Assembly Line

Open-source authentication libraries and frameworks in 2026

30 open-source projects, ranked by GitHub stars and how recently each was worked on. Better Auth leads with 31k stars, ahead of Authelia. 28 had code pushed in the last three months. Most common licenses: MIT (11), Apache-2.0 (8) and BSD-3-Clause (4). Commercial authentication libraries and frameworks are listed separately.

New this season

  1. 1
    openGym DuarteSantos8

    Open-source gym & body-weight tracker, now in the App Store (iPhone + Apple Watch) and as an Android APK. Plan routines, log workouts, see which muscles are trained, import from Strong/Hevy/FitNotes. Self-host it or use it on the phone alone.

    Complete system Experimental You want a free workout log you can self-host or keep on your phone, without a subscription app.

    ★ 18k AGPL-3.0 JavaScript Active, pushed 2 days ago

All open-source authentication libraries and frameworks, ranked

Complete systems you can adopt 10

  1. 1
    Authelia authelia

    The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

    Complete system Production-ready You self-host several web apps behind Nginx, Traefik or Caddy and want one login with MFA in front of them.

    ★ 29k Apache-2.0 Go Active, pushed today
  2. 2
    openGym DuarteSantos8

    Open-source gym & body-weight tracker, now in the App Store (iPhone + Apple Watch) and as an Android APK. Plan routines, log workouts, see which muscles are trained, import from Strong/Hevy/FitNotes. Self-host it or use it on the phone alone.

    Complete system Experimental You want a free workout log you can self-host or keep on your phone, without a subscription app.

    ★ 18k AGPL-3.0 JavaScript Active, pushed 2 days ago
  3. 3
    Casdoor casdoor

    An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

    Complete system Production-ready You want a self-hosted SSO and user management server that is simpler to run than Keycloak.

    ★ 15k Apache-2.0 Go Active, pushed yesterday
  4. 4
    Hanko teamhanko

    Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

    Complete system Usable You want passkey-first login with drop-in UI components and the option to self-host.

    ★ 9.1k AGPL-3.0 Go Active, pushed 5 days ago
  5. 5
    Kanidm kanidm

    Kanidm: A simple, secure, and fast identity management platform

    Complete system Usable You want a modern self-hosted replacement for FreeIPA or OpenLDAP to manage people and Linux logins.

    ★ 5.5k MPL-2.0 Rust Active, pushed 6 days ago
  6. 6
    SyncTV synctv-org

    Synchronized viewing, theater, live streaming, video

    Complete system Usable You want to watch videos in sync with friends on your own server.

    ★ 2.5k MIT Rust Active, pushed 19 days ago
  7. 7
    Authgear-server authgear

    Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

    Complete system Usable A SaaS or mobile app team wants Auth0-style customer login it can self-host or buy as cloud.

    ★ 2.1k Apache-2.0 Go Active, pushed 7 days ago
  8. 8
    privacyIDEA privacyidea

    :closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)

    Complete system Production-ready An organisation needs on-premises MFA across VPNs, Windows logins and applications under its own control.

    ★ 1.8k AGPL-3.0 Python Active, pushed 4 days ago
  9. 9
    Rauthy sebadob

    Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM

    Complete system Usable You want a small, low-resource OIDC provider for self-hosted apps instead of Keycloak.

    ★ 1.4k Apache-2.0 Rust Active, pushed 4 days ago
  10. 10
    TheIdServer Aguafrommars

    OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

    Complete system Usable A .NET shop wants an IdentityServer-based provider with a ready admin interface.

    ★ 756 Apache-2.0 C# Active, pushed 7 days ago

Building blocks for your own system 17

  1. 1
    Better Auth better-auth

    The most comprehensive authentication framework

    Building block Production-ready You are building a TypeScript web app and want auth in your own codebase and database instead of a hosted service.

    ★ 31k MIT TypeScript Active, pushed yesterday
  2. 2
    Devise heartcombo

    Flexible authentication solution for Rails with Warden.

    Building block Production-ready You are building a Rails app with conventional email and password accounts.

    ★ 24k MIT Ruby Active, pushed 27 days ago
  3. 3
    Django-allauth pennersr

    Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/

    Building block Production-ready You build a Django site that needs user accounts and social or SSO login.

    ★ 10k MIT Python Active, pushed 7 days ago
  4. 4
    Oauth2-server thephpleague

    A spec compliant, secure by default PHP OAuth 2.0 Server

    Building block Production-ready You need to issue OAuth tokens from a PHP application; Laravel Passport is built on it.

    ★ 6.7k MIT PHP Active, pushed 9 days ago
  5. 5
    Next-auth nextauthjs

    Authentication for the Web.

