Topics / #oidc

Oidc projects on GitHub

OpenID Connect identity protocol layered on OAuth

As of , the most-starred Oidc projects on GitHub are new-api (50.1K stars), keycloak (37.4K stars) and remix (33.4K stars). GitHub.Locker tracks 44 Oidc repositories with 615.2K stars combined. The fastest-growing on October 16 was new-api, with +44 stars in a day.

44Projects
615.2KStars in total
+407Stars in a day
Browse in the catalog →github.com/topics/oidc ↗

Hot right now

Most stars gained in a day · Oct 16

+44

new-api

QuantumNous/new-api · ★ 50.1K

New API is a self-hosted gateway that unifies access to many AI providers (OpenAI, Claude, Gemini, DeepSeek, etc.) behind a single endpoint, converting between OpenAI-, Claude-, and Gemini-compatible formats and giving you usage tracking, billing, and access control.

+34

Termix

Termix-SSH/Termix · ★ 15.5K

Termix is a free, self-hosted platform that puts SSH terminals, remote desktop (RDP/VNC/Telnet), file transfers over SFTP, Docker and Podman management, host metrics, and automations for your servers in one web, desktop, and mobile app.

+28

onyx

onyx-dot-app/onyx · ★ 32.5K

Onyx is an open source AI platform that gives you a full-featured chat interface on top of any LLM, with built-in RAG, web search, agents, and more.

+25

bifrost

maximhq/bifrost · ★ 8.9K

An open-source, high-performance AI gateway that unifies 23+ LLM providers behind a single OpenAI-compatible API, with automatic failover, load balancing, semantic caching, and budget controls built in.

The all-time top

44 projects · by stars

  1. #1 · QuantumNous/new-api

    new-api

    New API is a self-hosted gateway that unifies access to many AI providers (OpenAI, Claude, Gemini, DeepSeek, etc.) behind a single endpoint, converting between OpenAI-, Claude-, and Gemini-compatible formats and giving you usage tracking, billing, and access control.

    50.1K
  2. #2 · keycloak/keycloak

    keycloak

    Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

    37.4K
  3. #3 · remix-run/remix

    remix

    Remix 3 is a full-stack web framework built directly on Web APIs (Streams, Fetch, Web Crypto) rather than bundler-specific abstractions, distributed as one umbrella 'remix' package made of many standalone JS/TS tools.

    33.4K
  1. 4

    homepage

    33.2Kgethomepage/homepage · JavaScript

    Homepage is a fully static, highly customizable application dashboard (startpage) that aggregates service widgets, Docker container stats, bookmarks, and information widgets like weather and search in one place.

  2. 5

    onyx

    32.5Konyx-dot-app/onyx · Python

    Onyx is an open source AI platform that gives you a full-featured chat interface on top of any LLM, with built-in RAG, web search, agents, and more.

  3. 6

    better-auth

    30.3Kbetter-auth/better-auth · TypeScript

    It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

  4. 7

    next-auth

    28.4Knextauthjs/next-auth · TypeScript

    Auth.js (the next-auth project) is a set of open-source packages for adding authentication to web apps, built on standard Web APIs and designed to work with any framework in any JS runtime.

  5. 8

    wg-easy

    27.2Kwg-easy/wg-easy · TypeScript

    wg-easy is an all-in-one package that bundles WireGuard VPN with a web-based admin UI, letting you install and manage WireGuard on a Linux host without touching config files manually.

  6. 9

    authentik

    26Kgoauthentik/authentik · Python

    authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

  7. 10

    pangolin

    23.1Kfosrl/pangolin · TypeScript

    Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.

  8. 11

    casbin

    20.5Kapache/casbin · Go

    An open-source access control library for Go projects: it enforces authorization based on configurable models like ACL, RBAC and ABAC.

  9. 12

    hydra

    17.6Kory/hydra · Go

    Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.

