#rust #authentication #ldap #opaque #security #wasm #web_assembly

https://github.com/nitnelave/lldap

#typescript #authentication #authorization #identity #javascript #oauth #oauth2 #openid_connect #passwordless #react #sign_in_up #social_login

https://github.com/logto-io/logto

#csharp #aspnetcore #authentication #dotnet_core #jwt #opentelemetry #rest_api

https://github.com/davidfowl/TodoApi

#go #2fa #auth #authentication #authorization #cloud_native #fido2 #jwt #login #mfa #oauth2 #oidc #openid_connect #saml #serverless #sso

https://github.com/zitadel/zitadel

#typescript #authentication #backend #backend_as_a_service #database #firebase #flutter #graphql #graphql_api #hasura #javascript #nextjs #nhost #postgres #react #serverless #serverless_functions #storage #vue

https://github.com/nhost/nhost

#typescript #access_token #api #api_client #api_integration #api_wrapper #authentication #authentication_middleware #hacktoberfest #integrations #javascript #nodejs #oauth #oauth1 #oauth2 #postgresql #proxy #react #refresh_token #vuejs

https://github.com/NangoHQ/nango

#python #authentication #authentik #authorization #hacktoberfest #kubernetes #oauth2 #oauth2_client #oauth2_server #oidc #oidc_client #oidc_provider #proxy #reverse_proxy #saml #saml_idp #saml_sp #security #sso

https://github.com/goauthentik/authentik

#typescript #authentication #nextjs #nodejs #oauth #sveltekit

https://github.com/pilcrowOnPaper/lucia

#typescript #authentication #database #desktop #linux #macos #react #rust #schema #sql #surql #surrealdb #surrealql #tauri #webapp #windows

https://github.com/surrealdb/surrealist

#typescript #authentication #expo #gatsby #gatsbyjs #hasura #javascript #jwt #jwt_authentication #next #nextjs #nodejs #react #redwood #redwoodjs #remix_run

https://github.com/clerk/javascript

#typescript #api #api_keys #authentication #authorization #gateway #hacktoberfest #open_source #rate_limiter

Unkey is an open-source tool for managing API authentication and authorization. It allows developers to securely manage access to their APIs. The benefit to users is that Unkey provides a free, community-driven solution that can be customized and improved by anyone, ensuring robust security and flexibility in API management. Users can also contribute to the project or get in touch with the team for further discussions.

https://github.com/unkeyed/unkey

#go #2fa #authentication #ciam #fido2 #hacktoberfest #jwt #oauth #passkeys #passwordless #saml #sign_in_with_apple #sign_in_with_google #sso #user_management #webauthn

Hanko is a free and open-source tool that helps you move away from using passwords for logging in. It uses "passkeys," which are supported by Apple, Google, and Microsoft, and work with Touch ID, Face ID, and Windows Hello. This makes logging in faster and more secure. Hanko is easy to integrate into your website or app with just a few lines of code and offers customizable web components. It also supports other features like user management, JWT signing, and OAuth logins. Using Hanko benefits you by providing a better login experience without the need for passwords, making it more secure and convenient for your users.

https://github.com/teamhanko/hanko

#go #abac #access_control #acl #auth #authentication #authn #authorization #authz #cas #casbin #casdoor #cloudos #cloudsecurity #iam #oauth #oidc #permission #rbac #saml #sso

Casbin is a powerful and efficient open-source library for managing access control in various programming languages, including Golang, Java, Node.js, PHP, Python, and more. It supports different access control models such as ACL (Access Control List), RBAC (Role-Based Access Control), and ABAC (Attribute-Based Access Control). With Casbin, you can easily define and enforce policies using a simple configuration file, making it easy to switch or upgrade your authorization mechanism.

Using Casbin benefits you by providing a flexible and customizable way to manage permissions, handling role-user mappings, and supporting multiple operators for rule matching. It also offers an online editor for writing policies and integrates well with various web frameworks. This makes it simpler to ensure that only authorized users can perform specific actions on your resources, enhancing security and compliance in your applications.

https://github.com/casbin/casbin

#cplusplus #authentication #database_as_a_service #firebase #firebase_auth #firebase_authentication #firebase_database #firebase_messaging #firebase_storage #ios_sdk #objective_c #push_notifications #storage_service

Firebase is a powerful tool to help you build, grow, and monetize your app. It offers various tools and libraries that you can easily install using methods like CocoaPods, Swift Package Manager, or directly from GitHub. This makes it simple to integrate features like authentication, database management, performance monitoring, and more into your Apple platform apps. By using Firebase, you can focus on developing your app without worrying about the underlying infrastructure, which saves time and effort. Additionally, Firebase supports multiple Apple platforms including iOS, macOS, tvOS, and even watchOS, though some platforms have limited support. This versatility makes Firebase a valuable resource for app developers.

