applications — the layer that connects LLMs to tools and data. It covers servers, clients, and interactive apps.

    • mcp-servers
    • mcp-tools
    • llm-tools
    • json-schema
38. 38

    SteamTools

    27.2KBeyondDimension/SteamTools · C#

    Watt Toolkit (formerly Steam++) is an open-source, cross-platform multi-functional Steam and gaming toolbox. Version 3.0 ships its features as default plugins — network acceleration, account switching, inventory management, local authenticator tokens and game tools — which you can remove or disable.

    • accelerator
    • crossplatform
    • dotnetcore
    • xaml
39. 39

    react-admin

    27Kmarmelab/react-admin · TypeScript

    A frontend framework for building single-page applications in the browser on top of REST or GraphQL APIs, using TypeScript, React and Material Design. Open sourced and maintained by marmelab.

    • material-ui
    • admin-ui
    • single-page-app
    • forms
40. 40

    dashy

    26.7Klissy93/dashy · Vue

    Dashy is a self-hostable personal dashboard: a single, highly customizable start page for your homelab that gathers all your apps, links and services in one place, with status checks, widgets, themes and instant search built in.

    • widgets
    • icons
    • homelab
    • pwa
41. 41

    authentik

    26Kgoauthentik/authentik · Python

    authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

    • identity
    • saml
    • iam
    • ldap
42. 42

    request

    25.5Krequest/request · JavaScript

    Request is a simplified HTTP client for Node.js, built to make HTTP calls as simply as possible. It supports HTTPS and follows redirects by default.

    • form
    • https
    • http-client
    • tls
43. 43

    gin-vue-admin

    25.1Kflipped-aurora/gin-vue-admin · Go

    A full-stack admin development platform: a Vue 3 + Element frontend and a Go (Gin) backend, pre-wired with JWT auth, casbin permissions, dynamic routes and menus, and code/form generators so you start on business logic instead of boilerplate.

    • gin
    • vibecoding
    • vue-admin
    • element-ui
44. 44

    downkyi

    24.4Kleiurayer/downkyi

    Downkyi (下载姬) was a desktop GUI tool for downloading videos, subtitles, and danmaku from the Chinese video platform Bilibili (B站) by reverse-engineering its private APIs and bypassing login authentication and anti-scraping protections. The repository has since been permanently shut down and is no longer maintained.

    • anti-bot
    • danmaku
    • piracy
    • bypass
45. 45

    devise

    24.4Kheartcombo/devise · Ruby

    Devise is a flexible, modular authentication solution for Ruby on Rails, built on top of Warden. It covers sign-up, sign-in, password recovery and more through optional modules you enable per model.

    • registration
    • ruby-gem
    • login
    • session
46. 46

    react-starter-kit

    23.7Kkriasoft/react-starter-kit · TypeScript

    React Starter Kit is a full-stack monorepo template for building SaaS applications, combining React 19, tRPC, and Drizzle ORM into a single type-safe contract from the database up to the UI, deployed on Cloudflare Workers.

    • neon
    • tanstack-router
    • hono
    • edge
47. 47

    passport

    23.5Kjaredhanson/passport · JavaScript

    Passport is Express-compatible authentication middleware for Node.js. Its sole purpose is authenticating requests, which it does through an extensible set of plugins called strategies.

    • openid-connect
    • local
    • saml
    • middleware
48. 48

    API-Security-Checklist

    23.3Kshieldfy/API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

    • security-hardening
    • secret-management
    • zero-trust
    • checklist
49. 49

    pangolin

    23.1Kfosrl/pangolin · TypeScript

    Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.

    • pam
    • wireguard-vpn
    • nat-traversal
    • zero-trust
50. 50

    Self-Hosting-Guide

    23.1Kmikeroyal/Self-Hosting-Guide · Dockerfile

    This is a curated guide for self-hosting software on your own servers instead of relying on third-party cloud providers, covering topics like Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.

