#java #open_source #aws #oauth2 #spring_boot #authentication #spring_cloud #openidconnect #authorization #sso #saml2 #ldap_authentication #u2f_server #spring_framework #apache2 #identity_provider #sso_authentication #websso #spring_webflow #duosecurity

https://github.com/apereo/cas

#go #abac #access_control #acl #auth #authorization #authz #casbin #etcd #permission #rbac

https://github.com/casbin/casbin

#typescript #authentication #authorization #identity #javascript #oauth #oauth2 #openid_connect #passwordless #react #sign_in_up #social_login

https://github.com/logto-io/logto

#go #acl #authorization #authzed #ciam #cloud_native #database #distributed #distributed_systems #fine_grained_access_control #graph_database #grpc #kubernetes #latency #permissions #production #scale #security #security_tools #spicedb #zanzibar

https://github.com/authzed/spicedb

#go #2fa #auth #authentication #authorization #cloud_native #fido2 #jwt #login #mfa #oauth2 #oidc #openid_connect #saml #serverless #sso

https://github.com/zitadel/zitadel

#python #authentication #authentik #authorization #hacktoberfest #kubernetes #oauth2 #oauth2_client #oauth2_server #oidc #oidc_client #oidc_provider #proxy #reverse_proxy #saml #saml_idp #saml_sp #security #sso

https://github.com/goauthentik/authentik

#typescript #api #api_keys #authentication #authorization #gateway #hacktoberfest #open_source #rate_limiter

Unkey is an open-source tool for managing API authentication and authorization. It allows developers to securely manage access to their APIs. The benefit to users is that Unkey provides a free, community-driven solution that can be customized and improved by anyone, ensuring robust security and flexibility in API management. Users can also contribute to the project or get in touch with the team for further discussions.

https://github.com/unkeyed/unkey

#java #aouth2 #authorization #java #springcloud #sso #token

Sa-Token is a lightweight Java framework for permission authentication that makes authentication simple and elegant. It has five core modules: login authentication, permission authentication, single sign-on (SSO), OAuth2.0, and microservice authentication. With Sa-Token, you can achieve complex authentication tasks with just a few lines of code. For example, you can log in a user with `StpUtil.login(10001);` and check if a user is logged in with `StpUtil.checkLogin();`. It also supports various features like kicking users offline, role-based permissions, and route interception. This framework is beneficial because it simplifies the process of managing user sessions and permissions, making it easier to secure your application without complex configurations.

https://github.com/dromara/Sa-Token

#go #abac #access_control #acl #auth #authentication #authn #authorization #authz #cas #casbin #casdoor #cloudos #cloudsecurity #iam #oauth #oidc #permission #rbac #saml #sso

Casbin is a powerful and efficient open-source library for managing access control in various programming languages, including Golang, Java, Node.js, PHP, Python, and more. It supports different access control models such as ACL (Access Control List), RBAC (Role-Based Access Control), and ABAC (Attribute-Based Access Control). With Casbin, you can easily define and enforce policies using a simple configuration file, making it easy to switch or upgrade your authorization mechanism.

Using Casbin benefits you by providing a flexible and customizable way to manage permissions, handling role-user mappings, and supporting multiple operators for rule matching. It also offers an online editor for writing policies and integrates well with various web frameworks. This makes it simpler to ensure that only authorized users can perform specific actions on your resources, enhancing security and compliance in your applications.

https://github.com/casbin/casbin

#python #ai #authentication #authorization #claude #cursor #fastapi #llm #mcp #mcp_server #mcp_servers #modelcontextprotocol #openapi #windsurf

FastAPI-MCP is a tool that lets you easily turn your FastAPI web API endpoints into Model Context Protocol (MCP) tools, which AI agents can use directly. It requires almost no setup—just connect it to your FastAPI app, and it automatically preserves your request/response data models and documentation. It also includes built-in authentication using your existing FastAPI security methods. You can run the MCP server inside your app or separately, and it communicates efficiently using FastAPI’s ASGI interface. This makes it simple to integrate AI capabilities with your existing FastAPI services without rewriting code, saving you time and effort while keeping your API secure and well-documented[1][5].

https://github.com/tadata-org/fastapi_mcp