keycloak-gatekeeper - A OpenID / Keycloak Proxy service

•    Go

---

Keycloak Gatekeeper is an adapter which, at the risk of stating the obvious, integrates with the Keycloak authentication service. The Gatekeeper is most happy in the company of Keycloak, but is also able to make friends with other OpenID Connect providers. The service supports both access tokens in browser cookie or bearer tokens.

openid-provider keycloak proxy oauth2 openid

keycloak - Open Source Identity and Access Management For Modern Applications and Services

•    Java

---

Keycloak is an open source Identity and Access Management solution aimed at modern applications and services. It makes it easy to secure applications and services with little to no code. Users authenticate with Keycloak rather than individual applications. This means that your applications don't have to deal with login forms, authenticating users, and storing users. Once logged-in to Keycloak, users don't have to login again to access a different application.

identity-access-management identity-management access-management user-management ldap

angular-oauth2-oidc - Support for OAuth 2 and OpenId Connect (OIDC) in Angular.

•    TypeScript

---

Support for OAuth 2 and OpenId Connect (OIDC) in Angular. Successfully tested with Angular 6 and its Router, PathLocationStrategy as well as HashLocationStrategy and CommonJS-Bundling via webpack. At server side we've used IdentityServer (.NET/ .NET Core) and Redhat's Keycloak (Java).

passport-azure-ad - Azure Active Directory Authentication Strategies using Node and Passportjs

•    Javascript

---

passport-azure-ad is a collection of Passport Strategies to help you integrate with Azure Active Directory. It includes OpenID Connect, WS-Federation, and SAML-P authentication and authorization. These providers let you integrate your Node app with Microsoft Azure AD so you can use its many features, including web single sign-on (WebSSO), Endpoint Protection with OAuth, and JWT token issuance and validation. passport-azure-ad has been tested to work with both Microsoft Azure Active Directory and with Microsoft Active Directory Federation Services.

azure-active-directory aad adfs sso oidc bearer shibboleth

weibo_ios_sdk_sso-oauth - sina weibo sdk of sso and Oauth2.0

•    CSS

---

sina weibo sdk of sso and Oauth2.0

community - 🛠 The Document IDE

•    Go

---

To bring software development inspired features to the world of documenting -- refactoring, importing, testing, linting, metrics, PRs, versioning....Documize is an intelligent document environment (IDE) for creating, securing and sharing documents -- everything you need in one place.

emberjs mysql wiki documentation-tool knowledge collaboration reporting dashboards keycloak enterprise ide selfhosted documentation docs document-management document-conversion knowledgebase

mod_auth_openidc - OpenID Connect Relying Party and OAuth 2

•    C

---

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server, validating OAuth 2.0 bearer access tokens presented by OAuth 2.0 Clients. This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party (RP) to an OpenID Connect Provider (OP). It authenticates users against an OpenID Connect Provider, receives user identity information from the OP in a so called ID Token and passes on the identity information (a.k.a. claims) in the ID Token to applications hosted and protected by the Apache web server.

apache-httpd openid-connect openidconnect-client oauth2 oauth2-resource-server oauth openidc

node-oauth20-provider - OAuth 2

•    Javascript

---

OAuth 2.0 provider toolkit for nodeJS

oauth oauth2 provider server connect express middleware http api rest oauth2-server oauth2-provider security authentication

fosite - Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

•    Go

---

The security first OAuth2 & OpenID Connect framework for Go. Built simple, powerful and extensible. This library implements peer-reviewed IETF RFC6749, counterfeits weaknesses covered in peer-reviewed IETF RFC6819 and countermeasures various database attack scenarios, keeping your application safe when that hacker penetrates or leaks your database. OpenID Connect is implemented according to OpenID Connect Core 1.0 incorporating errata set 1 and includes all flows: code, implicit, hybrid.OAuth2 and OpenID Connect are difficult protocols. If you want quick wins, we strongly encourage you to look at Hydra. Hydra is a secure, high performance, cloud native OAuth2 and OpenID Connect service that integrates with every authentication method imaginable and is built on top of Fosite.

oauth oauth2 library sdk security auth authentication authorization openid-connect oauth2-server oauth2-provider

dex - OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors

•    Go

---

Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or established identity providers like GitHub, Google, and Active Directory. Clients write their authentication logic once to talk to dex, then dex handles the protocols for a given backend.

