Topics / #jwt

Jwt projects on GitHub

JSON Web Tokens for stateless authentication between services.

As of , the most-starred Jwt projects on GitHub are crawl4ai (85.7K stars), mall (84.9K stars) and JeecgBoot (48.2K stars). GitHub.Locker tracks 60 Jwt repositories with 961.1K stars combined. The fastest-growing on October 16 was MemoryBear, with +121 stars in a day.

60Projects
961.1KStars in total
+640Stars in a day

Hot right now

Most stars gained in a day · Oct 16

The all-time top

60 projects · by stars

  1. #1 · unclecode/crawl4ai

    crawl4ai

    Crawl4AI is an open-source web crawler and scraper that turns any website into clean, LLM-ready Markdown for RAG pipelines, AI agents, and data extraction workflows.

    85.7K
  2. #2 · macrozheng/mall

    mall

    Mall is a full e-commerce system with a storefront (mall-portal) and an admin backend (mall-admin), built on Spring Boot and MyBatis, meant as a complete reference implementation of online shopping.

    84.9K
  3. #3 · jeecgboot/JeecgBoot

    JeecgBoot

    JeecgBoot is an enterprise AI low-code platform: you describe what you need in natural language and it generates the front-end, back-end CRUD code, database tables and menu permissions, while also bundling a Dify-like AI app module with chat, RAG knowledge bases, flow orchestration and MCP plugins.

    48.2K
  1. 4

    full-stack-fastapi-template

    46Kfastapi/full-stack-fastapi-template · TypeScript

    A full-stack web application template that bundles a FastAPI Python backend with a React/TypeScript frontend, a PostgreSQL database, and Docker Compose, giving you authentication, an admin dashboard, and deployment config already wired up.

  2. 5

    kong

    44.3KKong/kong · Lua

    Kong is a cloud-native API gateway that also acts as an AI and MCP gateway, handling routing, load balancing, authentication, and traffic management for microservices and LLM/agentic traffic.

  3. 6

    Hello-Python

    37.8Kmouredev/Hello-Python · Python

    This is a free, Spanish-language video course that teaches the Python programming language from scratch, aimed at complete beginners.

  4. 7

    filebrowser

    35.9Kfilebrowser/filebrowser · Go

    File Browser is a self-hosted file manager you point at a directory on your server, giving you a web interface to upload, delete, preview, and edit files inside it.

  5. 8

    echo

    32.8Klabstack/echo · Go

    Echo is a high performance, minimalist web framework for Go, used to build web apps, RESTful APIs and microservices.

  6. 9

    SpringAll

    28.9Kwuyouzhuguli/SpringAll · Java

    A large collection of hands-on Spring tutorials in Chinese covering Spring Boot, Spring Boot & Shiro, Spring Batch, Spring Cloud, Spring Cloud Alibaba, and Spring Security & OAuth2, each paired with runnable example code and a companion blog post.

  7. 10

    next-auth

    28.4Knextauthjs/next-auth · TypeScript

    Auth.js (the next-auth project) is a set of open-source packages for adding authentication to web apps, built on standard Web APIs and designed to work with any framework in any JS runtime.

  8. 11

    postgrest

    27.7KPostgREST/postgrest · Haskell

    PostgREST is a standalone server that turns any existing PostgreSQL database into a full RESTful API automatically — no backend code to write.

  9. 12

    gin-vue-admin

    25.1Kflipped-aurora/gin-vue-admin · Go

    A full-stack admin development platform: a Vue 3 + Element frontend and a Go (Gin) backend, pre-wired with JWT auth, casbin permissions, dynamic routes and menus, and code/form generators so you start on business logic instead of boilerplate.

  10. 13

    API-Security-Checklist

    23.3Kshieldfy/API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

  11. 14

    eladmin

    21.9Kelunez/eladmin · Java

    ELADMIN is an open-source, front-end/back-end separated admin management system built on Spring Boot 2.7.18, JPA, Spring Security, JWT, Redis and Vue — a base system that handles users, roles, menus and permissions for your own business apps.

  12. 15

    livekit

    21.5Klivekit/livekit · Go

    LiveKit is an open-source realtime platform for voice, video, and physical AI. This repo is its server: a scalable, distributed WebRTC SFU that routes audio, video, and data between people, devices, and AI models in shared rooms.

