Authentication

owasp/cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

bitwarden/clients

Bitwarden client apps (web, browser extension, desktop, and cli).

pomerium/pomerium

Identity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

foxboron/ssh-tpm-agent

SSH agent that creates and manages TPM-sealed keys for hardware-bound authentication, supporting key generation, import, wrapping, PIN protection,…

zitadel/zitadel

Open-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…

legrandin/pycryptodome

A self-contained cryptographic library for Python

goauthentik/authentik

Provides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication,…

freeradius/freeradius-server

High-performance multi-protocol AAA server for RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, centralizing network authentication, authorization, and…

opensc/opensc

Open source smart card tools and middleware. PKCS#11/MiniDriver

fjrevoredo/mini-diarium

A local-only journal with serious encryption. Free, open source, and never touches the internet.

better-auth/better-auth

The most comprehensive authentication framework

fariszr/knocker

Knocker, a knock based access control service for your homelab

google/longfellow-zk

Implementation of the Google Zero-Knowledge library for Identity Protocols.

open-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

flythenimbus/bramble

Local-first password manager with direct device-to-device sync