Topics / #oauth2

Oauth2 projects on GitHub

Authorization framework for delegating access to APIs and apps.

As of , the most-starred Oauth2 projects on GitHub are supabase (111.7K stars), mastodon (50.4K stars) and JeecgBoot (48.2K stars). GitHub.Locker tracks 84 Oauth2 repositories with 1.3M stars combined. The fastest-growing on October 16 was LibreChat, with +62 stars in a day.

84Projects
1.3MStars in total
+698Stars in a day
Browse in the catalog →github.com/topics/oauth2 ↗

Hot right now

Most stars gained in a day · Oct 16

+62

LibreChat

LibreChat-AI/LibreChat · ★ 45.8K

LibreChat is a self-hosted AI chat platform that unifies all major AI providers (OpenAI, Anthropic, Google, AWS Bedrock, Azure, Mistral, OpenRouter and more) in a single ChatGPT-like interface, with Agents, MCP support, Code Interpreter and Artifacts built in.

+59

romm

rommapp/romm · ★ 13.8K

RomM (ROM Manager) is a self-hosted web app that scans, organizes, enriches and lets you play your retro game ROM collection, pulling metadata and artwork from multiple providers and covering 400+ platforms.

+55

corsair

corsairdev/corsair · ★ 14.9K

Corsair is an open-source integration platform that lets your app or AI agents connect to third-party apps through one unified REST API, instead of writing separate OAuth and glue code for every service.

+51

remoteai

piperhex/remoteai · ★ 1.1K

Remote AI (formerly Codex Switch) is a graphical AI programming workbench built around OpenAI Codex. It combines a chat-based coding assistant, project/Git management, and multi-account management in one desktop app, with web and mobile companions.

The all-time top

84 projects · by stars

  1. #1 · supabase/supabase

    supabase

    Supabase is an open source Postgres development platform that gives you a hosted Postgres database plus auth, auto-generated APIs, realtime subscriptions, storage, and edge functions, built as an open source alternative to Firebase.

    111.7K
  2. #2 · mastodon/mastodon

    mastodon

    Mastodon is a free, open-source social network server based on ActivityPub, where users can follow friends, discover new ones, and publish text, links, pictures, and video.

    50.4K
  3. #3 · jeecgboot/JeecgBoot

    JeecgBoot

    JeecgBoot is an enterprise AI low-code platform: you describe what you need in natural language and it generates the front-end, back-end CRUD code, database tables and menu permissions, while also bundling a Dify-like AI app module with chat, RAG knowledge bases, flow orchestration and MCP plugins.

    48.2K
  1. 4

    system-design

    46.6Kkaranpratapsingh/system-design

    It is a free course and ebook that teaches how to design large-scale systems and prepares readers for system design interviews.

  2. 5

    LibreChat

    45.8KLibreChat-AI/LibreChat · TypeScript

    LibreChat is a self-hosted AI chat platform that unifies all major AI providers (OpenAI, Anthropic, Google, AWS Bedrock, Azure, Mistral, OpenRouter and more) in a single ChatGPT-like interface, with Agents, MCP support, Code Interpreter and Artifacts built in.

  3. 6

    ruoyi-vue-pro

    39.9KYunaiV/ruoyi-vue-pro · Java

    RuoYi-Vue-Pro is an open-source enterprise admin management system backend built with Spring Boot, MyBatis Plus and Vue/Element, bundled with a WeChat mini-program and optional business modules like Mall, CRM, ERP, OA, MES and IM.

  4. 7

    Hello-Python

    37.8Kmouredev/Hello-Python · Python

    This is a free, Spanish-language video course that teaches the Python programming language from scratch, aimed at complete beginners.

  5. 8

    keycloak

    37.4Kkeycloak/keycloak · Java

    Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

  6. 9

    hackathon-starter

    35.3Ksahat/hackathon-starter · JavaScript

    Hackathon Starter is a boilerplate for Node.js web applications that bundles login, OAuth, and dozens of API integrations so you don't have to set them up from scratch during a hackathon.

