#authorization (30 Repositories)
Ranked open-source repositories tagged with #authorization, scored by pull request acceptance likelihood and maintainer engagement velocity.
81.0%
21.4h
30 repositories tagged #authorization
thunder-id/thunderid
ThunderID is a high-performance, open-source identity stack designed for developers to secure and manage access for humans, AI agents, and machines through fully composable identity flows.
raystack/frontier
Frontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk, WorkOS)
discord/access
Access, a centralized portal for employees to transparently discover, request, and manage their access for all internal systems needed to do their jobs
DobermanCore/Doberman-Core
Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.
wso2/product-is
Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
fu351/Doberman-Core
Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.
open-policy-agent/opa-envoy-plugin
A plugin to enforce OPA policies with Envoy
zitadel/zitadel
ZITADEL - Identity infrastructure, simplified for you.
Firma-AI/openfirma
Runtime enforcement boundary for AI agents: a local sidecar that gates every outbound call against Cedar policies you own. Deterministic, call-level, no model on the hot path
cerbos/cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
kontext-security/kontext
Runtime Security for tool-using AI agents, with local policies, pre-action enforcement, and forensic audit trails.
AthenZ/athenz
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.
open-policy-agent/opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
chaitin/OctoBus
A secure local gateway for AI agents to reliably call approved enterprise APIs, tools, and services.
hexclave/hexclave
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
logto-io/logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
zenstackhq/zenstack
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
jwt-dotnet/jwt
Jwt.Net, a JWT (JSON Web Token) implementation for .NET
openfga/go-sdk
OpenFGA SDK for Go
unkeyed/unkey
The Developer Platform for Modern APIs
panva/node-oidc-provider
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
OpenIdentityPlatform/OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Lokicoule/nestjs-cognito
AWS Cognito authentication for NestJS: JWT guards, groups and OAuth scopes, GraphQL, WebSockets and microservices.
Garudex-Labs/caracal
🐾 Authority, not credentials, for AI agents: policy-approved actions, delegation that can only narrow, instant revocation, tamper-evident audit.
pundit-community/pundit-matchers
A set of RSpec matchers for testing Pundit authorisation policies.
leodip/goiabada
Goiabada is an OAuth2 / OpenID Connect server written in Go.
emiliaprotocol/emilia-protocol
Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.
dadrus/heimdall
A cloud native Identity Aware Proxy and Access Control Decision service
CaoMeiYouRen/caomei-auth
草梅 Auth 是一个基于 Nuxt 全栈框架的统一登录平台。支持 OAuth2.0 协议，集成邮箱、用户名、手机号、验证码、社交媒体等多种登录注册方式。
Abblix/Oidc.Server
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects