jose-jwt - Ultimate Javascript Object Signing and Encryption (JOSE) and JSON Web Token (JWT) Implementation for

•    CSharp

---

Minimallistic zero-dependency library for generating, decoding and encryption JSON Web Tokens. Supports full suite of JSON Web Algorithms as of July 4, 2014 version. JSON parsing agnostic, can plug any desired JSON processing library. Extensively tested for compatibility with jose.4.j, Nimbus-JOSE-JWT and json-jwt libraries.v2.1 and above added extra features support for .NET461+ and coming with 3 version of binaries (NET4, NET461 and netstandard1.4).

jose jwt json jwa jwe jws fips jwt-token jwt-auth jwt-authentication encryption signature security openid oauth2 openidconnect federation netcore jwt-token-library jwt-library json-web-token

Authlib - An ambitious authentication library for OAuth 1, OAuth 2, OpenID clients and servers.

•    Python

---

The ultimate Python library in building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are included. Authlib is compatible with Python2.7+ and Python3.6+.

oauth oauth2 authlib oidc oauth2-server oauth2-provider flask django authentication jwt token

lua-resty-openidc - Lua implementation to make NGINX operate as an OpenID Connect RP or OAuth 2

•    Lua

---

lua-resty-openidc is a library for NGINX implementing the OpenID Connect Relying Party (RP) and/or the OAuth 2.0 Resource Server (RS) functionality. When used as an OpenID Connect Relying Party it authenticates users against an OpenID Connect Provider using OpenID Connect Discovery and the Basic Client Profile (i.e. the Authorization Code flow). When used as an OAuth 2.0 Resource Server it can validate OAuth 2.0 Bearer Access Tokens against an Authorization Server or, in case a JSON Web Token is used for an Access Token, verification can happen against a pre-configured secret/key .

nginx openidconnect openidc oauth2 jwt-bearer-tokens lua-resty-openidc

mod_auth_openidc - OpenID Connect Relying Party and OAuth 2

•    C

---

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server, validating OAuth 2.0 bearer access tokens presented by OAuth 2.0 Clients. This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party (RP) to an OpenID Connect Provider (OP). It authenticates users against an OpenID Connect Provider, receives user identity information from the OP in a so called ID Token and passes on the identity information (a.k.a. claims) in the ID Token to applications hosted and protected by the Apache web server.

apache-httpd openid-connect openidconnect-client oauth2 oauth2-resource-server oauth openidc

fosite - Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

•    Go

---

The security first OAuth2 & OpenID Connect framework for Go. Built simple, powerful and extensible. This library implements peer-reviewed IETF RFC6749, counterfeits weaknesses covered in peer-reviewed IETF RFC6819 and countermeasures various database attack scenarios, keeping your application safe when that hacker penetrates or leaks your database. OpenID Connect is implemented according to OpenID Connect Core 1.0 incorporating errata set 1 and includes all flows: code, implicit, hybrid.OAuth2 and OpenID Connect are difficult protocols. If you want quick wins, we strongly encourage you to look at Hydra. Hydra is a secure, high performance, cloud native OAuth2 and OpenID Connect service that integrates with every authentication method imaginable and is built on top of Fosite.

oauth oauth2 library sdk security auth authentication authorization openid-connect oauth2-server oauth2-provider

caddy-auth-portal - Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2

•    Go

---

Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0, SAML Authentication. The purpose of this plugin is providing authentication only. The plugin issue JWT tokens upon successful authentication. In turn, the authorization of the tokens is being handled by caddy-auth-jwt.

ldap jwt saml oauth2 authentication caddy jwt-tokens facebook-login ldap-authentication openid-connect authentication-backend user-registration caddy-plugin authentication-portal authentication-middleware user-identity github-authentication caddy2 caddy-module ldap-authentication-backend

ZITADEL - Cloud Native Identity and Access Management

•    Go

---

ZITADEL provides you with all the features necessary to build great solutions, without the need of building the login and access management yourself.

authentication user-management auth0-alternative kubernetes security identity jwt oauth2 angular cqrs iam auth event-sourcing sso cloud-native openid-connect oidc identity-provider access-control single-sign-on

go-jose - An implementation of JOSE standards (JWE, JWS, JWT) in Go

•    Go

---

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. This includes support for JSON Web Encryption, JSON Web Signature, and JSON Web Token standards.Disclaimer: This library contains encryption software that is subject to the U.S. Export Administration Regulations. You may not export, re-export, transfer or download this code or any part of it in violation of any United States law, directive or regulation. In particular this software may not be exported or re-exported in any form or on any media to Iran, North Sudan, Syria, Cuba, or North Korea, or to denied persons or entities mentioned on any US maintained blocked list.

jose json-web-encryption json-web-signature jwe jws jwt json-web-token crypto signing encryption jwt-token-library jwt-token jwt-library

MITREid Connect - An OpenID Connect reference implementation in Java on the Spring platform