  13. 16

    security-guide-for-developers

    21.1KFallibleInc/security-guide-for-developers

    This is a practical security guide for web developers that explains common security issues (authentication, encryption, sessions, attacks, etc.) and gives a checklist for building more secure systems.

  14. 17

    mediamtx

    20.4Kbluenviron/mediamtx · Go

    MediaMTX is a ready-to-use, zero-dependency live media server and media proxy: it publishes, reads, proxies, records and plays back real-time video and audio streams.

  15. 18

    yaak

    19.3Kmountain-loop/yaak · TypeScript

    Yaak is a free, open-source desktop API client for firing off REST, GraphQL, WebSocket, Server-Sent Events, and gRPC requests — a privacy-first alternative to Postman, Insomnia, and Bruno.

  16. 19

    Sa-Token

    19.1Kdromara/Sa-Token · Java

    Sa-Token is a free, open-source Java authentication and authorization framework covering login, permission checks, SSO, OAuth2.0 and microservice gateway auth — one lightweight dependency for all of it.

  17. 20

    vue-admin-better

    18.9Kzxwk1998/vue-admin-better · Vue

    vue-admin-better is an open-source Vue admin dashboard template: a ready-made admin panel skeleton with 40+ polished pages, RBAC + JWT permission control and dynamic backend-driven routing, already used in 100,000+ real projects.

  18. 21

    node-jsonwebtoken

    18.2Kauth0/node-jsonwebtoken · JavaScript

    A Node.js implementation of JSON Web Tokens (JWT) for signing, verifying, and decoding tokens, built by Auth0.

  19. 22

    hydra

    17.6Kory/hydra · Go

    Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.

  20. 23

    saas-starter

    16.2Knextjs/saas-starter · TypeScript

    A free, open-source starter template for building a SaaS web app on Next.js, maintained under the official Next.js org: authentication, Stripe payments, and a dashboard for logged-in users come already wired up.

  21. 24

    pansou

    14.9Kfish2018/pansou · Go

    PanSou is a high-performance API service for searching netdisk (cloud drive) share links. It concurrently searches Telegram channels and custom plugins, then classifies and ranks the results by drive type.

  22. 25

    TREK

    14.8Kliketrek/TREK · TypeScript

    TREK is a self-hosted travel and trip planner with real-time collaborative editing, interactive maps, budgets, packing lists, a journal, and built-in AI features.

  23. 26

    logto

    14.7Klogto-io/logto · TypeScript

    Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.

  24. 27

    awesome-web-security

    13.9Kqazbnm456/awesome-web-security · Python

    A curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.

  25. 28

    mall-learning

    13.4Kmacrozheng/mall-learning · Java

    This is a learning tutorial that breaks down the architecture, business logic, and technical details of the 'mall' e-commerce project (a 60k+ star Java e-commerce system), covering SpringBoot, MyBatis, Elasticsearch, RabbitMQ, Redis, MongoDB, MySQL and Docker-based deployment.

  26. 29

    go-admin

    12.8Kgo-admin-team/go-admin · Go

    go-admin is a full-stack scaffold for building admin/back-office management systems: a Gin-based Go REST API paired with a Vue frontend (Element UI, Arco Design, or Ant Design). It comes with RBAC permission control, multi-tenant support, JWT auth, a code generator, and a drag-and-drop form builder so you can bootstrap a management panel quickly.

  27. 30

    claude-relay-service

    12.7KWei-Shaw/claude-relay-service · JavaScript

    Claude Relay Service (CRS) is a self-hosted relay/proxy you run yourself to access Claude (plus OpenAI/Codex, Gemini CLI, and Droid) through your own server, letting you manage multiple accounts and share subscription costs with friends.

  28. 31

    jwt-auth

    11.5Ktymondesigns/jwt-auth · PHP

    This package adds JSON Web Token (JWT) based authentication to Laravel and Lumen applications, so you can authenticate API users with tokens instead of server-side sessions.

  29. 32

    dex

    11.2Kdexidp/dex · Go

    Dex is an identity service that drives authentication for other apps over OpenID Connect. Through pluggable 'connectors' it defers logins to LDAP, SAML or providers like GitHub and Google, so clients write their auth logic once.

