Projects sharing features with Your Spotify

Next-auth is an authentication library and identity framework used to manage user sign-in and session state across web applications. It provides a system for handling user identity through OAuth, OpenID Connect, and passwordless sign-in flows. The project features a multi-provider framework that integrates third-party identity services and custom directory backends. It supports passwordless authentication via email magic links or hardware keys and utilizes a database-agnostic storage layer to persist authentication states across different database types or in-memory. Security is managed thro

JustAuth is an OAuth 2.0 authentication library designed to integrate multiple third-party login providers into a single interface. It abstracts various social login APIs and identity services, allowing applications to manage authentication using the OAuth 2.0 and OIDC protocols. The project provides a multi-provider identity integrator that replaces the need for individual vendor software development kits. It includes a toolkit for defining custom authentication platforms and proprietary identity services by specifying custom OAuth protocols and endpoints. The library manages the full authe

JupyterHub is a multi-user platform for hosting and managing isolated Jupyter notebook server instances on a single system or cluster. It serves as a notebook server orchestrator that spawns and monitors individual computing environments on demand. The system uses a plugin-based spawner interface to launch these environments across diverse infrastructure, including local processes, containers, or cloud clusters. It integrates with external identity providers and supports pluggable authentication to verify user identities and secure access. The framework includes centralized administration to

OmniAuth is a rack authentication framework that allows applications to verify user identities through third-party service providers using a single standardized interface. It functions as middleware to separate identity verification from core application logic by intercepting incoming requests. The project employs a strategy-pattern provider model to encapsulate provider-specific logic into interchangeable classes. It provides a custom authentication strategy framework and base classes for building new providers based on industry standards. The framework handles the multi-step authentication

react-admin is a full-featured admin dashboard built with React and Ant Design, designed for building interfaces that manage backend operations. Its core identity centers on providing a complete admin panel with dynamic menu configuration, role-based access control, and third-party OAuth authentication, all within a responsive layout that adapts to different screen widths. The project distinguishes itself through a dynamic route-based menu system that fetches navigation structure from a server API, enabling runtime menu updates without redeploying the application. It integrates role-based rou

Spotipy is a Python client library for interacting with the Spotify Web API. It provides a programmatic interface to manage music data, user accounts, and media playback. The library implements a full OAuth 2.0 client capable of handling authorization codes, client credentials, and implicit grants. It includes a token manager that supports automated token refreshing and pluggable caching backends to maintain stateful sessions. The project covers music metadata retrieval and search, allowing for the lookup of artists, albums, and tracks via resource identifiers and URIs. It also provides capa

Sandstorm is an open-source platform that packages and runs web applications in security-hardened sandboxes on a personal server, functioning as a self-hosted web app operating system. It provides a curated app store where users discover and install sandboxed web applications with one-click ease, while each application runs in an isolated container that uses Linux kernel security features to separate it from the host and other apps. The platform includes a centralized authentication layer so users sign in once and gain access to all installed applications without managing separate accounts per

The Cypress Real-World App is a payment application designed to demonstrate real-world Cypress testing patterns, workflows, and best practices. It serves as a demo application that validates Cypress testing methods through end-to-end tests on a realistic application, while also generating frontend and backend code coverage reports from test executions. The application showcases authentication and identity management through multiple approaches, including a built-in local authentication mechanism that does not rely on external providers, and integration with third-party providers such as Googl

wger is an open-source web application for fitness tracking, workout planning, and nutrition management. It provides a self-hosted platform where users can design weekly workout routines from a built-in exercise library, log their training progress, and plan daily meals using a food database with automatic nutritional calculations. The application supports multi-user accounts with credential-based login, passkey authentication, and third-party sign-in through OAuth providers. The platform includes a documented REST API that enables programmatic access to workout logs, meal plans, and user dat

Ombi is a media request management system that coordinates content discovery between users, media servers, and download managers. It acts as a middleware layer to automate the process of requesting, approving, and acquiring movies, music, and TV shows. The project differentiates itself by acting as an integration layer that synchronizes libraries and user accounts across multiple media server instances. It features a content request orchestrator that supports voting-based automatic approval and the ability to import active requests directly from external watchlists. The platform covers a bro

Gitalk is a comment system that uses GitHub Issues as a backend to store and manage discussions for websites. It provides a comment component built with Preact for embedding interactive discussion areas into web pages. The system utilizes GitHub OAuth for identity verification, allowing users to authenticate through their GitHub accounts to manage comment permissions. It also includes a multi-language widget that supports interface translation based on browser settings or manual configuration. The project covers broader capabilities for comment section management, including the ability to re

Tinyauth is an authentication middleware service and identity provider that verifies user identities to grant system access. It operates as a standalone server or as an authentication gateway, utilizing a reverse proxy model to intercept requests and validate credentials before traffic reaches protected backend services. The project functions as an OpenID Connect provider for single sign-on experiences and an OAuth 2.0 gateway that delegates verification to external providers such as Google and GitHub. It also acts as an LDAP authentication server, allowing for centralized user management and

This project is a Django library that enables web applications to authenticate users through third-party identity providers using standard protocols like OAuth and OpenID Connect. It functions as an integration layer that delegates authentication to external services, allowing users to sign in with existing accounts while maintaining a persistent link to their local application profile. The library distinguishes itself through a modular pipeline that executes a sequence of functions to validate and manage user records during the login process. It employs a strategy-based approach to encapsula

Parse Server is a backend-as-a-service solution and Node.js framework that provides a ready-to-use REST and GraphQL API for mobile and web applications. It functions as a core backend infrastructure for managing database schemas, user authentication, and API routing. The system distinguishes itself with a real-time data engine that pushes database updates to clients via WebSockets and a GraphQL server that automatically generates schemas based on application data models. It also features an adapter-based storage layer that abstracts interactions with various cloud and local backends. The pla

