Authentication
Authentication is the process of verifying who or what is requesting access to an application, service, or resource. It helps protect accounts and data by ensuring that access is granted only after a user or system proves its identity. Authentication often works alongside authorization, which determines what an authenticated identity is allowed to do. Common methods include passwords, passkeys, multi-factor checks, and identity federation across services.
Open source authentication tools range from reusable libraries and login components to identity servers and access gateways. When choosing one, consider its security practices, license, maintenance activity, documentation, deployment requirements, and compatibility with your existing systems. Teams should also assess support for account recovery, user management, and the sign-in methods they need. These tools are useful to developers, organizations, and administrators building or securing applications and internal services.
7 repositories · updated July 24, 2026
Awesome Django: A Curated List of Essential Django Resources and Packages
Awesome Django is a comprehensive curated list of outstanding Django apps, projects, and resources. It focuses on mature, well-maintained packages with good documentation and active user bases. This repository serves as an invaluable guide for developers looking for high-quality tools and examples within the Django ecosystem.
AuthKit: Streamlined Authentication with WorkOS and Radix
AuthKit is an open-source login box solution developed by WorkOS, designed to simplify authentication for applications. It offers both a fully themeable hosted UI and headless APIs for custom frontends, powered by WorkOS User Management and Radix UI. This TypeScript project supports various authentication flows, including OAuth2, passwordless, and SSO.
Logto: Open-Source Auth Infrastructure for SaaS and AI Apps
Logto is a modern, open-source authentication and authorization infrastructure designed for SaaS and AI applications. Built on OIDC and OAuth 2.1, it offers robust features like multi-tenancy, enterprise SSO, and RBAC. This platform simplifies secure identity management, providing pre-built sign-in flows and SDKs for various frameworks.
Defguard: Zero-Trust Access Management with WireGuard 2FA/MFA
Defguard is an open-source, enterprise-grade VPN solution built with Rust, offering zero-trust access management. It uniquely provides multi-factor authentication for WireGuard VPN connections, integrating with various SSO providers or its built-in SSO. This platform aims to simplify the secure management of complex VPN networks with advanced features like ACLs, YubiKey provisioning, and real-time client synchronization.
Authelia: Single Sign-On and Multi-Factor Authentication for Web Apps
Authelia is a robust, open-source authentication and authorization server designed to enhance the security of your web applications. It provides comprehensive two-factor authentication (2FA) and single sign-on (SSO) capabilities through an intuitive web portal. Seamlessly integrating with various reverse proxies, Authelia acts as a crucial companion for managing access control and securing your digital infrastructure.
Saleor Auth SDK: Streamlined Authentication for Next.js Storefronts
The Saleor Auth SDK provides a secure and customizable solution for integrating authentication and authorization into storefronts built with Saleor. It offers seamless integration with Next.js (App and Pages Router) and popular GraphQL clients like Apollo and urql, all within a tiny bundle size. This SDK simplifies complex auth flows, allowing developers to focus on building rich e-commerce experiences.
docker-tinyauth: Run TinyAuth Rootless, Distroless, and Truly Tiny
docker-tinyauth provides a highly secure and optimized Docker image for TinyAuth, a simple authentication middleware. It enables running TinyAuth rootless, distroless, and truly tiny, enhancing security and efficiency for your containerized applications. This image offers features like automatic updates, health checks, and CVE scanning, making it a robust choice for authentication needs.