  10. 13

    FreshRSS

    16.3KFreshRSS/FreshRSS · PHP

    FreshRSS is a free, self-hosted RSS feed aggregator: it pulls all your news feeds into one web interface. It is lightweight and customizable, supports multiple users (with an anonymous reading mode), and ships both a client API and a CLI.

  11. 14

    Termix

    15.5KTermix-SSH/Termix · TypeScript

    Termix is a free, self-hosted platform that puts SSH terminals, remote desktop (RDP/VNC/Telnet), file transfers over SFTP, Docker and Podman management, host metrics, and automations for your servers in one web, desktop, and mobile app.

  12. 15

    zitadel

    15.3Kzitadel/zitadel · Go

    ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

  13. 16

    oauth2-proxy

    15.2Koauth2-proxy/oauth2-proxy · Go

    OAuth2 Proxy is an open-source reverse proxy that adds authentication to your web apps using OAuth2/OIDC providers like Google, Azure, GitHub or any generic OIDC provider.

  14. 17

    stalwart

    15.1Kstalwartlabs/stalwart · Rust

    Stalwart is an all-in-one, open-source mail and collaboration server written in Rust that supports email (JMAP, IMAP4, POP3, SMTP), calendaring (CalDAV), contacts (CardDAV) and file storage/sharing (WebDAV) in a single binary.

  15. 18

    TREK

    14.8Kliketrek/TREK · TypeScript

    TREK is a self-hosted travel and trip planner with real-time collaborative editing, interactive maps, budgets, packing lists, a journal, and built-in AI features.

  16. 19

    casdoor

    14.6Kcasdoor/casdoor · Go

    Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

  17. 20

    kratos

    13.9Kory/kratos · Go

    An open source, API-first identity and user management server for cloud-native apps: it centralizes login, registration, recovery, verification, and profile management so your app doesn't reimplement them.

  18. 21

    planka

    12.6Kplankanban/planka · JavaScript

    PLANKA is an open-source, self-hosted Kanban board for team project tracking, pitched as a Trello alternative with a free Community edition and an optional paid Pro edition for organisations.

  19. 22

    Kavita

    11.9KKareadita/Kavita · C#

    Kavita is a self-hosted, cross-platform reading server for managing and reading your own digital library, covering manga, comics, webtoons and ebooks in one place.

  20. 23

    linkding

    11.3Ksissbruecker/linkding · Python

    Linkding is a self-hosted bookmark manager built to be minimal, fast, and quick to set up with Docker, so you keep full control of your own bookmarks instead of relying on a third-party service.

  21. 24

    dex

    11.2Kdexidp/dex · Go

    Dex is an identity service that drives authentication for other apps over OpenID Connect. Through pluggable 'connectors' it defers logins to LDAP, SAML or providers like GitHub and Google, so clients write their auth logic once.

  22. 25

    kutt

    11.2Kthedevs-network/kutt · JavaScript

    Kutt is a free, open-source URL shortener you can self-host: it shortens links on custom domains, keeps private statistics per link, and ships an admin panel and a RESTful API.

  23. 26

    tyk

    10.9KTykTechnologies/tyk · Go

    Tyk is an open-source, cloud-native API Gateway that lets you manage REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol) traffic in one place, adding authentication, rate limiting, quotas and analytics to your APIs.

  24. 27

    django-allauth

    10.4Kpennersr/django-allauth · Python

    An integrated set of Django applications covering authentication, registration, account management, and third-party (social) account login — local and social sign-in flows in one package.

  25. 28

    bifrost

    8.9Kmaximhq/bifrost · Go

    An open-source, high-performance AI gateway that unifies 23+ LLM providers behind a single OpenAI-compatible API, with automatic failover, load balancing, semantic caching, and budget controls built in.

  26. 29

    filebrowser

    8.8Kgtsteffaniak/filebrowser · Go

    FileBrowser Quantum is a self-hosted web app that lets you browse, manage, preview, and edit your files through a browser, with a modern responsive UI.