  7. 10

    cli

    31.6Kgoogleworkspace/cli · Rust

    A single command-line tool for all of Google Workspace — Drive, Gmail, Calendar, Sheets, Docs, Chat, Admin and more — with structured JSON output, built for humans and AI agents alike. It is not an officially supported Google product.

  8. 11

    better-auth

    30.3Kbetter-auth/better-auth · TypeScript

    It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

  9. 12

    django-rest-framework

    30.2Kencode/django-rest-framework · Python

    Django REST framework is a powerful and flexible toolkit for building Web APIs with Django: you add it to a project and get a full REST API around your data.

  10. 13

    authelia

    29.3Kauthelia/authelia · Go

    An open-source authentication and authorization server that adds single sign-on and two-factor authentication to your web apps via a web portal. It is OpenID Certified and Post-Quantum Cryptography Ready.

  11. 14

    swagger-ui

    29Kswagger-api/swagger-ui · JavaScript

    Swagger UI turns an OpenAPI (formerly Swagger) spec into interactive, visual API documentation: your team or end consumers can see and try the API's resources without any implementation logic in place.

  12. 15

    SpringAll

    28.9Kwuyouzhuguli/SpringAll · Java

    A large collection of hands-on Spring tutorials in Chinese covering Spring Boot, Spring Boot & Shiro, Spring Batch, Spring Cloud, Spring Cloud Alibaba, and Spring Security & OAuth2, each paired with runnable example code and a companion blog post.

  13. 16

    next-auth

    28.4Knextauthjs/next-auth · TypeScript

    Auth.js (the next-auth project) is a set of open-source packages for adding authentication to web apps, built on standard Web APIs and designed to work with any framework in any JS runtime.

  14. 17

    wg-easy

    27.2Kwg-easy/wg-easy · TypeScript

    wg-easy is an all-in-one package that bundles WireGuard VPN with a web-based admin UI, letting you install and manage WireGuard on a Linux host without touching config files manually.

  15. 18

    authentik

    26Kgoauthentik/authentik · Python

    authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

  16. 19

    passport

    23.5Kjaredhanson/passport · JavaScript

    Passport is Express-compatible authentication middleware for Node.js. Its sole purpose is authenticating requests, which it does through an extensible set of plugins called strategies.

  17. 20

    API-Security-Checklist

    23.3Kshieldfy/API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

  18. 21

    PHPMailer

    22.3KPHPMailer/PHPMailer · PHP

    PHPMailer is a full-featured email creation and transfer class for PHP — probably the world's most popular code for sending email from PHP, used by WordPress, Drupal, Joomla!, Yii, SugarCRM and many other open-source projects.

  19. 22

    security-guide-for-developers

    21.1KFallibleInc/security-guide-for-developers

    This is a practical security guide for web developers that explains common security issues (authentication, encryption, sessions, attacks, etc.) and gives a checklist for building more secure systems.

  20. 23

    docker-mailserver

    19.6Kdocker-mailserver/docker-mailserver · Shell

    A production-ready, fullstack but simple mail server — SMTP, IMAP, POP3, LDAP, anti-spam and anti-virus — that runs entirely inside a single Docker container.

  21. 24

    nodemailer

    17.7Knodemailer/nodemailer · TypeScript

    Nodemailer is a Node.js library for sending email: you hand it a message and it delivers it via SMTP or sendmail. It has been in active development since 2011.

  22. 25

    hydra

    17.6Kory/hydra · Go

    Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.

  23. 26

    JustAuth

    17.5Kjustauth/JustAuth · Java

    JustAuth is a small, feature-complete Java library for third-party OAuth login. It integrates dozens of Chinese and international providers, so you can add social login without wrestling each platform's own SDK.

