Self-hosted projects tagged “Authorization”
79 open source projects with this tag
79 services found
PocketBase
Lightweight open-source realtime backend with embedded SQLite
Open-source Go backend providing embedded SQLite, realtime (SSE) subscriptions, auth (JWT/OAuth2), file storage, admin UI and REST-style APIs for web and mobile apps.
Payload
TypeScript headless CMS and app framework for Next.js
Payload is an open-source, TypeScript-first headless CMS for Next.js with an extensible admin UI, auth, drafts, access control, and APIs for building fullstack apps.
Kong Gateway
Cloud-native API and LLM gateway with extensible plugins
Kong Gateway is a high-performance, cloud-native API gateway for routing, securing, and observing API traffic, with an extensible plugin system and Kubernetes support.
Keycloak
Open-source identity and access management with SSO
Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.
Hasura GraphQL Engine
Open-source GraphQL engine providing instant, realtime APIs on your data
Hasura is an open-source GraphQL engine that instantly exposes realtime, secure GraphQL APIs over databases and other data sources with fine-grained access control.
Authelia
Self-hosted IAM with SSO and multi-factor authentication
Authelia is an open-source IAM and authentication server providing SSO, MFA, and access control for web apps, with OpenID Connect/OAuth 2.0 and reverse-proxy integration.
NetBird
WireGuard-based overlay network with SSO/MFA and granular access controls.
Open-source zero-trust networking platform delivering a WireGuard-based private network with centralized access control, SSO/MFA, and cross-platform clients.
authentik
Open-source Identity Provider (IdP) for SSO, OIDC, and SAML
Open-source IdP delivering SSO, OAuth2/OIDC, SAML2, LDAP, RADIUS, MFA, WebAuthn, conditional access and application-proxy capabilities for self-hosted deployments.
OAuth2 Proxy
Reverse proxy and middleware for OAuth2/OIDC authentication
OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2/OIDC login and forwards authenticated user identity to upstream services.
ZITADEL
API-first identity and access management platform for applications
ZITADEL is an open source IAM/CIAM platform providing SSO, MFA, OIDC/OAuth2, SAML, user management, and multi-tenant organizations with audit logging.
Logto
Authentication and authorization platform for apps and APIs
Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.
OpenVPN
Open-source VPN daemon for TLS-based secure tunneling
OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.
Casdoor
UI-first IAM and SSO platform for modern authentication
Casdoor is an open-source, UI-first IAM/SSO platform supporting OAuth 2.0, OIDC, SAML, LDAP, SCIM, WebAuthn and MFA, with an admin web UI and SDKs.
QloApps
Open-source hotel property management and booking system
PHP-based open-source hotel reservation platform providing PMS, booking engine, channel manager and hotel website features for small to enterprise properties.
Datasette
Explore and publish SQLite data as a web UI and JSON API
Open source tool to publish SQLite databases as an interactive website with a JSON API, with a powerful plugin system for search, auth, and customization.
Eclipse Mosquitto
Lightweight MQTT message broker
Eclipse Mosquitto is a lightweight, open-source MQTT broker supporting MQTT 5.0 and 3.1.1, plus client libraries and CLI tools for pub/sub messaging.
Tyk Gateway
Open source API gateway for REST, GraphQL, gRPC, and TCP
Tyk Gateway is an open source, cloud-native API gateway for securing, managing, and scaling REST, GraphQL, gRPC, and TCP APIs with auth, rate limits, and policies.
Pocket ID
A passkey-only OpenID Connect identity provider
Pocket ID is a simple self-hosted OpenID Connect (OIDC) provider that lets users sign in to apps using passkeys instead of passwords.
Soft Serve
Self-hosted Git server with an SSH-accessible terminal UI
Self-hostable Git server focused on SSH, featuring a terminal UI, access control, and Git LFS support, with cloning via SSH, HTTP, or the Git protocol.
Lura
High-performance API gateway framework with extensible middleware
Lura is a stateless, high-performance API gateway framework for building reverse proxies that aggregate, transform, and secure backend APIs via middleware and plugins.
Kanidm
Simple, secure identity management and SSO provider
Kanidm is a secure identity management platform providing SSO, passkeys (WebAuthn), and integrations like OAuth2/OIDC, RADIUS, and LDAP gateway for legacy apps.
Mathesar
Open-source spreadsheet-like UI for PostgreSQL databases
Self-hosted web app that provides a spreadsheet-like interface to view, edit, query, and manage PostgreSQL data with native Postgres role-based access control.
CloudBeaver
Web-based database manager for SQL and NoSQL data sources
CloudBeaver is an open-source, web-based database manager for teams, offering a browser SQL editor, data browsing/editing, and administration for many databases.
Pomerium
Identity- and context-aware access proxy for zero trust access
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.
Cerbos
Context-aware authorization and access control policy engine
Cerbos is a scalable, language-agnostic authorization layer for defining and evaluating context-aware access control policies via a dedicated Policy Decision Point (PDP) API.
Kinto
Minimalist JSON document store with sharing and synchronization
Kinto is a lightweight JSON document store with an HTTP API, built-in permissions, sharing, and client synchronization, designed for offline-first and distributed apps.
OpenZiti
Open-source zero trust networking overlay for applications
OpenZiti is an open-source zero trust networking platform that builds an identity-based overlay mesh with SDKs, tunnelers, and policy-based access controls.
Ombi
Self-hosted media request and user management for Plex/Emby/Jellyfin.
Ombi lets Plex, Emby and Jellyfin users request movies, TV shows and music, integrates with Sonarr/Radarr/Lidarr and automates request delivery and notifications.
Apache Guacamole
Clientless remote desktop gateway accessed through HTML5 in a browser.
Open-source browser-based gateway enabling VNC, RDP, and SSH access to remote desktops without client software.
OliveTin
Web interface to run predefined shell commands securely
Self-hosted web UI that exposes YAML-defined shell commands as buttons, dashboards and API endpoints with ACLs, auth and logging for safe, repeatable server operations.