  30. 33

    jjwt

    11.1Kjwtk/jjwt · Java

    JJWT is a pure Java library for creating, parsing, and verifying JSON Web Tokens (JWTs), signed/encrypted JWTs (JWS/JWE), and JSON Web Keys (JWKs) on the JVM and Android.

  31. 34

    centrifugo

    10.9Kcentrifugal/centrifugo · Go

    Centrifugo is an open-source, language-agnostic real-time messaging server that lets any backend push messages to connected clients over WebSocket, HTTP-streaming, SSE, GRPC or WebTransport. It acts as a self-hosted alternative to Pubnub, Pusher, Ably, Socket.IO, Phoenix.PubSub and SignalR.

  32. 35

    tyk

    10.9KTykTechnologies/tyk · Go

    Tyk is an open-source, cloud-native API Gateway that lets you manage REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol) traffic in one place, adding authentication, rate limiting, quotas and analytics to your APIs.

  33. 36

    jwt-go

    10.7Kdgrijalva/jwt-go · Go

    A Go library implementing JSON Web Tokens (JWT): it parses, verifies, generates, and signs tokens.

  34. 37

    Octop

    9.7KTencentCloud/Octop · Python

    Octop is an open-source, self-hosted AI assistant platform with a multi-agent architecture, built for individuals, families, and small teams to run their own team of specialized AI 'experts' entirely on their own machine.

  35. 38

    sphere-sdk-connect-example

    9.5Kunicity-sphere/sphere-sdk-connect-example · TypeScript

    Four runnable example apps showing the ways a program can work with a Sphere wallet: a browser dApp, a Node dApp, a bot that runs its own wallet, and a backend that only authenticates a user.

  36. 39

    agentic-inbox

    8.3Kcloudflare/agentic-inbox · TypeScript

    Agentic Inbox is a self-hosted email client with a built-in AI agent that runs entirely on your own Cloudflare account, using Cloudflare Workers, Durable Objects, R2 storage, and Workers AI.

  37. 40

    MemoryBear

    7.8KSuanmoSuanyangTechnology/MemoryBear · Python

    MemoryBear is an AI memory system that gives AI agents human-like memory: instead of just storing knowledge statically, it perceives, extracts, associates and forgets information over time.

  38. 41

    YunX

    4.6KCYQawa/YunX · Kotlin

    YunX (云析) is an open-source Android app that parses share links from Chinese cloud storage services and downloads the files directly, with chunked concurrent downloading and resume support.

  39. 42

    ARTEX

    4.4Kmhtsec/ARTEX · Go

    ARTEX is an AI-driven autonomous penetration testing system with a Go backend (embedding a Next.js frontend) where LLM-powered agents plan and execute security testing against assets. It won first place in Baidu's 'Agent+' attack-defense challenge.

  40. 43

    turnstone

    1.6Kturnstonelabs/turnstone · Python

    Turnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.

  41. 44

    artex-global

    1.6Kjiwoochris/artex-global · Go

    ARTEX-KO is a Korean localization of the ARTEX (Autumn-27/ARTEX) framework: a system where multiple LLM-driven agents autonomously run a penetration test end-to-end, from reconnaissance to exploitation, with a Go backend and an embedded Next.js frontend.

  42. 45

    ARTEX

    1.2Ktrhhubsd/ARTEX · Go

    ARTEX is an AI-driven autonomous penetration testing system (Go backend + Next.js frontend) where LLM-powered planner and worker agents explore targets, map assets, and find vulnerabilities on their own.

  43. 46

    openframe-oss-tenant

    1.1Kflamingo-stack/openframe-oss-tenant · Shell

    OpenFrame OSS Tenant is the open-source, multi-tenant foundation of OpenFrame, an AI-powered MSP (Managed Service Provider) platform that replaces expensive proprietary RMM/support software with intelligent automation, device management, and AI-assisted support.

  44. 47

    -AI-

    1.1Kgry67673905/-AI- · Python

    A runnable full-stack demo of a 'smart government one-stop service' (一网通办) AI assistant: citizens, staff and admins interact through an Android local-asset portal backed by a FastAPI service, a read-only MCP server and PostgreSQL.

