#

Authorization

Authorization is the process of granting or denying permissions based on rules. This should not be confused with authentication, which is the act of verifying someone’s identitiy.

Here are 6,159 public repositories matching this topic...

casbin / casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

Updated Nov 21, 2025
Go

authentik

goauthentik / authentik

The authentication glue you need.

kubernetes security saml oauth2 authentication proxy reverse-proxy authorization sso oauth2-server oidc oauth2-client oidc-provider oidc-client saml-idp saml-sp authentik

Updated Nov 29, 2025
Python

Sa-Token

dromara / Sa-Token

一个轻量级 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式Session会话、微服务网关鉴权、单点登录、OAuth2.0

java authorization sso token springcloud aouth2

Updated Nov 10, 2025
Java

ory / hydra

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

Updated Nov 28, 2025
Go

zitadel

zitadel / zitadel

ZITADEL - Identity infrastructure, simplified for you.

identity saml oauth2 authentication login authorization sso user openid-connect oidc mfa scim multitenancy 2fa fido2 passkeys

Updated Nov 28, 2025
Go

cas

apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

Updated Nov 29, 2025
Java

fastapi_mcp

tadata-org / fastapi_mcp

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

ai authentication mcp openapi authorization cursor claude windsurf fastapi llm mcp-servers mcp-server modelcontextprotocol

Updated Nov 24, 2025
Python

logto

logto-io / logto

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

Updated Nov 28, 2025
TypeScript

open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

json declarative policy authorization opa cloud-native compliance open-policy-agent

Updated Nov 28, 2025
Go

stalniy / casl

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

permissions acl authorization cancan casl isomorphic-javascript

Updated Nov 28, 2025
JavaScript

spicedb

authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

kubernetes security distributed-systems database permissions acl authorization rbac cloud-native entitlements abac security-tools ciam fga fine-grained-access-control zanzibar fine-grained-authorization rebac

Updated Nov 27, 2025
Go

Permify / permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

kubernetes golang security permissions acl grpc distributed authorization permission rbac cloud-native access-control abac ciam fga least-privilege fine-grained-access-control zanzibar rebac

Updated Nov 28, 2025
Go

CanCanCommunity / cancancan

The authorization Gem for Ruby on Rails.

rails authorization cancancan

Updated Jan 27, 2025
Ruby

doorkeeper-gem / doorkeeper

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

grape identity oauth oauth2 authentication oauth2-provider authorization oauth2-server ruby-on-rails doorkeeper

Updated Nov 21, 2025
Ruby

opal

permitio / opal

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

microservices websocket realtime pubsub policy authorization opa opal hacktoberfest cedar open-policy-agent policy-as-code openfga

Updated Nov 26, 2025
Python

ory / keto

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

permissions iam acl authorization rbac access-control hacktoberfest abac policy-management permission-management zanzibar rebac fine-grained-permissions relation-tuples

Updated Nov 28, 2025
Go

unkeyed / unkey

The Developer Platform for Modern APIs

api open-source authentication gateway authorization rate-limiter api-keys

Updated Nov 28, 2025
TypeScript

ockam

build-trust / ockam

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

rust security distributed-systems identity encryption kafka authentication credentials messaging snowflake authorization encrypted-connections trust encrypted-messages e2ee key-management end-to-end-encryption zero-trust

Updated Nov 3, 2025
Rust

google / santa

A binary authorization and monitoring system for macOS

macos security blocklist santa authorization endpoint-security allowlist system-extension

Updated Feb 5, 2025
Objective-C++

openfga / openfga

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

go golang security permissions authorization rbac entitlements hacktoberfest abac fga pbac fine-grained-access-control zanzibar fine-grained-authorization rebac openfga

Updated Nov 28, 2025
Go

Followers: 66 followers
Website: github.com/topics/authorization
Wikipedia: Wikipedia