  24. 27

    gsy_github_app_flutter

    15.5KCarGuo/gsy_github_app_flutter · Dart

    GSYGithubApp Flutter is an open-source Flutter app that works as a full-featured GitHub client, letting you browse repos, trending projects and notifications and manage your personal GitHub account from your phone.

  25. 28

    zitadel

    15.3Kzitadel/zitadel · Go

    ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

  26. 29

    oauth2-proxy

    15.2Koauth2-proxy/oauth2-proxy · Go

    OAuth2 Proxy is an open-source reverse proxy that adds authentication to your web apps using OAuth2/OIDC providers like Google, Azure, GitHub or any generic OIDC provider.

  27. 30

    stalwart

    15.1Kstalwartlabs/stalwart · Rust

    Stalwart is an all-in-one, open-source mail and collaboration server written in Rust that supports email (JMAP, IMAP4, POP3, SMTP), calendaring (CalDAV), contacts (CardDAV) and file storage/sharing (WebDAV) in a single binary.

  28. 31

    corsair

    14.9Kcorsairdev/corsair · TypeScript

    Corsair is an open-source integration platform that lets your app or AI agents connect to third-party apps through one unified REST API, instead of writing separate OAuth and glue code for every service.

  29. 32

    logto

    14.7Klogto-io/logto · TypeScript

    Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.

  30. 33

    casdoor

    14.6Kcasdoor/casdoor · Go

    Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

  31. 34

    coturn

    14.5Kcoturn/coturn · C

    coturn is a free, open-source implementation of a TURN and STUN server, used as a VoIP media relay and NAT traversal gateway, commonly deployed alongside WebRTC applications.

  32. 35

    libsodium

    14Kjedisct1/libsodium · C

    Libsodium is an easy-to-use software library providing cryptographic operations like encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable fork of NaCl that keeps API compatibility while improving usability.

  33. 36

    piggymetrics

    14Ksqshq/piggymetrics · Java

    Piggy Metrics is a simple personal finance app built to demonstrate the microservice architecture pattern with Spring Boot, Spring Cloud and Docker.

  34. 37

    kratos

    13.9Kory/kratos · Go

    An open source, API-first identity and user management server for cloud-native apps: it centralizes login, registration, recovery, verification, and profile management so your app doesn't reimplement them.

  35. 38

    romm

    13.8Krommapp/romm · Python

    RomM (ROM Manager) is a self-hosted web app that scans, organizes, enriches and lets you play your retro game ROM collection, pulling metadata and artwork from multiple providers and covering 400+ platforms.

  36. 39

    nightingale

    13.4Kccfos/nightingale · Go

    Nightingale is an open-source monitoring and alerting platform that focuses on generating, processing and distributing alarms, connecting to existing metrics/log data sources rather than collecting data itself.

  37. 40

    InsForge

    13.1KInsForge/InsForge · TypeScript

    InsForge is an all-in-one, open-source backend platform built for coding agents: it gives agents database, auth, storage, compute, hosting, and an AI gateway so they can ship full-stack apps end-to-end without a human wiring up the backend.

  38. 41

    gorilla

    13.1KShishirPatil/gorilla · Python

    Gorilla is a Berkeley research project that trains and evaluates LLMs for calling APIs and tools correctly from natural-language requests. It has grown into a suite covering finetuned models (OpenFunctions), the Berkeley Function Calling Leaderboard (BFCL), an execution runtime (GoEx), a RAG fine-tuning recipe (RAFT) and a CLI tool.

  39. 42

    onedrive

    12.9Kabraunegg/onedrive · Python

    A free, open-source Microsoft OneDrive client for Linux that syncs files with OneDrive Personal, OneDrive for Business, Microsoft 365 and SharePoint document libraries.

  40. 43

    nango

    12.7KNangoHQ/nango · TypeScript

    Nango is an open-source platform for building product integrations that connects your product and AI agents to over 900 APIs, handling auth, execution, scaling, and observability for you.

