#authorization

Praxis Policy Engine (PPE)

An Authorization Extension for LoopBack 4 Applications

Kubernetes controller for managing instances of SpiceDB

Repo of adapters converting a Cerbos Query Plan to a data fetching layer

Give an agent a job, not your keys. Open-source control plane for AI agent work: each agent gets its own identity, a bounded job, and a signed record of what it did.

Provides a role-based access control management

RBAC permission adapter for mezzio-authorization

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

A spec compliant, secure by default PHP OAuth 2.0 Server

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

CQRS + event sourcing wired to HTMX in one line per endpoint — auth, CSRF, rate limiting, SSE built in. Bring your own router and templates.

Authorization Package for AdonisJS

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

laminas-permissions-acl adapter for mezzio-authorization

PASETO (Platform-Agnostic SEcurity TOkens) for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

Enterprise library to build .NET microservice solution

Symfony SDK for Auth0 Authentication and Management APIs.

CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.

Slow down repeated requests; use as an alternative (or addition) to express-rate-limit

The .NET One Person Framework — build, run, and ship a whole product solo, in C#, on one server. C# components server-rendered or on WebAssembly, a typed SPA or islands (React, Vue, Angular, Svelte, Solid, Preact, Lit), a hosted meta framework or real Blazor. SQLite-first data, auth, jobs, mail, cache, CQRS & one-command deploy.

OpenFGA-to-PostgreSQL authorization compiler. Generates specialized SQL functions from .fga schemas that query your existing tables. Zero sync, always consistent.

A set of commonly used constants related to authn/z

Official Zitadel auth integration for React.

An unified permissions API for React Native on iOS, Android and Windows.

The shared SMART and OAuth 2.0 resource-server crate for every FerroHEALTH product: token validation against the authorization server's keys, SMART v2 scopes and the patient compartment, Basic and client-credentials machine auth, and the audit line.

Mutual ZKP authentication for humans and AI agents

AWS Cognito package (with MFA, SRP and Passkeys Feature) for PHP/Laravel

🔑 Provides authentication, authorization and a role-based access control management via ACL (Access Control List)

Typescript SDK to build MCP servers in an agnostic way

A .NET typesafe implementation of DNSimple's Identity API