•    Java

---

This project contains a certified OpenID Connect reference implementation in Java on the Spring platform, including a functioning server library, deployable server package, client (RP) library, and general utility libraries. The server can be used as an OpenID Connect Identity Provider as well as a general-purpose OAuth 2.0 Authorization Server.

oauth2 oauth2-server oauth2-provider security authentication

cpp-jwt - JSON Web Token library for C++

•    C++

---

JSON Web Token(JWT) is a JSON based standard (RFC-7519) for creating assertions or access tokens that consists of some claims (encoded within the assertion). This assertion can be used in some kind of bearer authentication mechanism that the server will provide to clients, and the clients can make use of the provided assertion for accessing resources. This provides JWT client support in C++.

jwt json-web-token security authentication

ORY Hydra - OpenID Connect and OAuth Provider written in Go

•    Go

---

ORY Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider (user sign up, user login, password reset flow), but connects to your existing identity provider through a login and consent app. Implementing the login and consent app in a different language is easy, and exemplary consent apps (Go, Node) and SDKs are provided.

docker security identity oauth oauth2 cloud server oauth2-provider authorization sso openid oauth2-server openid-connect oauth-provider openid-provider federation oidc hacktoberfest openid-connect-provider

Silhouette - Authentication library for Play Framework

•    Scala

---

Silhouette is an authentication library for Play Framework applications that supports several authentication methods, including OAuth1, OAuth2, OpenID, CAS, Credentials, Basic Authentication, Two Factor Authentication or custom authentication schemes.

silhouette oauth oauth1 oauth2 play-framework authentication openid cas oauth2-client

loginsrv - JWT login microservice with plugable backends such as OAuth2, Github, htpasswd, osiam

•    Go

---

loginsrv is a standalone minimalistic login server providing a JWT login for multiple login backends.The following providers (login backends) are supported.

jwt htpasswd service caddy caddyserver login oauth2 github oauth2-client authentication

oauth2 - OAuth 2.0 server library for the Go programming language.

•    Go

---

An open protocol to allow secure authorization in a simple and standard method from web, mobile and desktop applications.

oauth2 oauth2-server go-oauth2 go-oauth2-server oauth oauth2-provider oauth-server oauth-provider security authentication

Cierge - 🗝️ Passwordless OIDC authentication done right

•    CSharp

---

Cierge is an OpenID Connect server that handles user signup, login, profiles, management, social logins, and more. Instead of storing passwords, Cirege uses magic links/codes and external logins to authenticate your users. Passwords are insecure by default. Cierge does away by the illusion of security passwords give ("forgot password" usually relies upon email-based auth at the end of the day).

jwt identity passwordless authentication openid-connect oauth2 oauth2-server asp-net-core

python-jose - A JOSE implementation in Python

•    Python

---

Docs are available on ReadTheDocs.The JavaScript Object Signing and Encryption (JOSE) technologies - JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), and JSON Web Algorithms (JWA) - collectively can be used to encrypt and/or sign content using a variety of algorithms. While the full set of permutations is extremely large, and might be daunting to some, it is expected that most applications will only use a small set of algorithms to meet their needs.

jose jwt jwt-token-library jwt-token jwt-library json-web-token

java-jwt - Java implementation of JSON Web Token (JWT)

•    Java

---

A Java implementation of JSON Web Tokens (draft-ietf-oauth-json-web-token-08).If you're looking for an Android version of the JWT Decoder take a look at our JWTDecode.Android library.

jwt-token-library jwt-token jwt-library jwt json-web-token

jose - :closed_lock_with_key: JSON Object Signing and Encryption library (JWT, JWS, JWE, JWA, JWK, JWKSet and more)

•    PHP

---

The detached content is also supported.Unencoded payload is supported. This means you can sign and verify payload without base64 encoding operation. As per the RFC7797, the b64 header MUST be protected. When b64 header is set, the crit protected header with value b64 in its array of values is mandatory.

jose jwt jwe jws jwk jwkset json encryption jwt-token-library jwt-token jwt-library json-web-token

jose - A comprehensive set of JWT, JWS, and JWE libraries.

•    Go

---

JOSE is a comprehensive set of JWT, JWS, and JWE libraries.The only other JWS/JWE/JWT implementations are specific to JWT, and none were particularly pleasant to work with.

jwt-token-library jwt-token jwt-library jwt json-web-token

oauth2-server - A spec compliant, secure by default PHP OAuth 2.0 Server

•    PHP

---

league/oauth2-server is a standards compliant implementation of an OAuth 2.0 authorization server written in PHP which makes working with OAuth 2.0 trivial. You can easily configure an OAuth 2.0 server to protect your API with access tokens, or allow clients to request new access tokens and refresh them.This library was created by Alex Bilbie. Find him on Twitter at @alexbilbie.

oauth oauth2 oauth2-server oauth2-provider security authentication