Topics / #jwt
Jwt projects on GitHub
JSON Web Tokens for stateless authentication between services.
As of , the most-starred Jwt projects on GitHub are crawl4ai (85.7K stars), mall (84.9K stars) and JeecgBoot (48.2K stars). GitHub.Locker tracks 60 Jwt repositories with 961.1K stars combined. The fastest-growing on October 16 was MemoryBear, with +121 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
MemoryBear
SuanmoSuanyangTechnology/MemoryBear · ★ 7.8KMemoryBear is an AI memory system that gives AI agents human-like memory: instead of just storing knowledge statically, it perceives, extracts, associates and forgets information over time.
YunX
CYQawa/YunX · ★ 4.6KYunX (云析) is an open-source Android app that parses share links from Chinese cloud storage services and downloads the files directly, with chunked concurrent downloading and resume support.
+102Octop
TencentCloud/Octop · ★ 9.7KOctop is an open-source, self-hosted AI assistant platform with a multi-agent architecture, built for individuals, families, and small teams to run their own team of specialized AI 'experts' entirely on their own machine.
+55crawl4ai
unclecode/crawl4ai · ★ 85.7KCrawl4AI is an open-source web crawler and scraper that turns any website into clean, LLM-ready Markdown for RAG pipelines, AI agents, and data extraction workflows.
The all-time top
60 projects · by stars
- 85.7K
#1 · unclecode/crawl4aicrawl4ai
Crawl4AI is an open-source web crawler and scraper that turns any website into clean, LLM-ready Markdown for RAG pipelines, AI agents, and data extraction workflows.
- 84.9K
#2 · macrozheng/mallmall
Mall is a full e-commerce system with a storefront (mall-portal) and an admin backend (mall-admin), built on Spring Boot and MyBatis, meant as a complete reference implementation of online shopping.
- 48.2K
#3 · jeecgboot/JeecgBootJeecgBoot
JeecgBoot is an enterprise AI low-code platform: you describe what you need in natural language and it generates the front-end, back-end CRUD code, database tables and menu permissions, while also bundling a Dify-like AI app module with chat, RAG knowledge bases, flow orchestration and MCP plugins.
- 4

full-stack-fastapi-template
46Kfastapi/full-stack-fastapi-template · TypeScriptA full-stack web application template that bundles a FastAPI Python backend with a React/TypeScript frontend, a PostgreSQL database, and Docker Compose, giving you authentication, an admin dashboard, and deployment config already wired up.
- 5

kong
44.3KKong/kong · LuaKong is a cloud-native API gateway that also acts as an AI and MCP gateway, handling routing, load balancing, authentication, and traffic management for microservices and LLM/agentic traffic.
- 6

Hello-Python
37.8Kmouredev/Hello-Python · PythonThis is a free, Spanish-language video course that teaches the Python programming language from scratch, aimed at complete beginners.
- 7

filebrowser
35.9Kfilebrowser/filebrowser · GoFile Browser is a self-hosted file manager you point at a directory on your server, giving you a web interface to upload, delete, preview, and edit files inside it.
- 8
echo
32.8Klabstack/echo · GoEcho is a high performance, minimalist web framework for Go, used to build web apps, RESTful APIs and microservices.
- 9

SpringAll
28.9Kwuyouzhuguli/SpringAll · JavaA large collection of hands-on Spring tutorials in Chinese covering Spring Boot, Spring Boot & Shiro, Spring Batch, Spring Cloud, Spring Cloud Alibaba, and Spring Security & OAuth2, each paired with runnable example code and a companion blog post.
- 10

next-auth
28.4Knextauthjs/next-auth · TypeScriptAuth.js (the next-auth project) is a set of open-source packages for adding authentication to web apps, built on standard Web APIs and designed to work with any framework in any JS runtime.
- 11

postgrest
27.7KPostgREST/postgrest · HaskellPostgREST is a standalone server that turns any existing PostgreSQL database into a full RESTful API automatically — no backend code to write.
- 12

gin-vue-admin
25.1Kflipped-aurora/gin-vue-admin · GoA full-stack admin development platform: a Vue 3 + Element frontend and a Go (Gin) backend, pre-wired with JWT auth, casbin permissions, dynamic routes and menus, and code/form generators so you start on business logic instead of boilerplate.
- 13