    • selfhosted
    • home-assistant
    • dockerfile
    • home-automation
51. 51

    rocketmq

    22.6Kapache/rocketmq · Java

    Apache RocketMQ is an open-source distributed messaging and streaming platform for building event-driven applications, with low latency, trillion-level capacity and flexible scalability.

    • rocketmq
    • pubsub
    • message-queue
    • authorization
52. 52

    PHPMailer

    22.3KPHPMailer/PHPMailer · PHP

    PHPMailer is a full-featured email creation and transfer class for PHP — probably the world's most popular code for sending email from PHP, used by WordPress, Drupal, Joomla!, Yii, SugarCRM and many other open-source projects.

    • validations
    • login
    • local
    • mail
53. 53

    eladmin

    21.9Kelunez/eladmin · Java

    ELADMIN is an open-source, front-end/back-end separated admin management system built on Spring Boot 2.7.18, JPA, Spring Security, JWT, Redis and Vue — a base system that handles users, roles, menus and permissions for your own business apps.

    • swagger-ui
    • spring-security
    • element-ui
    • vue2
54. 54

    awesome-dotnet-core

    21.4Kthangchung/awesome-dotnet-core · C#

    A curated collection of awesome .NET Core libraries, tools, frameworks and software, organized by category such as API, Application Frameworks, ORM, Security, Testing, and more.

    • dotnetcore
    • dotnet-core
    • orm
    • microsoft
55. 55

    parse-server

    21.4Kparse-community/parse-server · JavaScript

    Parse Server is an open source, self-hosted backend: you deploy it to any infrastructure that runs Node.js, standalone or inside an Express app, and it gives your application a ready-made API layer over a database so you don't build that plumbing yourself.

    • graphql-api
    • backend-as-a-service
    • relay
    • push-notifications
56. 56

    security-guide-for-developers

    21.1KFallibleInc/security-guide-for-developers

    This is a practical security guide for web developers that explains common security issues (authentication, encryption, sessions, attacks, etc.) and gives a checklist for building more secure systems.

    • checklist
    • owasp
    • web-security
    • books
57. 57

    teleport

    21Kgravitational/teleport · Go

    Teleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.

    • pam
    • mfa
    • cluster
    • identity
58. 58

    chatbot

    21Kvercel/chatbot · TypeScript

    An open-source AI chatbot template built by Vercel with Next.js and the AI SDK, meant as a starting point for building your own chatbot applications.

    • xai
    • radix-ui
    • mistral
    • drizzle-orm
59. 59

    casbin

    20.5Kapache/casbin · Go

    An open-source access control library for Go projects: it enforces authorization based on configurable models like ACL, RBAC and ABAC.

    • permissions
    • identity-management
    • permission
    • auth
60. 60

    mediamtx

    20.4Kbluenviron/mediamtx · Go

    MediaMTX is a ready-to-use, zero-dependency live media server and media proxy: it publishes, reads, proxies, records and plays back real-time video and audio streams.

    • srt
    • rtsp
    • rtmp
    • media-server
61. 61

    server

    20.4Kbitwarden/server · C#

    This is the server side of Bitwarden, the password manager: the APIs, database, and core backend infrastructure that all Bitwarden client apps talk to. Run it on your own hardware to get your own Bitwarden instance.

    • api-server
    • aspnet
    • aspnetcore
    • sqlserver
62. 62

    OpenStock

    20.3KOpen-Dev-Society/OpenStock · TypeScript

    OpenStock is an open-source, self-hosted stock market tracking app: track real-time prices, set personalized alerts, and explore company insights as a free alternative to paid market platforms.

    • sentiment-analysis
    • cron
    • shadcn-ui
    • stock-market
63. 63

    vue-manage-system

    19.6Klin-xin/vue-manage-system · Vue

    A ready-made admin dashboard solution built on Vue 3, Pinia and TypeScript with the Element Plus component library — a starting point for developing web-based back-office systems.

    • element-plus
    • pinia
    • admin-template
    • file-upload
64. 64

    taipy

    19.4KAvaiga/taipy · Python

    Taipy is a Python framework that turns data and AI code into production-ready web applications, taking you from a simple pilot script to a deployable app without extra web development work.

