Topics / #authorization

Authorization projects on GitHub

Access control and permission management frameworks

As of , the most-starred Authorization projects on GitHub are keycloak (37.4K stars), better-auth (30.3K stars) and apollo (29.8K stars). GitHub.Locker tracks 29 Authorization repositories with 475.3K stars combined. The fastest-growing on October 16 was keycloak, with +24 stars in a day.

29Projects
475.3KStars in total
+103Stars in a day
Browse in the catalog →github.com/topics/authorization ↗

Hot right now

Most stars gained in a day · Oct 16

+24

keycloak

keycloak/keycloak · ★ 37.4K

Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

+19

better-auth

better-auth/better-auth · ★ 30.3K

It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

+12

authentik

goauthentik/authentik · ★ 26K

authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

+10

casdoor

casdoor/casdoor · ★ 14.6K

Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

The all-time top

29 projects · by stars

  1. #1 · keycloak/keycloak

    keycloak

    Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

    37.4K
  2. #2 · better-auth/better-auth

    better-auth

    It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

    30.3K
  3. #3 · apolloconfig/apollo

    apollo

    Apollo is a reliable configuration management system. It centrally manages the configurations of different applications and different clusters, and is built for microservice configuration management scenarios.

    29.8K
  1. 4

    SpringAll

    28.9Kwuyouzhuguli/SpringAll · Java

    A large collection of hands-on Spring tutorials in Chinese covering Spring Boot, Spring Boot & Shiro, Spring Batch, Spring Cloud, Spring Cloud Alibaba, and Spring Security & OAuth2, each paired with runnable example code and a companion blog post.

  2. 5

    authentik

    26Kgoauthentik/authentik · Python

    authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

  3. 6

    rocketmq

    22.6Kapache/rocketmq · Java

    Apache RocketMQ is an open-source distributed messaging and streaming platform for building event-driven applications, with low latency, trillion-level capacity and flexible scalability.

  4. 7

    parse-server

    21.4Kparse-community/parse-server · JavaScript

    Parse Server is an open source, self-hosted backend: you deploy it to any infrastructure that runs Node.js, standalone or inside an Express app, and it gives your application a ready-made API layer over a database so you don't build that plumbing yourself.

  5. 8

    teleport

    21Kgravitational/teleport · Go

    Teleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.

  6. 9

    casbin

    20.5Kapache/casbin · Go

    An open-source access control library for Go projects: it enforces authorization based on configurable models like ACL, RBAC and ABAC.

  7. 10

    Sa-Token

    19.1Kdromara/Sa-Token · Java

    Sa-Token is a free, open-source Java authentication and authorization framework covering login, permission checks, SSO, OAuth2.0 and microservice gateway auth — one lightweight dependency for all of it.

  8. 11

    hydra

    17.6Kory/hydra · Go

    Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.

  9. 12

    JustAuth

    17.5Kjustauth/JustAuth · Java

    JustAuth is a small, feature-complete Java library for third-party OAuth login. It integrates dozens of Chinese and international providers, so you can add social login without wrestling each platform's own SDK.

  10. 13

    pulsar

    15.3Kapache/pulsar · Java

    Apache Pulsar is a distributed publish-subscribe messaging platform built for horizontal scale, designed to handle millions of topics and millions of messages per second with strong ordering and durability guarantees.

  11. 14

    zitadel

    15.3Kzitadel/zitadel · Go

    ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

  12. 15

    logto

    14.7Klogto-io/logto · TypeScript

    Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.

  13. 16

    casdoor

    14.6Kcasdoor/casdoor · Go

    Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

  14. 17

    awesome-ruby

    14.2Kmarkets/awesome-ruby

    A curated, community-driven list of awesome Ruby libraries, tools, frameworks and software, covering everything needed to build modern apps and web apps.

  15. 18

    laravel-permission

    13Kspatie/laravel-permission · PHP

    A Laravel package that lets you manage user permissions and roles through your database, and checks them via Laravel's built-in Gate system.

  16. 19

    go-admin

    12.8Kgo-admin-team/go-admin · Go

    go-admin is a full-stack scaffold for building admin/back-office management systems: a Gin-based Go REST API paired with a Vue frontend (Element UI, Arco Design, or Ant Design). It comes with RBAC permission control, multi-tenant support, JWT auth, a code generator, and a drag-and-drop form builder so you can bootstrap a management panel quickly.

  17. 20

    opa

    12.4Kopen-policy-agent/opa · Go

    OPA (Open Policy Agent) is an open source, general-purpose policy engine that lets you enforce policies — like 'can user X do Y on resource Z?' — consistently across your whole stack via a declarative policy language called Rego.

  18. 21

    node-elm

    12.3Kbailicangdu/node-elm · JavaScript

    This is a backend API server built with Node.js, Express, and MongoDB that replicates the official API of Ele.me (饿了么), a Chinese food-delivery platform, covering both the customer-facing app and an admin management system.

  19. 22

    fastapi_mcp

    12Ktadata-org/fastapi_mcp · Python

    FastAPI-MCP turns your existing FastAPI endpoints into Model Context Protocol (MCP) tools, so AI agents like Claude or Cursor can call your API directly, with authentication built in.

  20. 23

    aspnetboilerplate

    12Kaspnetboilerplate/aspnetboilerplate · C#

    ASP.NET Boilerplate (ABP) is a general-purpose application framework for building modern ASP.NET web apps, implementing best practices like layered architecture and Domain Driven Design out of the box so you can focus on business code.

  21. 24

    jwt-auth

    11.5Ktymondesigns/jwt-auth · PHP

    This package adds JSON Web Token (JWT) based authentication to Laravel and Lumen applications, so you can authenticate API users with tokens instead of server-side sessions.

  22. 25

    cas

    11.4Kapereo/cas · Java

    CAS (Central Authentication Service) is an enterprise multilingual identity provider and single sign-on server for the web: an open-source Java platform for centralizing authentication and authorization.

  23. 26

    how-to-secure-anything

    10.2Kveeral-patel/how-to-secure-anything

    A curated README that documents a systematic process for security engineering: how to secure any kind of system, whether it is a medieval castle, an art museum, or a computer network, by thinking about adversaries, policies, models, and defenses.

  24. 27

    agent-safe-pipeline

    688decionis/agent-safe-pipeline · TypeScript

    Agent-Safe Pipeline is a reference implementation of an 'Execution Authority' architecture that sits between AI agents or APIs and consequential HTTP actions: it intercepts the action, asks Decionis whether it is authorized, and only forwards it if a single-use grant is issued, otherwise holding it for a human or refusing it, with every decision leaving tamper-evident evidence.

  25. 28

    openclaw-enterprise

    415openclaw/openclaw-enterprise · JavaScript

    OpenClaw Enterprise (OCE) is an open-source, vendor-neutral control plane for deploying and managing AI agents, described by its authors as being like 'Kubernetes for agents'.

  26. 29

    auth

    232yielded-dev/auth · TypeScript

    A composable authentication, session, and identity workflow library built specifically for the Effect ecosystem. You define your auth contract with Schema and wire up infrastructure through Effect Layers.

Often tagged together