  41. 44

    google-api-nodejs-client

    12.3Kgoogleapis/google-api-nodejs-client · TypeScript

    This is Google's officially supported Node.js client library for calling Google APIs, with built-in support for OAuth 2.0, API keys, and JWT (service account) authentication.

  42. 45

    aspnetboilerplate

    12Kaspnetboilerplate/aspnetboilerplate · C#

    ASP.NET Boilerplate (ABP) is a general-purpose application framework for building modern ASP.NET web apps, implementing best practices like layered architecture and Domain Driven Design out of the box so you can focus on business code.

  43. 46

    cloudflare_temp_email

    12Kdreamhunter2333/cloudflare_temp_email · TypeScript

    A self-hosted temporary email service built on Cloudflare's free tier: create disposable email addresses on your own domain, receive mail (with attachments), send mail via SMTP/Resend, and manage everything through a modern web UI, Telegram bot, or admin console.

  44. 47

    martini

    11.6Kgo-martini/martini · Go

    Martini is a Go package for quickly writing modular web applications and services — a classic web framework built around handlers, routing, services and middleware.

  45. 48

    cas

    11.4Kapereo/cas · Java

    CAS (Central Authentication Service) is an enterprise multilingual identity provider and single sign-on server for the web: an open-source Java platform for centralizing authentication and authorization.

  46. 49

    dex

    11.2Kdexidp/dex · Go

    Dex is an identity service that drives authentication for other apps over OpenID Connect. Through pluggable 'connectors' it defers logins to LDAP, SAML or providers like GitHub and Google, so clients write their auth logic once.

  47. 50

    Zero

    10.9KMail-0/Zero · TypeScript

    Zero (Mail0) is an open-source, self-hostable email app that lets you connect Gmail, Outlook and other providers into one inbox, enhanced with AI agents, while keeping your data private.

  48. 51

    jwt-go

    10.7Kdgrijalva/jwt-go · Go

    A Go library implementing JSON Web Tokens (JWT): it parses, verifies, generates, and signs tokens.

  49. 52

    django-allauth

    10.4Kpennersr/django-allauth · Python

    An integrated set of Django applications covering authentication, registration, account management, and third-party (social) account login — local and social sign-in flows in one package.

  50. 53

    bookorbit

    5.4Kbookorbit/bookorbit · TypeScript

    BookOrbit is a self-hosted library and reading platform for ebooks, PDFs, audiobooks, and comics, with built-in web readers and sync across devices.

  51. 54

    cli

    5.2Kentireio/cli · Go

    Entire is a CLI that hooks into your Git workflow to capture AI coding agent sessions (prompts, responses, files touched) and indexes them alongside your commits, creating a searchable record of how code was written.

  52. 55

    FlowPilot

    5.2KQLHazyCoder/FlowPilot · JavaScript

    FlowPilot is a Chrome sidebar extension that automates bulk registration, authorization and account delivery for ChatGPT/OpenAI, plus independent Kiro and Grok sign-up flows.

  53. 56

    go-whatsapp-web-multidevice

    4.9Kaldinokemal/go-whatsapp-web-multidevice · Go

    GOWA is a self-hosted Go server that exposes WhatsApp as a REST API, so you can send messages, stickers and status updates, manage multiple linked WhatsApp accounts, and receive events via webhooks or an MCP server for AI agents.

  54. 57

    GuJumpgate

    3.9KFoundZiGu/GuJumpgate · JavaScript

    GuJumpgate is an archived Chrome extension that automated account registration and payment flows for a target platform - creating a Free account, upgrading it to Plus through a PayPal-via-Stripe billing chain, and managing Hotmail/Outlook email aliases. It stopped being maintained on 2026-07-11.

  55. 58

    turnstone

    1.6Kturnstonelabs/turnstone · Python

    Turnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.