    • datascience
    • data-integration
    • hacktoberfest2023
    • pipelines
65. 65

    yaak

    19.3Kmountain-loop/yaak · TypeScript

    Yaak is a free, open-source desktop API client for firing off REST, GraphQL, WebSocket, Server-Sent Events, and gRPC requests — a privacy-first alternative to Postman, Insomnia, and Bruno.

    • sse
    • http-client
    • jwt
    • grpc
66. 66

    taxonomy

    19.3Kshadcn-ui/taxonomy · TypeScript

    It is an open source demo app showing how a modern product — with authentication, subscriptions, docs and a blog — comes together on Next.js 13's new app router and server components.

    • zod
    • subscriptions
    • radix-ui
    • prisma
67. 67

    ConvertX

    19.1KC4illin/ConvertX · TypeScript

    ConvertX is a self-hosted online file converter: you run it on your own server and convert files between 1000+ formats right in the browser.

    • imagemagick
    • libreoffice
    • calibre
    • conversion
68. 68

    gun

    19.1Kamark/gun · JavaScript

    GUN is an open source cybersecurity protocol for syncing decentralized graph data — a peer-to-peer database that keeps app data in sync across browsers and devices, with no master server and no single source of truth.

    • crdt
    • mesh-network
    • embedded-database
    • graph-database
69. 69

    BookStack

    19.1KBookStackApp/BookStack · PHP

    It's a free, open-source platform for storing and organising information and documentation — a self-hosted wiki-style web app written in PHP, around since 2015 with roughly 19,000 GitHub stars.

    • selfhosted
    • wysiwyg
    • wiki
    • cms
70. 70

    Sa-Token

    19.1Kdromara/Sa-Token · Java

    Sa-Token is a free, open-source Java authentication and authorization framework covering login, permission checks, SSO, OAuth2.0 and microservice gateway auth — one lightweight dependency for all of it.

    • session-management
    • springcloud
    • token
    • authorization
71. 71

    codex-auth-helper

    19Kzhishile/codex-auth-helper · CSS

    Codex Auth Helper is a Chrome extension that exports your logged-in ChatGPT session locally and converts it into an auth.json file matching the Codex CLI's expected credential format.

    • privacy-tools
    • privacy-first
    • chrome-extension
    • browser-extension
72. 72

    fail2ban

    18.8Kfail2ban/fail2ban · Python

    Fail2Ban is a daemon that scans log files like /var/log/auth.log, spots hosts making too many failed login attempts, and bans them by updating system firewall rules for a configurable amount of time.

    • bruteforce
    • anti-bot
    • daemon
    • firewall
73. 73

    wasp

    18.8Kwasp-lang/wasp · TypeScript

    Wasp (Web Application Specification) is a Rails-like full-stack framework for React, Node.js, and Prisma — you describe your web app's high-level details in a declarative spec file.

    • fullstack
    • background-jobs
    • prisma
    • full-stack
74. 74

    nebula

    18.4Kslackhq/nebula · Go

    Nebula is an overlay networking tool that lets you connect computers anywhere in the world into a secure mesh network, scaling from a handful of machines to tens of thousands.

    • nat-traversal
    • mesh-network
    • certificate
    • firewall
75. 75

    Become-A-Full-Stack-Web-Developer

    18.4Kbmorelli25/Become-A-Full-Stack-Web-Developer

    A curated list of 100+ free (and a few paid) resources for learning full stack web development, covering HTML, CSS, JavaScript, React, Node.js, Python, APIs, databases, authentication, and Git.

    • mongodb
    • interview
    • career
    • git
76. 76

    gost

    18.2Kginuerzh/gost · Go

    GOST (GO Simple Tunnel) is a secure, multi-protocol proxy and tunnel tool written in Go. It can act as an HTTP/SOCKS5 proxy, chain multiple proxies together, and forward local or remote TCP/UDP ports through encrypted channels.

