“Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.”

17.2k

1.6k

17.2k

GitPedia Card805/003

zitadel

“ZITADEL - Identity infrastructure, simplified for you.”

logto

logto-io

TypeScriptauthenticationauthorization

“🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.”

fastapi_mcp

tadata-org

Pythonaiauthentication

“Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!”

opa

open-policy-agent

Goauthorizationcloud-native

“Open Policy Agent (OPA) is an open source, general-purpose policy engine.”

cas

apereo

Javaauthenticationauthorization

“Apereo CAS - Identity & Single Sign On for all earthlings and beyond.”

casl

stalniy

TypeScriptaclauthorization

“CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access”

spicedb

authzed

Goabacacl

“Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data”

permify

Permify

Goabacaccess-control

“An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉”

cancancan

CanCanCommunity

Rubyauthorizationcancancan

“The authorization Gem for Ruby on Rails.”

doorkeeper

doorkeeper-gem

Rubyauthenticationauthorization

“Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.”

opal

permitio

Pythonauthorizationcedar

“Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)”

keto

ory

Goabacaccess-control

“The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.”