#authorization

An authorization library that supports access control models like ACL, RBAC, ABAC in Laravel.

Public Go/PostgreSQL authorization engineering by Willuny Labs: tenant isolation, delegated RBAC, signed RLS, sessions, audit, API, and React Console.

AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.

An embeddable OAuth 2.1 Authorization Server library for Rust, with the RFC 8628 device authorization grant.

Take full advantage of Nano Library to rapidly build enriched .NET microservices.

GateForge is an open-source Identity and Access Management (IAM) platform providing secure authentication, authorization, OAuth 2.0, OpenID Connect, SSO, MFA, Passkeys, Organizations, and developer-friendly APIs.

🔐 Plug-and-play auth for Node.js MCP servers.

Hierarchical Role-Based Access Control for Node.js

React-flavored framework inspired by Marko

Keysmith handles the full lifecycle of API keys: generation, hashing, storage, validation, rotation, revocation, and usage analytics. Raw keys are never persisted — only SHA-256 hashes are stored.

A simple and lightweight .NET package designed to streamline HttpClient authenticated requests

No repository description published.

AAuth

Python SDK and PyO3 binding for the Dogwood temporal policy language. Batteries for Strand Agents included.

No repository description published.

OpenID Connect Rust Library

An async security library for the Sanic framework.

A small, dependency-free authorization engine for Go: composable rules, RBAC, and a responsibility matrix behind one pluggable decision API.

Rust library for parsing and evaluating IAM policies. Provider-agnostic and designed for building flexible authorization systems.

A forwardAuth implementation that protects your web applications with OIDC authentication and flexible authorization rules

Collection of protobuf types to work with the Envoy Proxy through Rust services.

Feijuca.Keycloak simplifies Keycloak integration for user management and multi-tenancy. It features TokenManager for centralized API calls to manage users and AuthServices for handling multiple tenants using Keycloak realms. Check the documentation for more details!

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

Mollie provider for league/oauth2-client

A set of core libraries for building domain-driven business applications on .NET.

Shared parser logic common to the Playground and the VSCode extension

An uniform authorization library for Elixir. Supports Plug and Phoenix LiveView, aims for much more.

🪪 User identification, authentication, and authorization for Axum.

Keycloak Provider for OAuth 2.0 Client

Small MIT-licensed runtime for bounded LLM traversal, inspired by FPF and focused on practical agent behavior.