This project provides a containerized DevOps platform by packaging a complete GitLab installation into Docker images. It enables the deployment of a self-hosted environment that integrates Git version control, project management, and continuous integration and delivery pipelines on private infrastructure. The implementation supports deployment via Docker Compose or orchestration through Docker Swarm, allowing for scalable stacks with integrated container registries. It utilizes environment variables for configuration and supports the offloading of artifacts and backups to remote object storag

MoeKoeMusic is a cross-platform desktop music player that functions as a client for NetEase Cloud Music. It provides music streaming with synchronized lyrics display, theme customization, and a plugin system for extending functionality. The application is built on Electron to run on Windows, macOS, and Linux. It features real-time WebSocket streaming of playback state and synchronized lyrics, a plugin system that loads external modules, and dynamic theme customization through CSS variables. Authentication with NetEase Cloud Music accounts supports login via QR code, phone, or password, along

Dillinger is a browser-based Markdown HTML5 editor designed for real-time text editing and visual rendering. It functions as a cloud-synced writing tool that transforms markup syntax into live HTML previews, utilizing OAuth-integrated authentication to connect users with third-party services. The project distinguishes itself by integrating cloud document synchronization with external storage providers and offering direct publishing capabilities to platforms such as Medium. It also includes a dedicated Markdown-to-PDF converter for generating professional documents and a focus mode to create a

Casibase is an open-source platform that orchestrates multi-turn conversations with large language models and manages retrieval-augmented knowledge bases from a single interface. It provides a unified system for connecting to over 30 AI model providers, ingesting documents into vector embeddings for semantic search, and running autonomous agent loops that can drive a browser, search the web, execute commands, and integrate with external tools. The platform distinguishes itself by combining AI conversation management with infrastructure and application orchestration capabilities. It includes a

Devise is a flexible authentication framework for Ruby on Rails applications. It serves as a user identity management system that handles registration, sign-in, password recovery, and account confirmation. The system integrates with the Warden middleware to manage user sessions and security across various request types. The framework functions as a multi-model authentication engine, allowing for the configuration of multiple distinct user models with independent routes and access controls. It also provides a standardized interface to connect with external identity providers and third-party lo

Klavis is a platform for managing Model Context Protocol (MCP) servers and providing sandboxed environments where AI agents can safely interact with external tools and services. It functions as an integration framework that orchestrates MCP server instances, exposes tools and resources for AI agents, and isolates agent interactions from production data through horizontally scalable sandbox environments. The platform distinguishes itself through its ability to generate long-horizon agentic tasks that simulate realistic tool-use workflows with live SaaS applications and production MCP servers.

Hanko is an open-source identity provider and customer identity and access management system. It serves as a passkey authentication service and an OAuth and SAML SSO gateway, allowing applications to authenticate users and issue tokens via standard identity protocols. The project distinguishes itself through a strong focus on passwordless access using WebAuthn-based passkeys and email-based passcodes. It provides framework-agnostic authentication interfaces as customizable web components that can be embedded directly into web applications to handle login, registration, and profile management.

Utterances is an embedded commenting system that uses GitHub Issues as a backend to store and manage discussions for websites. It provides a web widget that integrates conversation threads directly into web pages, mapping individual URLs to specific GitHub issues to organize discussions by page. The system integrates third-party identity verification via OAuth to ensure that comments are linked to verified accounts. It automatically handles the creation of tracking tickets when a conversation starts on a page without an existing record, converting website feedback into structured issues. The

Forem is an open-source platform designed for building and managing technical communities. It functions as a social publishing engine that enables members to share long-form content, participate in threaded discussions, and engage through social interactions. The platform provides tools for organizations to maintain branded profiles, host community hackathons, and facilitate collaborative learning through structured educational tracks. Beyond its social features, Forem integrates advanced capabilities for AI agent workflow orchestration and codebase knowledge graphing. It allows developers to

Guess is a predictive page loading library that uses machine learning to prefetch JavaScript bundles and assets. It functions as a resource prefetcher that predicts the next page a user will visit by utilizing a web application route parser and a user behavior analytics integrator. The project distinguishes itself by importing navigation patterns from analytics APIs to inform its predictive models. It uses probabilistic navigation modeling and historical transition data to calculate the likelihood of future page visits, allowing for the proactive download of lazy-loaded bundles. The system i

Devise is a comprehensive identity management system and authentication framework for Ruby on Rails applications. It provides a complete set of tools for managing user registration, secure sign-in, and session handling using a modular strategy pattern. The framework distinguishes itself by offering a suite of security hardening features, including brute force protection through account locking and secure password recovery workflows. It also functions as an integrator for external identity providers and third-party authentication via standardized protocols. Broad capabilities cover the full u

Dawarich is a self-hosted location history manager and travel journaling platform. It functions as a personal travel archive that collects GPS coordinates and movement data, providing a private alternative to proprietary tracking services. The system utilizes a PostgreSQL geospatial database to store coordinates, visits, and custom geofence boundaries. The project distinguishes itself as a geospatial data converter and visualization tool, capable of transforming location history between formats such as GPX, KML, and GeoJSON. It allows users to organize GPS tracks and geotagged photos into nam

TrendFinder is an AI-powered trend monitoring tool and sentiment analysis platform. It functions as a social media content aggregator that collects posts and articles from influencers and websites to identify emerging patterns and industry news. The system utilizes large language models to process collected web data and determine the relevance of trending topics. It operates as an automated notification system, delivering contextual alerts and source links to messaging platforms when significant online activity is detected. The platform covers automated market intelligence and real-time tren