API-Security-Checklist
23.3Kshieldfy/API-Security-ChecklistA community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.
- 14

eladmin
21.9Kelunez/eladmin · JavaELADMIN is an open-source, front-end/back-end separated admin management system built on Spring Boot 2.7.18, JPA, Spring Security, JWT, Redis and Vue — a base system that handles users, roles, menus and permissions for your own business apps.
- 15

livekit
21.5Klivekit/livekit · GoLiveKit is an open-source realtime platform for voice, video, and physical AI. This repo is its server: a scalable, distributed WebRTC SFU that routes audio, video, and data between people, devices, and AI models in shared rooms.
- 16

security-guide-for-developers
21.1KFallibleInc/security-guide-for-developersThis is a practical security guide for web developers that explains common security issues (authentication, encryption, sessions, attacks, etc.) and gives a checklist for building more secure systems.
- 17

mediamtx
20.4Kbluenviron/mediamtx · GoMediaMTX is a ready-to-use, zero-dependency live media server and media proxy: it publishes, reads, proxies, records and plays back real-time video and audio streams.
- 18

yaak
19.3Kmountain-loop/yaak · TypeScriptYaak is a free, open-source desktop API client for firing off REST, GraphQL, WebSocket, Server-Sent Events, and gRPC requests — a privacy-first alternative to Postman, Insomnia, and Bruno.
- 19

Sa-Token
19.1Kdromara/Sa-Token · JavaSa-Token is a free, open-source Java authentication and authorization framework covering login, permission checks, SSO, OAuth2.0 and microservice gateway auth — one lightweight dependency for all of it.
- 20
vue-admin-better
18.9Kzxwk1998/vue-admin-better · Vuevue-admin-better is an open-source Vue admin dashboard template: a ready-made admin panel skeleton with 40+ polished pages, RBAC + JWT permission control and dynamic backend-driven routing, already used in 100,000+ real projects.
- 21

node-jsonwebtoken
18.2Kauth0/node-jsonwebtoken · JavaScriptA Node.js implementation of JSON Web Tokens (JWT) for signing, verifying, and decoding tokens, built by Auth0.
- 22
hydra
17.6Kory/hydra · GoOry Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.
- 23

saas-starter
16.2Knextjs/saas-starter · TypeScriptA free, open-source starter template for building a SaaS web app on Next.js, maintained under the official Next.js org: authentication, Stripe payments, and a dashboard for logged-in users come already wired up.
- 24

pansou
14.9Kfish2018/pansou · GoPanSou is a high-performance API service for searching netdisk (cloud drive) share links. It concurrently searches Telegram channels and custom plugins, then classifies and ranks the results by drive type.
- 25
TREK
14.8Kliketrek/TREK · TypeScriptTREK is a self-hosted travel and trip planner with real-time collaborative editing, interactive maps, budgets, packing lists, a journal, and built-in AI features.
- 26

logto
14.7Klogto-io/logto · TypeScriptLogto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.
- 27
awesome-web-security
13.9Kqazbnm456/awesome-web-security · PythonA curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.
- 28

mall-learning
13.4Kmacrozheng/mall-learning · JavaThis is a learning tutorial that breaks down the architecture, business logic, and technical details of the 'mall' e-commerce project (a 60k+ star Java e-commerce system), covering SpringBoot, MyBatis, Elasticsearch, RabbitMQ, Redis, MongoDB, MySQL and Docker-based deployment.
- 29
go-admin
12.8Kgo-admin-team/go-admin · Gogo-admin is a full-stack scaffold for building admin/back-office management systems: a Gin-based Go REST API paired with a Vue frontend (Element UI, Arco Design, or Ant Design). It comes with RBAC permission control, multi-tenant support, JWT auth, a code generator, and a drag-and-drop form builder so you can bootstrap a management panel quickly.
- 30

claude-relay-service
12.7KWei-Shaw/claude-relay-service · JavaScriptClaude Relay Service (CRS) is a self-hosted relay/proxy you run yourself to access Claude (plus OpenAI/Codex, Gemini CLI, and Droid) through your own server, letting you manage multiple accounts and share subscription costs with friends.
- 31