  56. 59

    openframe-oss-tenant

    1.1Kflamingo-stack/openframe-oss-tenant · Shell

    OpenFrame OSS Tenant is the open-source, multi-tenant foundation of OpenFrame, an AI-powered MSP (Managed Service Provider) platform that replaces expensive proprietary RMM/support software with intelligent automation, device management, and AI-assisted support.

  57. 60

    remoteai

    1.1Kpiperhex/remoteai · TypeScript

    Remote AI (formerly Codex Switch) is a graphical AI programming workbench built around OpenAI Codex. It combines a chat-based coding assistant, project/Git management, and multi-account management in one desktop app, with web and mobile companions.

  58. 61

    outlook-auto-register

    1Klxf746/outlook-auto-register · Python

    A pure-protocol tool for bulk-registering Microsoft Outlook accounts that handles PerimeterX captcha solving, proxy rotation, recovery-email (proofs) binding, and reading mail via Graph/Outlook REST right after signup, all driven from a Web console or CLI.

  59. 62

    creator-agent

    905yvetteYSY/creator-agent · TypeScript

    Creator Agent is a platform for building an AI agent grounded in a creator's own documents, audio, and video, so an audience can ask it questions and get source-cited answers from that content.

  60. 63

    booking-microservices

    756evangelosvlachos96-dotcom/booking-microservices · C#

    A practical flight-booking system built as .NET 10 microservices, using Vertical Slice Architecture, DDD, CQRS, Event Sourcing, gRPC, RabbitMQ, Wolverine, PostgreSQL, MongoDB and .NET Aspire.

  61. 64

    anythingmcp

    753HelpCode-ai/anythingmcp · TypeScript

    AnythingMCP is a self-hosted MCP gateway that turns REST/OpenAPI, SOAP, GraphQL, OData or SQL APIs into MCP tools usable by Claude, ChatGPT and Copilot, shipping with hundreds of ready-made connectors for systems like SAP, ERPs and e-commerce platforms.

  62. 65

    grok-register

    521xinxinshuhao-create/grok-register · Python

    grok-register is an automated toolkit that registers x.ai (Grok) accounts, extracts their SSO tokens, mints OAuth access/refresh tokens via Device Flow, and runs a daemon that keeps replenishing an account pool for an API gateway like grok2api.

  63. 66

    postiz-agent

    520gitroomhq/postiz-agent · TypeScript

    Postiz Agents — a CLI plus agent skills that let AI agents like Claude Code or OpenClaw schedule and manage social media posts across 28+ platforms through the Postiz API.

  64. 67

    dsh-plugin-subscriptions

    473V1ki/dsh-plugin-subscriptions · TypeScript

    dsh-plugin-subscriptions is a DeepSeek Harness (dsh) plugin that lets you use your existing ChatGPT (Codex), Claude, Grok (X Premium), and GitHub Copilot subscriptions as LLM providers inside dsh, without separate API keys.

  65. 68

    OpenInstinct

    457Merit-Systems/OpenInstinct · TypeScript

    OpenInstinct is a personal iMessage assistant that can browse the web on your behalf to handle chores like booking movie tickets or ordering groceries, while keeping your passwords and credit cards locked in an encrypted vault you control.

  66. 69

    slashdocs

    380razorpay/slashdocs · Go

    slashdocs is a collaborative workspace where AI agents publish rich, self-contained HTML documents (reports, specs, dashboards, diagrams) and humans review them in the browser with anchored comments and versions.

  67. 70

    codflow

    368bighadj22/codflow · TypeScript

    CodFlow is an open-source, Cash-on-Delivery (COD) e-commerce and delivery platform built specifically for Algeria, deployable on your own Cloudflare account with zero transaction fees.

  68. 71

    github-farm

    354d4ncboz/github-farm · Python

    It is an automation framework that farms GitHub OAuth signup bonuses across multiple AI-gateway platforms (Tabi AI, GoRouter, CodeBuddy Global) by generating email aliases, catching their OTP codes over IMAP, and harvesting the resulting OAuth sessions.