    • sni
    • quic
    • http2
    • udp
77. 77

    node-jsonwebtoken

    18.2Kauth0/node-jsonwebtoken · JavaScript

    A Node.js implementation of JSON Web Tokens (JWT) for signing, verifying, and decoding tokens, built by Auth0.

    • jwt
    • node
    • encryption
    • rest-api
78. 78

    zincsearch

    17.9Kzincsearch/zincsearch · Go

    A search engine that does full-text indexing — a lightweight alternative to Elasticsearch, written in Go and built on the bluge indexing library. It runs using a fraction of Elasticsearch's resources.

    • modern
    • vuejs
    • full-text-search
    • elasticsearch
79. 79

    plugins

    17.7Kflutter-team-archive/plugins · Dart

    The Flutter team's official collection of first-party Flutter plugins — packages like camera, webview_flutter and shared_preferences that let a Flutter app reach platform-specific APIs.

    • webview
    • camera
    • maps
    • dart
80. 80

    hydra

    17.6Kory/hydra · Go

    Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.

    • federation
    • openid-connect
    • identity
    • authorization
81. 81

    JustAuth

    17.5Kjustauth/JustAuth · Java

    JustAuth is a small, feature-complete Java library for third-party OAuth login. It integrates dozens of Chinese and international providers, so you can add social login without wrestling each platform's own SDK.

    • integration
    • authorization
    • oauth2
    • wechat
82. 82

    apisix

    17.2Kapache/apisix · Lua

    Apache APISIX is an open-source, dynamic, real-time, high-performance API Gateway that also serves as an AI Gateway. It provides traffic management — load balancing, canary release, circuit breaking, authentication, observability — for both north-south and east-west traffic.

    • api-management
    • openapi3
    • quic
    • ai-gateway
83. 83

    emqx

    16.8Kemqx/emqx · Erlang

    EMQX is an MQTT broker and messaging platform for IoT: it connects millions of devices, routes messages in real time, and bridges them into backend data systems. Aimed at AI, IoT, IIoT, connected vehicles and smart cities.

    • erlang
    • broker
    • manufacturing
    • pubsub
84. 84

    chisel

    16.7Kjpillora/chisel · Go

    Chisel is a fast TCP/UDP tunnel transported over HTTP and secured via SSH — a single executable that runs as either client or server, mainly used for passing through firewalls or providing a secure endpoint into your network.

    • tcp
    • socks5
    • tunnel
    • reverse-proxy
85. 85

    iview-admin

    16.3Kiview/iview-admin · Vue

    iView Admin is a front-end admin management system template built with Vue.js 2.0 and the iView UI toolkit, giving you a ready-made login, permissions, routing, and layout structure to build a management dashboard on top of.

    • axios
    • echarts
    • vue-cli
    • vue-admin
86. 86

    FreshRSS

    16.3KFreshRSS/FreshRSS · PHP

    FreshRSS is a free, self-hosted RSS feed aggregator: it pulls all your news feeds into one web interface. It is lightweight and customizable, supports multiple users (with an anonymous reading mode), and ships both a client API and a CLI.

    • rss-reader
    • extensions
    • news-aggregator
    • aggregator
87. 87

    saas-starter

    16.2Knextjs/saas-starter · TypeScript

    A free, open-source starter template for building a SaaS web app on Next.js, maintained under the official Next.js org: authentication, Stripe payments, and a dashboard for logged-in users come already wired up.

    • subscriptions
    • crud
    • starter-kit
    • stripe
88. 88

    RagaAI-Catalyst

    16.2Kraga-ai-hub/RagaAI-Catalyst · Python

    RagaAI Catalyst is a platform for managing and optimizing LLM projects — tracing, evaluating and safeguarding LLM and agent applications, shipped as a Python SDK.

    • guardrails
    • red-teaming
    • cost-tracking
    • llmops
89. 89

    impacket

    16.2Kfortra/impacket · Python

    Impacket is a collection of Python classes for working with network protocols, giving low-level programmatic access to packets and, for some protocols like SMB1-3 and MSRPC, full protocol implementations.