jwt-auth
11.5Ktymondesigns/jwt-auth · PHPThis package adds JSON Web Token (JWT) based authentication to Laravel and Lumen applications, so you can authenticate API users with tokens instead of server-side sessions.
- 32

dex
11.2Kdexidp/dex · GoDex is an identity service that drives authentication for other apps over OpenID Connect. Through pluggable 'connectors' it defers logins to LDAP, SAML or providers like GitHub and Google, so clients write their auth logic once.
- 33

jjwt
11.1Kjwtk/jjwt · JavaJJWT is a pure Java library for creating, parsing, and verifying JSON Web Tokens (JWTs), signed/encrypted JWTs (JWS/JWE), and JSON Web Keys (JWKs) on the JVM and Android.
- 34

centrifugo
10.9Kcentrifugal/centrifugo · GoCentrifugo is an open-source, language-agnostic real-time messaging server that lets any backend push messages to connected clients over WebSocket, HTTP-streaming, SSE, GRPC or WebTransport. It acts as a self-hosted alternative to Pubnub, Pusher, Ably, Socket.IO, Phoenix.PubSub and SignalR.
- 35
tyk
10.9KTykTechnologies/tyk · GoTyk is an open-source, cloud-native API Gateway that lets you manage REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol) traffic in one place, adding authentication, rate limiting, quotas and analytics to your APIs.
- 36
jwt-go
10.7Kdgrijalva/jwt-go · GoA Go library implementing JSON Web Tokens (JWT): it parses, verifies, generates, and signs tokens.
- 37

Octop
9.7KTencentCloud/Octop · PythonOctop is an open-source, self-hosted AI assistant platform with a multi-agent architecture, built for individuals, families, and small teams to run their own team of specialized AI 'experts' entirely on their own machine.
- 38

sphere-sdk-connect-example
9.5Kunicity-sphere/sphere-sdk-connect-example · TypeScriptFour runnable example apps showing the ways a program can work with a Sphere wallet: a browser dApp, a Node dApp, a bot that runs its own wallet, and a backend that only authenticates a user.
- 39

agentic-inbox
8.3Kcloudflare/agentic-inbox · TypeScriptAgentic Inbox is a self-hosted email client with a built-in AI agent that runs entirely on your own Cloudflare account, using Cloudflare Workers, Durable Objects, R2 storage, and Workers AI.
- 40
MemoryBear
7.8KSuanmoSuanyangTechnology/MemoryBear · PythonMemoryBear is an AI memory system that gives AI agents human-like memory: instead of just storing knowledge statically, it perceives, extracts, associates and forgets information over time.
- 41

YunX
4.6KCYQawa/YunX · KotlinYunX (云析) is an open-source Android app that parses share links from Chinese cloud storage services and downloads the files directly, with chunked concurrent downloading and resume support.
- 42

ARTEX
4.4Kmhtsec/ARTEX · GoARTEX is an AI-driven autonomous penetration testing system with a Go backend (embedding a Next.js frontend) where LLM-powered agents plan and execute security testing against assets. It won first place in Baidu's 'Agent+' attack-defense challenge.
- 43

turnstone
1.6Kturnstonelabs/turnstone · PythonTurnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.
- 44

artex-global
1.6Kjiwoochris/artex-global · GoARTEX-KO is a Korean localization of the ARTEX (Autumn-27/ARTEX) framework: a system where multiple LLM-driven agents autonomously run a penetration test end-to-end, from reconnaissance to exploitation, with a Go backend and an embedded Next.js frontend.
- 45

ARTEX
1.2Ktrhhubsd/ARTEX · GoARTEX is an AI-driven autonomous penetration testing system (Go backend + Next.js frontend) where LLM-powered planner and worker agents explore targets, map assets, and find vulnerabilities on their own.
- 46

openframe-oss-tenant
1.1Kflamingo-stack/openframe-oss-tenant · ShellOpenFrame OSS Tenant is the open-source, multi-tenant foundation of OpenFrame, an AI-powered MSP (Managed Service Provider) platform that replaces expensive proprietary RMM/support software with intelligent automation, device management, and AI-assisted support.
- 47

