fosite - Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

•    Go

---

The security first OAuth2 & OpenID Connect framework for Go. Built simple, powerful and extensible. This library implements peer-reviewed IETF RFC6749, counterfeits weaknesses covered in peer-reviewed IETF RFC6819 and countermeasures various database attack scenarios, keeping your application safe when that hacker penetrates or leaks your database. OpenID Connect is implemented according to OpenID Connect Core 1.0 incorporating errata set 1 and includes all flows: code, implicit, hybrid.OAuth2 and OpenID Connect are difficult protocols. If you want quick wins, we strongly encourage you to look at Hydra. Hydra is a secure, high performance, cloud native OAuth2 and OpenID Connect service that integrates with every authentication method imaginable and is built on top of Fosite.

oauth oauth2 library sdk security auth authentication authorization openid-connect oauth2-server oauth2-provider

node-oauth20-provider - OAuth 2

•    Javascript

---

OAuth 2.0 provider toolkit for nodeJS

oauth oauth2 provider server connect express middleware http api rest oauth2-server oauth2-provider security authentication

passport-oauth2 - OAuth 2.0 authentication strategy for Passport and Node.js.

•    Javascript

---

OAuth 2.0 authentication strategy for Passport.

passport auth authn authentication authz authorization oauth oauth2

ORY Hydra - OpenID Connect and OAuth Provider written in Go

•    Go

---

ORY Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider (user sign up, user login, password reset flow), but connects to your existing identity provider through a login and consent app. Implementing the login and consent app in a different language is easy, and exemplary consent apps (Go, Node) and SDKs are provided.

docker security identity oauth oauth2 cloud server oauth2-provider authorization sso openid oauth2-server openid-connect oauth-provider openid-provider federation oidc hacktoberfest openid-connect-provider

oauth2 - OAuth 2.0 server library for the Go programming language.

•    Go

---

An open protocol to allow secure authorization in a simple and standard method from web, mobile and desktop applications.

oauth2 oauth2-server go-oauth2 go-oauth2-server oauth oauth2-provider oauth-server oauth-provider security authentication

MITREid Connect - An OpenID Connect reference implementation in Java on the Spring platform

•    Java

---

This project contains a certified OpenID Connect reference implementation in Java on the Spring platform, including a functioning server library, deployable server package, client (RP) library, and general utility libraries. The server can be used as an OpenID Connect Identity Provider as well as a general-purpose OAuth 2.0 Authorization Server.

oauth2 oauth2-server oauth2-provider security authentication

tut-spring-boot-oauth2 - Spring Boot and OAuth2:: A tutorial on "social" login and single sign on with Facebook and Github

•    Java

---

This guide shows you how to build a sample app doing various things with "social login" using OAuth2 and Spring Boot. It starts with a simple, single-provider single-sign on, and works up to a self-hosted OAuth2 Authorization Server with a choice of authentication providers (Facebook or Github). The samples are all single-page apps using Spring Boot and Spring OAuth on the back end. They also all use plain jQuery on the front end, but the changes needed to convert to a different JavaScript framework or to use server side rendering would be minimal. Because one of the samples is a full OAuth2 Authorization Server we have used the shim JAR which supports bridging from Spring Boot 2.0 to the old Spring Security OAuth2 library. The simpler samples could also be implemented using the native OAuth2 support in Spring Boot security features. The configuration is very similar.

oauth2-server - A spec compliant, secure by default PHP OAuth 2.0 Server

•    PHP

---

league/oauth2-server is a standards compliant implementation of an OAuth 2.0 authorization server written in PHP which makes working with OAuth 2.0 trivial. You can easily configure an OAuth 2.0 server to protect your API with access tokens, or allow clients to request new access tokens and refresh them.This library was created by Alex Bilbie. Find him on Twitter at @alexbilbie.

oauth oauth2 oauth2-server oauth2-provider security authentication

mod_auth_openidc - OpenID Connect Relying Party and OAuth 2

•    C

---

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server, validating OAuth 2.0 bearer access tokens presented by OAuth 2.0 Clients. This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party (RP) to an OpenID Connect Provider (OP). It authenticates users against an OpenID Connect Provider, receives user identity information from the OP in a so called ID Token and passes on the identity information (a.k.a. claims) in the ID Token to applications hosted and protected by the Apache web server.

apache-httpd openid-connect openidconnect-client oauth2 oauth2-resource-server oauth openidc

Apache Oltu - OAuth protocol implementation in Java

•    Java

---

Apache Oltu is an OAuth protocol implementation in Java. It also covers others "OAuth family" related implementations such as JWT, JWS and OpenID Connect.