    Building block Production-ready You maintain an existing Next.js app on NextAuth or need stateless sessions without a database.

    ★ 28k ISC TypeScript Slowing, pushed 3 months ago
  6. 6
    Doorkeeper doorkeeper-gem

    Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

    Building block Production-ready Your Rails app needs to offer an OAuth API to third-party or mobile clients.

    ★ 5.5k MIT Ruby Active, pushed 14 days ago
  7. 7
    Authlib authlib

    The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.

    Building block Production-ready You implement OAuth or OIDC in Python, either consuming providers or running your own server.

    ★ 5.4k BSD-3-Clause Python Active, pushed 8 days ago
  8. 8
    Node-oidc-provider panva

    OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

    Building block Production-ready You need your Node.js app to act as a standards-compliant identity provider.

    ★ 3.8k MIT JavaScript Active, pushed today
  9. 9
    Oauth2 go-oauth2

    OAuth 2.0 server library for the Go programming language.

    Building block Usable You need a basic OAuth 2.0 token server embedded in a Go service.

    ★ 3.6k MIT Go Active, pushed 2 months ago
  10. 10
    OpenSK google

    OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

    Building block Experimental You research security keys or build your own hardware token for experimentation.

    ★ 3.5k Apache-2.0 Rust Active, pushed 4 days ago
  11. 11
    SimpleWebAuthn MasterKale

    WebAuthn, Simplified. A collection of TypeScript-first libraries for simpler WebAuthn integration. Supports modern browsers, Node, Deno, and more.

    Building block Production-ready You add passkey login to a JavaScript or TypeScript app and want the WebAuthn details handled.

    ★ 2.4k MIT TypeScript Active, pushed 6 days ago
  12. 12
    Fido2-net-lib passwordless-lib

    Passkeys, FIDO2 and WebAuthn .NET library.

    Building block Production-ready You add passkey authentication to a .NET application.

    ★ 1.5k MIT C# Active, pushed 5 days ago
  13. 13
    WebAuthn go-webauthn

    FIDO2 Conformant WebAuthn and Passkey backend library for golang

    Building block Production-ready You add passkey login to a Go server.

    ★ 1.4k BSD-3-Clause Go Active, pushed 5 days ago
  14. 14
    Py_webauthn duo-labs

    Pythonic WebAuthn 🐍

    Building block Production-ready You add passkey login to a Python web app.

    ★ 1.1k BSD-3-Clause Python Active, pushed 25 days ago
  15. 15
    WebAuthn ruby cedarcode

    WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party

    Building block Production-ready You add passkey or security-key login to a Ruby app.

    ★ 777 MIT Ruby Active, pushed 10 days ago
  16. 16
    Webauthn-rs kanidm

    An implementation of webauthn components for Rustlang servers

    Building block Usable You add passkey authentication to a Rust web service.

    ★ 716 MPL-2.0 Rust Active, pushed 4 days ago
  17. 17
    Polis ory

    Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

    Building block Production-ready Enterprise customers ask your SaaS for SAML SSO and SCIM and you do not want to switch identity providers.

    ★ 2.3k Apache-2.0 TypeScript Slowing, pushed 3 months ago

Integrations 1

  1. 1
    Caddy-security greenpau

    🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

    Integration Usable You already use Caddy and want authentication at the proxy without running a separate SSO server.

    ★ 2.3k Apache-2.0 Go Active, pushed 6 days ago

Developer tools 1

  1. 1
    Yubikey-manager Yubico

    Python library and command line tool for configuring any YubiKey over all USB interfaces.

    Developer tool Production-ready You set up or administer YubiKeys from scripts or the terminal.

    ★ 1.2k BSD-2-Clause Python Active, pushed 7 days ago

Templates and starters 1

  1. 1
    Webauthn.io duo-labs

    The source code for webauthn.io, a demonstration of WebAuthn.

    Template or starter Usable You want a reference implementation to learn how WebAuthn ceremonies work in practice.

    ★ 746 BSD-3-Clause Python Active, pushed 3 months ago

Also under identity providers and single sign-on servers

Authorization and permission engines

Open-source licenses

  • Permissive: 25. Use it anywhere, including in closed products. You keep the copyright notice; Apache-2.0 also grants patent rights.
  • Network copyleft: 3. Like GPL, and running a changed version as a web service counts as distributing it, so its users get the source too.
  • Weak copyleft: 2. Changes to the licensed files must be shared, but you can link them into a closed program.

Languages

Go 7, Python 6, Rust 5, TypeScript 4, Ruby 3, JavaScript 2, C# 2 and PHP 1.

Made software that belongs here? Add it. Listing is free.