    • network-programming
    • network
    • protocol
    • red-team
90. 90

    open-saas

    16.1Kwasp-lang/open-saas · MDX

    Open SaaS is a free, open-source SaaS boilerplate built on the Wasp full-stack framework (React, NodeJS, Prisma). One scaffold gives you auth, payments, email, background jobs, a landing page, file uploads, an admin dashboard and more out of the box.

    • typesafe
    • prisma
    • stripe
    • astro
91. 91

    zxcvbn

    16.1Kdropbox/zxcvbn · CoffeeScript

    zxcvbn is an open-source JavaScript password strength estimator from Dropbox, inspired by password crackers. Instead of checking rules, it rates how guessable a password is through pattern matching and adds short verbal feedback.

    • coffeescript
    • patterns
    • password
    • input
92. 92

    httpx

    15.6Kencode/httpx · Python

    HTTPX is a fully featured HTTP client library for Python 3, with a broadly requests-compatible API, HTTP/1.1 and HTTP/2 support, and both sync and async interfaces. It also ships with an integrated command-line client.

    • asyncio
    • http2
    • ssl
    • api-client
93. 93

    Termix

    15.5KTermix-SSH/Termix · TypeScript

    Termix is a free, self-hosted platform that puts SSH terminals, remote desktop (RDP/VNC/Telnet), file transfers over SFTP, Docker and Podman management, host metrics, and automations for your servers in one web, desktop, and mobile app.

    • webauthn
    • totp
    • rdp
    • ldap
94. 94

    supertokens-core

    15.3Ksupertokens/supertokens-core · Java

    SuperTokens is an open-source auth provider for adding secure login and session management to your apps — an open-core alternative to proprietary providers like Auth0, Firebase Auth and AWS Cognito.

    • session-management
    • mfa
    • login
    • password
95. 95

    pulsar

    15.3Kapache/pulsar · Java

    Apache Pulsar is a distributed publish-subscribe messaging platform built for horizontal scale, designed to handle millions of topics and millions of messages per second with strong ordering and durability guarantees.

    • pubsub
    • authorization
    • multi-tenant
    • big-data
96. 96

    zitadel

    15.3Kzitadel/zitadel · Go

    ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

    • scim
    • mfa
    • login
    • openid-connect
97. 97

    oauth2-proxy

    15.2Koauth2-proxy/oauth2-proxy · Go

    OAuth2 Proxy is an open-source reverse proxy that adds authentication to your web apps using OAuth2/OIDC providers like Google, Azure, GitHub or any generic OIDC provider.

    • ssl
    • cncf
    • oidc
    • sso
98. 98

    pansou

    14.9Kfish2018/pansou · Go

    PanSou is a high-performance API service for searching netdisk (cloud drive) share links. It concurrently searches Telegram channels and custom plugins, then classifies and ranks the results by drive type.

    • magnet-links
    • baidu
    • cloud-storage
    • search-engine
99. 99

    GmsCore

    14.9Kmicrog/GmsCore · Java

    microG Services is a free and open-source framework that lets Android apps built for Google Play Services run on systems where Play Services is not available.

    • auth
    • kotlin-android
    • push-notifications
    • firebase
100. 100

     filestash

     14.8Kmickael-kerjean/filestash · Go

     Filestash is a storage-agnostic, Dropbox-like file manager that speaks nearly every storage protocol (S3, FTP, SFTP, WebDAV, SMB, NFS, Git, IPFS, Dropbox, Azure, SharePoint and more), so you get one file browser for all your backends.

     • archiving
     • dropbox
     • ipfs
     • ftp

Showing the 100 most-starred of 241. See every one in the catalog.

• open-source5,666
• self-hosted1,929
• linux4,184
• web2,447
• server1,459
• docker1,660
• security976
• api1,094
• mit3,312
• typescript1,821
• nodejs1,506
• macos3,544
• windows3,403
• developer-tools2,924
• cross-platform2,623
• backend460
• web-app547
• rest-api429
• ai1,955
• apache-2.01,434
• oauth161
• database473
• go681
• docker-compose391