  45. 48

    fanzha-ai-proxy

    613lfzk550/fanzha-ai-proxy

    A reverse proxy that turns China's government 'National Anti-Fraud AI' (国家反诈AI) mobile assistant into an OpenAI-compatible API (/v1/chat/completions), so it can be plugged into normal AI chat clients.

  46. 49

    SideRail

    589icubaby/SideRail · TypeScript

    SideRail is a neobrutalist web control panel for Xray-core VPN servers that you deploy to Railway with one click, giving you clean client links, live stats and subscription pages without manual config.

  47. 50

    knoweldge-base

    293rgem227/knoweldge-base · Python

    Knoweldge Base is a self-hosted personal or team knowledge base: you upload documents into nested folders, preview them in the browser, and AI agents can read them through a read-only MCP service. This is the Phase 1 minimum viable version.

  48. 51

    ApeAdmin

    289KevinLiss/ApeAdmin · Python

    ApeAdmin is an open-source Python admin backend framework built on FastAPI and Vue3, aimed at modern AI applications. It bundles RBAC permission control and audit logging with a plugin ecosystem and an MCP-SSE gateway that exposes system and plugin capabilities as tools AI agents can call.

  49. 52

    pi

    20015838328874/pi · Python

    pi-py is a self-hostable, extensible AI agent platform: a Python reimplementation of the 'pi' coding agent harness, shipped as a multi-user HTTP service with sandboxed tool execution, multi-tenant governance, an eval harness, and an RL data flywheel.

  50. 53

    zilan

    200lxcshine/zilan · Go

    Zilan is an LLM-powered knowledge management and Q&A platform that unifies RAG quick Q&A, ReAct agent reasoning, and auto-generated Wiki knowledge distillation into one minimalist knowledge hub.

  51. 54

    financial_intelligence_system_web

    197zhangzf1119/financial_intelligence_system_web · Vue

    FinSight Enterprise Frontend is the Vue 3 + TypeScript frontend for FinSight, an enterprise intelligence management platform offering an admin dashboard, AI model chat, a RAG knowledge base, a file center, workflow approvals, system monitoring, log auditing and in-app messaging.

  52. 55

    SIAPIN

    184BagasRizkyHarySaputra/SIAPIN · TypeScript

    SIAPIN is a free digital tutoring (bimbel) platform that helps Indonesian students prepare for the SNBT university entrance exam and TKA SMA/SMP exams, with practice questions, AI diagnostics, and PTN admission-probability estimates.

  53. 56

    financial-intelligence-system

    171zhangzf1119/financial-intelligence-system · Java

    FinSight Enterprise Backend is a Spring Boot 3 backend for an enterprise intelligent management platform, covering RBAC, logging, monitoring, a file center, workflow approvals, in-app instant messaging, AI model chat and a RAG knowledge base.

  54. 57

    clevis

    169nazarli-shabnam/clevis · JavaScript

    Clevis is a self-hosted dashboard that turns the GitHub API into security and analytics insight for your repositories and organizations — it computes a security score from six automated checks (MFA enforcement, branch protection, secret scanning, Dependabot alerts, code scanning alerts, default-branch force-push protection) and lets admins run privileged maintenance jobs like clearing GitHub Actions caches.

  55. 58

    StarLive

    168SMNETSTUDIO/StarLive · TypeScript

    StarLive is a self-hosted live-streaming and interaction platform: it handles the video stream, real-time danmaku/gifts/red-packets/lottery, moderation, and a built-in StarCoin virtual-currency economy. It's a rewrite of the legacy LDLive, moving from serverless HTTP polling to a standalone NestJS backend with persistent Socket.IO connections.

  56. 59

    openframe-saas-desktop

    156flamingo-stack/openframe-saas-desktop · Rust

    OpenFrame Console is a Tauri 2 desktop shell for the OpenFrame SaaS platform. It wraps the openframe-oss-frontend static web export and adds OS-level features a browser tab can't do, like tray notifications, persistent sessions, and system-browser OAuth sign-in.

  57. 60

    NodePilot

    110Sev7eNup/NodePilot · C#

    NodePilot is an open-source, self-hosted platform for building and running Windows/PowerShell automation workflows, designed as a modern agentless replacement for Microsoft System Center Orchestrator.

Often tagged together