  69. 72

    pl_mail

    331karatektus/pl_mail · PHP

    plMail is a self-hosted, Gmail-style mail client that connects to IMAP, Gmail, and Outlook mailboxes you already have, syncs them into your own PostgreSQL database, and gives you one inbox, search box, and set of labels in the browser.

  70. 73

    hivepaas

    305hivepaas/hivepaas · Go

    HivePaaS is a lightweight, self-hosted Platform-as-a-Service built on Docker Swarm, meant as a resource-efficient alternative to Heroku, Render, and Coolify for deploying apps on your own servers.

  71. 74

    omamail

    299huacnlee/omamail · QML

    Omamail is a native email client plugin for the Omarchy desktop (built on Hyprland/Quickshell) that reads, triages and answers mail from Gmail, Outlook, HEY, JMAP and IMAP accounts inside one themed window.

  72. 75

    submitmap-mcp

    276FifthWye/submitmap-mcp

    SubmitMap MCP is a remote MCP server that gives AI agents structured access to SubmitMap, a directory of product launch platforms and startup directories, where each platform is a typed record with eligibility rules, disqualifiers, submission steps, approval time and dofollow status.

  73. 76

    sentio

    254truespar/sentio · Rust

    Sentio is a complete multi-tenant email server for AI agents: it gives every agent its own real email address, delivers inbound mail as structured webhooks, and lets the agent reply in-thread over a REST API.

  74. 77

    labtether

    249labtether/labtether · Go

    LabTether is a self-hosted control plane that unifies monitoring and control of your homelab (Proxmox, TrueNAS, Docker, Home Assistant, etc.) into one dashboard with remote terminal, remote desktop, alerts, and an AI-operable interface.

  75. 78

    auth

    232yielded-dev/auth · TypeScript

    A composable authentication, session, and identity workflow library built specifically for the Effect ecosystem. You define your auth contract with Schema and wire up infrastructure through Effect Layers.

  76. 79

    vibeprospecting-mcp

    190explorium-ai/vibeprospecting-mcp · JavaScript

    Vibe Prospecting is a remote MCP server that connects your AI assistant to live B2B data, letting you build lead lists, research companies, enrich contacts, and personalize outreach without leaving the chat.

  77. 80

    freepp

    189mio-cc/freepp · Python

    This is min-implant-v2, a Python/Node research project that automates the ChatGPT subscription payment chain across many regional payment channels (PayPal, direct card, PIX, iDEAL, UPI, Kakao Pay, etc.) to study promo-code zero-cost subscription flows.

  78. 81

    openhikmah-web

    181OpenHikmah/openhikmah-web · TypeScript

    Open Hikmah is an AI-grounded Quran knowledge graph: you search for a verse, drop it on an infinite canvas, and expand it to surface thematic, linguistic (shared Arabic root), and theological connections to other verses.

  79. 82

    openframe-saas-desktop

    156flamingo-stack/openframe-saas-desktop · Rust

    OpenFrame Console is a Tauri 2 desktop shell for the OpenFrame SaaS platform. It wraps the openframe-oss-frontend static web export and adds OS-level features a browser tab can't do, like tray notifications, persistent sessions, and system-browser OAuth sign-in.

  80. 83

    walgithub

    134rgodha24/walgithub · Rust

    walgit is a self-hosted git server that runs as a single binary in front of an S3 or GCS bucket instead of a database or local disk. The bucket is the repository, and every running instance is just a disposable cache, so you can add or kill servers without coordination.

  81. 84

    calnode

    118Calnode/calnode · Go

    Calnode is a self-hostable scheduling app like Calendly or Cal.com, shipped as a single Go binary with an embedded SQLite database. It includes first-party video meetings, recording, AI notetaking, and is built API-first with a native MCP server for AI agents.

Often tagged together