oauth jwt openid security two-factor-authentication oauth2 oauth2-server oauth2-provider json-web-token jwt-token jwt-library jose oauth2-client

caddy-auth-portal - Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2

•    Go

---

Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0, SAML Authentication. The purpose of this plugin is providing authentication only. The plugin issue JWT tokens upon successful authentication. In turn, the authorization of the tokens is being handled by caddy-auth-jwt.

ldap jwt saml oauth2 authentication caddy jwt-tokens facebook-login ldap-authentication openid-connect authentication-backend user-registration caddy-plugin authentication-portal authentication-middleware user-identity github-authentication caddy2 caddy-module ldap-authentication-backend

osin - Golang OAuth2 server library

•    Go

---

OSIN is an OAuth2 server library for the Go language, as specified at http://tools.ietf.org/html/rfc6749 and http://tools.ietf.org/html/draft-ietf-oauth-v2-10.It also includes support for PKCE, as specified at https://tools.ietf.org/html/rfc7636, which increases security for code-exchange flows for public OAuth clients.

oauth2 oauth2-server oauth2-provider security authentication

doorkeeper - Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

•    Ruby

---

Doorkeeper is a gem (Rails engine) that makes it easy to introduce OAuth 2 provider functionality to your Ruby on Rails or Grape application. This will install the doorkeeper initializer into config/initializers/doorkeeper.rb.

doorkeeper oauth oauth2-provider oauth2-server ruby-on-rails grape authorization oauth2 authentication

node-oidc-provider - OpenID Provider(OP) implementation for node

•    Javascript

---

oidc-provider is an OpenID Provider implementation of OpenID Connect. It allows to export a complete mountable or standalone OpenID Provider implementation. This implementation does not dictate a fixed data models or persistence store, instead, you must provide adapters for these. A generic in memory adapter is available to get you started as well as feature-less dev-only views to be able to get off the ground. The following specifications are implemented by oidc-provider. Note that not all features are enabled by default, check the configuration section on how to enable them.

openid oidc openid-provider openid-connect auth authentication certified config connect dynamic express hybrid identity implicit koa oauth oauth2 provider server

Passport - Express-compatible authentication middleware for Node.js

•    Javascript

---

Passport is Express-compatible authentication middleware for Node.js. Passport's sole purpose is to authenticate requests, which it does through an extensible set of plugins known as strategies. Passport does not mount routes or assume any particular database schema, which maximizes flexibility and allows application-level decisions to be made by the developer. The API is simple: you provide Passport a request to authenticate, and Passport provides hooks for controlling what occurs when authentication succeeds or fails.

authentication authentication-library social-authentication oauth openid oauth2 login social-login

django-oauth-toolkit - OAuth2 goodies for the Djangonauts!

•    Python

---

Django OAuth Toolkit can help you providing out of the box all the endpoints, data and logic needed to add OAuth2 capabilities to your Django projects. Django OAuth Toolkit makes extensive use of the excellent OAuthLib, so that everything is rfc-compliant.We love contributions, so please feel free to fix bugs, improve things, provide documentation. Just follow the guidelines and submit a PR.

django oauth2 oauth2-server oauth2-provider security authentication

Authlib - An ambitious authentication library for OAuth 1, OAuth 2, OpenID clients and servers.

•    Python

---

The ultimate Python library in building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are included. Authlib is compatible with Python2.7+ and Python3.6+.

oauth oauth2 authlib oidc oauth2-server oauth2-provider flask django authentication jwt token

django-rest-framework-social-oauth2 - python-social-auth and oauth2 support for django-rest-framework

•    Python

---

This module provides a python-social-auth and oauth2 support for django-rest-framework.The first aim of this package is to help setting up social auth for your rest api. It also helps setting up your Oauth2 provider.

django django-rest-framework python-social-auth oauth2 oauth authentication

flask-oauthlib - OAuthlib implementation for Flask.

•    Python

---

Flask-OAuthlib is an extension to Flask that allows you to interact with remote OAuth enabled applications. On the client site, it is a replacement for Flask-OAuth. But it does more than that, it also helps you to create OAuth providers.Flask-OAuthlib relies on oauthlib.

oauth2 oauth2-server oauth2-provider security authentication

grant - OAuth Middleware for Express, Koa and Hapi

•    Javascript

---

OAuth Middleware for Express, Koa and Hapi

oauth oauth2 authentication middleware express koa hapi oauth2-client