  27. 30

    dockhand

    6.8KFinsys/dockhand · TypeScript

    Dockhand is a self-hosted web UI for managing Docker environments - containers, Compose stacks, images, and volumes - across local and remote hosts, with live monitoring, logs, and a built-in terminal.

  28. 31

    SparkyFitness

    6.4KCodeWithCJ/SparkyFitness · TypeScript

    SparkyFitness is a self-hosted fitness and health tracker built for families, covering nutrition, exercise, water, sleep, fasting, mood and body measurements while keeping all your data on infrastructure you control.

  29. 32

    xyops

    6.3Kpixlcore/xyops · JavaScript

    xyOps is a self-hosted platform for job scheduling, visual workflow automation, server monitoring, alerting, and incident response — the next generation of the Cronicle scheduler.

  30. 33

    ha-mcp

    5.1Khomeassistant-ai/ha-mcp · Python

    ha-mcp is an unofficial Model Context Protocol (MCP) server that lets AI assistants like Claude, ChatGPT, and others control and query a Home Assistant smart home installation using natural language — creating automations, controlling devices, managing dashboards and more.

  31. 34

    grimmory

    4.5Kgrimmory-tools/grimmory · Java

    Grimmory is a self-hosted digital library for managing and reading your own ebooks, comics, and audiobooks, with built-in reading, metadata lookup, and progress sync.

  32. 35

    walgit

    2.6Ktobi/walgit · Rust

    walgit is a single-binary git server that stores every repository as a write-ahead log in an S3 or GCS bucket instead of a database. It implements smart HTTP git (v0/v2), bundle-uri clones, Git LFS, a web browsing UI, and a JSON API with an SDK, and it can scale to repositories larger than the machine running it.

  33. 36

    turnstone

    1.6Kturnstonelabs/turnstone · Python

    Turnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.

  34. 37

    taskview-community

    1.3KGimanh/taskview-community · TypeScript

    TaskView is a self-hosted project and task management platform that combines task tracking, custom workflows, developer integrations, analytics, and AI-assisted automation, built for teams that want a transparent alternative to SaaS task managers.

  35. 38

    chatbot-template

    1.2Kshadcn-ui/chatbot-template · TypeScript

    A minimal chatbot template built with Next.js, the AI SDK, and shadcn/ui, wired up to run on the Vercel AI Gateway.

  36. 39

    os

    821iblai/os · TypeScript

    ibl.ai/os is an open-source AI agent platform for building, deploying, and managing intelligent conversational agents, from prototype to production, with support for any LLM provider.

  37. 40

    Trenova

    330emoss08/Trenova · Go

    Trenova is an open-source (Fair Source) Transportation Management System for small and mid-sized US trucking carriers, covering the full order-to-cash cycle: shipment entry, dispatch, rating, billing, accounting, EDI, and FMCSA compliance.

  38. 41

    neckbeard

    245bealesh/neckbeard · Go

    A Claude Code plugin that turns an app repo into cloud infrastructure on AWS, GCP, or Azure, using a human-maintained catalog of tested OpenTofu modules, plus a cost estimate shown before anything is deployed.

  39. 42

    forge

    213cisco-open/forge · HCL

    ForgeMT is an open-source platform from Cisco for running self-hosted GitHub Actions runners on your own AWS accounts — ephemeral EC2 runners and Kubernetes ARC runner scale sets, operated as code across many tenant repos.

  40. 43

    walgithub

    134rgodha24/walgithub · Rust

    walgit is a self-hosted git server that runs as a single binary in front of an S3 or GCS bucket instead of a database or local disk. The bucket is the repository, and every running instance is just a disposable cache, so you can add or kill servers without coordination.

  41. 44

    NodePilot

    110Sev7eNup/NodePilot · C#

    NodePilot is an open-source, self-hosted platform for building and running Windows/PowerShell automation workflows, designed as a modern agentless replacement for Microsoft System Center Orchestrator.

Often tagged together