Awesome GitHub RepositoriesAuthentication Frameworks

Payload is a headless content management system and application framework that uses a code-first approach to define data schemas and administrative interfaces. By utilizing a centralized, type-safe configuration object, it automatically generates database schemas, API endpoints, and a fully customizable admin panel. The system is built on a database-agnostic architecture, allowing it to interface with various storage engines while providing a unified, type-safe API for server-side operations, REST, and GraphQL. What distinguishes Payload is its deep extensibility and developer-centric design.

This project is a modular authentication framework designed to manage user identity, session tracking, and access control across web applications. It provides a unified solution for handling email-based credentials and social identity federation, allowing developers to implement secure login and registration flows that maintain consistent user states across client and server environments. The system utilizes a plugin-based architecture and middleware-driven request interception to allow for the extension of core authentication logic. It features type-safe schema generation, which derives data

Next-auth is an authentication and identity management library for web frameworks. It provides a unified system for handling user sign-in and session state across server and client environments, functioning as a session management framework and an OIDC authentication library. The project distinguishes itself through a provider-based identity abstraction that supports multiple authentication methods, including OAuth, email magic links, traditional credentials, and passwordless passkeys. It allows for the registration of custom OAuth or OIDC compliant providers and offers tools to define branda

Vapor is a comprehensive server-side web framework designed for building scalable, high-performance applications and APIs in Swift. It provides a non-blocking, event-loop-based runtime that manages concurrent task processing, background job queues, and asynchronous request handling. The framework is built around a dependency injection container that manages the lifecycle and resolution of services, configurations, and database connections throughout the request pipeline. The framework distinguishes itself through a protocol-oriented design that emphasizes type safety across all layers of the

django-allauth is a comprehensive authentication framework for Django applications that manages user registration, account ownership verification, and secure login processes. It provides a system for handling the entire user account lifecycle, including the ability to define custom signup fields and implement identity verification. The project distinguishes itself by providing a suite of OAuth and SAML integrations for social account authentication and the capability to act as an OpenID Connect identity provider. It further supports decoupled architectures through a token-based headless authe

This project is a PHP library for implementing a spec-compliant OAuth 2.0 authorization server. It serves as an authentication framework for managing user identities and client authorizations, providing the necessary components to issue and validate access and refresh tokens. The server supports a wide range of standardized authorization flows, including authorization code exchange, device grants, implicit flows, and PKCE enforcement. It handles complex token lifecycles through refresh token rotation, scope management, and the use of asymmetric keys for signing digital tokens. The system pro

Eladmin-web est un framework de développement de tableau de bord d'administration d'entreprise conçu pour construire des systèmes de gestion back-office sécurisés. Il utilise une architecture découplée composée d'un template frontend Vue et d'un backend Spring Boot. Le projet fournit des outils pour le prototypage rapide d'applications via la génération automatique de code source frontend et backend. Il dispose d'un système de navigation dynamique qui construit des menus multi-niveaux au moment de l'exécution et contrôle la visibilité de l'interface en fonction des rôles des utilisateurs authentifiés. Le système intègre Spring Security pour l'authentification et l'autorisation, Spring Data JPA pour la persistance des bases de données, et un cache de session basé sur Redis pour la gestion distribuée des sessions. Il inclut également la prise en charge de l'intégration d'icônes SVG et l'intégration de données multi-couches sur différents frameworks de persistance.

Ce projet est une implémentation de référence et un boilerplate pour gérer l'authentification des utilisateurs et l'état de session au sein du framework Next.js. Il sert d'exemple pratique sur la façon d'intégrer NextAuth.js pour protéger les routes et gérer la vérification d'identité. Le dépôt démontre plusieurs flux de travail d'authentification, notamment l'intégration d'identité OAuth avec des fournisseurs tiers, l'authentification sans mot de passe utilisant des liens magiques par e-mail, et la connexion traditionnelle basée sur les identifiants. Il montre spécifiquement comment remplacer les écrans d'authentification par défaut par des pages de connexion personnalisées à la marque. L'implémentation couvre un large éventail de capacités, notamment la persistance de session en base de données via des adaptateurs, la rotation des jetons d'accès et l'utilisation de variables d'environnement pour la configuration des fournisseurs. Il inclut également des exemples de liaison de plusieurs méthodes d'authentification à un seul profil utilisateur et d'intégration d'outils d'observabilité pour journaliser les événements d'authentification.

This project provides a comprehensive security framework for PHP applications, designed to manage the entire lifecycle of user authentication and authorization. It functions as a middleware layer that intercepts incoming HTTP requests to enforce security policies, resolve user identities, and maintain persistent sessions across web interactions. The framework distinguishes itself through a modular, event-driven architecture that integrates directly into the application lifecycle. It supports diverse authentication methods, including standard form-based logins, API bearer tokens, and federated