https://github.com/firebase/firebase-ios-sdk

#go #2fa #authentication #docker #golang #kubernetes #ldap #mfa #multifactor #oauth2 #openid_connect #push_notifications #security #sso #sso_authentication #totp #two_factor #two_factor_authentication #u2f #webauthn #yubikey

Authelia is an open-source authentication and authorization server that provides two-factor authentication and single sign-on (SSO) for your applications. It works with reverse proxies like nginx, Traefik, Caddy, and others to allow, deny, or redirect requests based on fine-grained access rules. Key features include multiple second-factor methods (such as security keys, time-based one-time passwords, and mobile push notifications), password reset with identity verification, and access restriction after too many invalid attempts.

Using Authelia benefits you by enhancing the security of your applications with robust authentication mechanisms, making it easier to manage user access and ensuring that only authorized users can access your resources. It is highly available and can be deployed in various environments, including Docker and Kubernetes. Additionally, being open-source means it is auditable and maintained by a community, ensuring continuous improvement and security.

https://github.com/authelia/authelia

#python #ai #authentication #authorization #claude #cursor #fastapi #llm #mcp #mcp_server #mcp_servers #modelcontextprotocol #openapi #windsurf

FastAPI-MCP is a tool that lets you easily turn your FastAPI web API endpoints into Model Context Protocol (MCP) tools, which AI agents can use directly. It requires almost no setup—just connect it to your FastAPI app, and it automatically preserves your request/response data models and documentation. It also includes built-in authentication using your existing FastAPI security methods. You can run the MCP server inside your app or separately, and it communicates efficiently using FastAPI’s ASGI interface. This makes it simple to integrate AI capabilities with your existing FastAPI services without rewriting code, saving you time and effort while keeping your API secure and well-documented[1][5].

https://github.com/tadata-org/fastapi_mcp

#go #authentication #backend #golang #realtime

PocketBase is a simple and powerful open-source backend tool. It includes an embedded database, real-time updates, user and file management, and a user-friendly admin dashboard. You can use it as a standalone app or extend it with custom code in Go or JavaScript. This makes it easy to build and manage backend services without needing a lot of extra setup. It's great for small to medium-sized projects because it's easy to use and doesn't cost much. Plus, it supports real-time data sync and customizable APIs, making it a good choice for developers who want flexibility and control.

https://github.com/pocketbase/pocketbase

#go #2fa #authentication #caddy #golang #middleware #nginx #selfhosted #sso #totp #traefik_middleware #typescipt

Tinyauth is a simple tool that adds a login screen or OAuth login (Google, Github, etc.) to your Docker apps, making them secure easily. It works with popular reverse proxies like Traefik, Nginx, and Caddy. You can quickly set it up using their documentation and demo, and it supports basic authentication and API access. This helps protect your apps from unauthorized access without complex setup. It’s open source, actively developed, and has a helpful community on Discord for support. Using Tinyauth improves your app security with minimal effort and flexible login options.

https://github.com/steveiliop56/tinyauth

#python #agents #ai #api_gateway #asyncio #authentication_middleware #devops #docker #fastapi #federation #gateway #generative_ai #jwt #kubernetes #llm_agents #mcp #model_context_protocol #observability #prompt_engineering #python #tools

The MCP Gateway is a powerful tool that unifies different AI service protocols like REST and MCP into one easy-to-use endpoint. It helps you manage multiple AI tools and services securely with features like authentication, retries, rate-limiting, and real-time monitoring through an admin UI. You can run it locally or in scalable cloud environments using Docker or Kubernetes. It supports various communication methods (HTTP, WebSocket, SSE, stdio) and offers observability with OpenTelemetry for tracking AI tool usage and performance. This gateway simplifies connecting AI clients to diverse services, making development and management more efficient and secure.

https://github.com/IBM/mcp-context-forge

#typescript #actions #authentication #gcp #github_actions #google_cloud #google_cloud_platform #iam #identity #security

You can securely connect GitHub Actions to Google Cloud using the Google GitHub Action called `auth`. It supports two main ways: the recommended Workload Identity Federation (WIF), which uses short-lived tokens and avoids long-lived service account keys, and the older Service Account Key JSON method. WIF improves security by creating a trust link between your GitHub workflow and Google Cloud without exposing permanent credentials. To use it, you set up a Workload Identity Pool and Provider in Google Cloud, then configure your GitHub workflow to authenticate with these. This lets your workflows access Google Cloud resources safely and easily, reducing risks and simplifying credential management.

https://github.com/google-github-actions/auth