-AI-
1.1Kgry67673905/-AI- · PythonA runnable full-stack demo of a 'smart government one-stop service' (一网通办) AI assistant: citizens, staff and admins interact through an Android local-asset portal backed by a FastAPI service, a read-only MCP server and PostgreSQL.
- 48

fanzha-ai-proxy
613lfzk550/fanzha-ai-proxyA reverse proxy that turns China's government 'National Anti-Fraud AI' (国家反诈AI) mobile assistant into an OpenAI-compatible API (/v1/chat/completions), so it can be plugged into normal AI chat clients.
- 49
SideRail
589icubaby/SideRail · TypeScriptSideRail is a neobrutalist web control panel for Xray-core VPN servers that you deploy to Railway with one click, giving you clean client links, live stats and subscription pages without manual config.
- 50

knoweldge-base
293rgem227/knoweldge-base · PythonKnoweldge Base is a self-hosted personal or team knowledge base: you upload documents into nested folders, preview them in the browser, and AI agents can read them through a read-only MCP service. This is the Phase 1 minimum viable version.
- 51

ApeAdmin
289KevinLiss/ApeAdmin · PythonApeAdmin is an open-source Python admin backend framework built on FastAPI and Vue3, aimed at modern AI applications. It bundles RBAC permission control and audit logging with a plugin ecosystem and an MCP-SSE gateway that exposes system and plugin capabilities as tools AI agents can call.
- 52

pi
20015838328874/pi · Pythonpi-py is a self-hostable, extensible AI agent platform: a Python reimplementation of the 'pi' coding agent harness, shipped as a multi-user HTTP service with sandboxed tool execution, multi-tenant governance, an eval harness, and an RL data flywheel.
- 53
zilan
200lxcshine/zilan · GoZilan is an LLM-powered knowledge management and Q&A platform that unifies RAG quick Q&A, ReAct agent reasoning, and auto-generated Wiki knowledge distillation into one minimalist knowledge hub.
- 54

financial_intelligence_system_web
197zhangzf1119/financial_intelligence_system_web · VueFinSight Enterprise Frontend is the Vue 3 + TypeScript frontend for FinSight, an enterprise intelligence management platform offering an admin dashboard, AI model chat, a RAG knowledge base, a file center, workflow approvals, system monitoring, log auditing and in-app messaging.
- 55

SIAPIN
184BagasRizkyHarySaputra/SIAPIN · TypeScriptSIAPIN is a free digital tutoring (bimbel) platform that helps Indonesian students prepare for the SNBT university entrance exam and TKA SMA/SMP exams, with practice questions, AI diagnostics, and PTN admission-probability estimates.
- 56

financial-intelligence-system
171zhangzf1119/financial-intelligence-system · JavaFinSight Enterprise Backend is a Spring Boot 3 backend for an enterprise intelligent management platform, covering RBAC, logging, monitoring, a file center, workflow approvals, in-app instant messaging, AI model chat and a RAG knowledge base.
- 57

clevis
169nazarli-shabnam/clevis · JavaScriptClevis is a self-hosted dashboard that turns the GitHub API into security and analytics insight for your repositories and organizations — it computes a security score from six automated checks (MFA enforcement, branch protection, secret scanning, Dependabot alerts, code scanning alerts, default-branch force-push protection) and lets admins run privileged maintenance jobs like clearing GitHub Actions caches.
- 58
StarLive
168SMNETSTUDIO/StarLive · TypeScriptStarLive is a self-hosted live-streaming and interaction platform: it handles the video stream, real-time danmaku/gifts/red-packets/lottery, moderation, and a built-in StarCoin virtual-currency economy. It's a rewrite of the legacy LDLive, moving from serverless HTTP polling to a standalone NestJS backend with persistent Socket.IO connections.
- 59

openframe-saas-desktop
156flamingo-stack/openframe-saas-desktop · RustOpenFrame Console is a Tauri 2 desktop shell for the OpenFrame SaaS platform. It wraps the openframe-oss-frontend static web export and adds OS-level features a browser tab can't do, like tray notifications, persistent sessions, and system-browser OAuth sign-in.
- 60

NodePilot
110Sev7eNup/NodePilot · C#NodePilot is an open-source, self-hosted platform for building and running Windows/PowerShell automation workflows, designed as a modern agentless replacement for Microsoft System Center Orchestrator.
Related topics
Often tagged together