openid oauth openid-connect-identity

EasyOAuth Framework for OAuth Protocol

•    DotNet

---

EasyOAuth Framework is an OAuth-compliant Authentication and Authorization Library for Desktop Application and Web Application. Support 8 providers include Facebook, Google, Yahoo, Twitter, Dropbox, Plurk and LinkedIn.

oauth authentication facebook sso

pig - 基于Spring Cloud、oAuth2.0开发基于Vue前后分离的开发平台，支持账号、短信、SSO等多种登录，提供配套视频开发教程

•    Java

---

基于Spring Cloud、oAuth2.0开发基于Vue前后分离的开发平台，支持账号、短信、SSO等多种登录，提供配套视频开发教程

oauth2orize - OAuth 2.0 authorization server toolkit for Node.js.

•    Javascript

---

OAuth 2.0 authorization server toolkit for Node.js.

oauth oauth2 auth authz authorization connect express passport middleware oauth2-server oauth2-provider security authentication

node-oidc-provider - OpenID Provider(OP) implementation for node

•    Javascript

---

oidc-provider is an OpenID Provider implementation of OpenID Connect. It allows to export a complete mountable or standalone OpenID Provider implementation. This implementation does not dictate a fixed data models or persistence store, instead, you must provide adapters for these. A generic in memory adapter is available to get you started as well as feature-less dev-only views to be able to get off the ground. The following specifications are implemented by oidc-provider. Note that not all features are enabled by default, check the configuration section on how to enable them.

openid oidc openid-provider openid-connect auth authentication certified config connect dynamic express hybrid identity implicit koa oauth oauth2 provider server

authom - A zero-dependency mutli-service authentication tool for node.js

•    Javascript

---

authom is an authentication library for node.js. It unifies authentication APIs for multiple services into a single EventEmitter, and works with both the built-in node.js HTTP module and as an Express/Connect app. authom was designed to solve one problem and solve it well. It has an intuitive node.js-like API, no required dependencies, and doesn't force any particular persistence, session, or middleware approaches on you.

auth authorization oauth http

play-pac4j - Security library for Play framework 2 in Java and Scala: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT

•    Java

---

The play-pac4j project is an easy and powerful security library for Play framework v2 web applications which supports authentication and authorization, but also logout and advanced features like CSRF protection. It can work with Deadbolt. It's based on Play 2.6 (and Scala 2.11 or Scala 2.12) and on the pac4j security engine v3. It's available under the Apache 2 license. The LogoutController logs out the user from the application.

play-framework security authentication authorization cas oauth saml openid-connect ldap jwt sql mongodb login social-login logout facebook twitter

cli - A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

•    Go

---

step is a zero trust swiss army knife. It’s an easy-to-use and hard-to-misuse utility for building, operating, and automating systems that use zero trust technologies like authenticated encryption (X.509, TLS), single sign-on (OAuth OIDC, SAML), multi-factor authentication (OATH OTP, FIDO U2F), encryption mechanisms (JSON Web Encryption, NaCl), and verifiable claims (JWT, SAML assertions). For more information and docs see the step website and the blog post announcing step.

security security-tools jwt oauth x509 tls oath totp encryption cryptography sso mfa jws jwe jose

Authlib - An ambitious authentication library for OAuth 1, OAuth 2, OpenID clients and servers.

•    Python

---

The ultimate Python library in building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are included. Authlib is compatible with Python2.7+ and Python3.6+.

oauth oauth2 authlib oidc oauth2-server oauth2-provider flask django authentication jwt token

express-jwt - connect/express middleware that validates a JsonWebToken (JWT) and set the req

•    Javascript

---

JWT authentication middleware.

auth authn authentication authz authorization http jwt token oauth express

hydra - OAuth2 server with OpenID Connect - cloud native, security-first, open source API security for your infrastructure

•    Go

---

ORY Hydra is a hardened OAuth2 and OpenID Connect server optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider (user sign up, user log in, password reset flow), but connects to your existing identity provider through a consent app. Implementing the consent app in a different language is easy, and exemplary consent apps (Go, Node) and SDKs (Go, Node) are provided.Besides mitigating various attack vectors, such as database compromisation and OAuth 2.0 weaknesses, ORY Hydra is able to securely manage JSON Web Keys, and has a sophisticated policy-based access control you can use if you want to. Click here to read more about security.

hydra oauth2 openid-connect docker server security authorization identity federation cloud cloud-native sso