# Passkey and Passwordless Authentication Libraries

> Search results for `add passwordless and passkey login to an app` on awesome-repositories.com. 114 total matches; showing the first 50.

Explore on the web: https://awesome-repositories.com/q/add-passwordless-and-passkey-login-to-an-app

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/add-passwordless-and-passkey-login-to-an-app).**

## Results

- [amruthpillai/reactive-resume](https://awesome-repositories.com/repository/amruthpillai-reactive-resume.md) (38,613 ⭐) — This project is a web-based platform designed for creating, managing, and sharing professional resumes. It functions as a structured document builder that integrates artificial intelligence to assist with content generation, editing, and analysis. Users can maintain a collection of resumes, customize their visual presentation through various templates, and export them into multiple formats for job applications.

The platform distinguishes itself through its autonomous AI agent capabilities, which can perform research, suggest incremental edits, and apply data patches directly to documents. It also provides a secure, self-hostable environment that allows users to maintain full control over their data and infrastructure. The system supports advanced authentication methods, including passkeys and federated identity providers, ensuring that personal and professional information remains protected.

Beyond core editing, the application includes tools for document organization, such as tagging, filtering, and legacy data migration. It features a robust document generation engine that separates content from design, allowing for precise layout control and styling. Users can share their resumes via password-protected public URLs and monitor document performance through integrated analytics.

The application is designed for containerized deployment, utilizing Docker Compose to facilitate consistent installation across private infrastructure. It includes built-in health monitoring and feature flagging to manage system performance and functionality without requiring code redeployments.
- [bitwarden/server](https://awesome-repositories.com/repository/bitwarden-server.md) (18,074 ⭐) — This project provides a comprehensive, self-hosted platform for zero-knowledge credential management and enterprise secrets orchestration. It functions as a secure vault that ensures all encryption and decryption processes occur exclusively on the client side, preventing the server from ever accessing plaintext data. By combining identity federation with robust access controls, the system enables organizations to centralize the management of passwords, passkeys, and sensitive infrastructure credentials.

The platform distinguishes itself through its focus on both human-centric security and automated machine-to-machine workflows. It supports advanced authentication methods including hardware security keys, passkeys, and biometric unlocking, while simultaneously offering programmatic interfaces for injecting secrets directly into development pipelines and automated infrastructure deployments. This dual-purpose design allows teams to maintain strict data sovereignty through local hosting and containerized deployments while enforcing granular governance across their entire user base.

Beyond core storage, the system includes extensive observability and compliance tools, such as immutable audit logging, credential risk analysis, and integration with external security information and event management platforms. It also facilitates secure collaboration through encrypted information sharing, emergency access delegation, and automated identity provisioning. The software is designed for flexible deployment across diverse infrastructure environments and includes command-line utilities for administrative tasks, bulk data migration, and secret retrieval.
- [bitwarden/clients](https://awesome-repositories.com/repository/bitwarden-clients.md) (13,114 ⭐) — This project is a comprehensive zero-knowledge security suite designed for enterprise credential management, secrets orchestration, and password management. It provides a secure, end-to-end encrypted vault that allows users to store, synchronize, and manage sensitive information, including passwords, passkeys, and infrastructure secrets, across desktop, mobile, and browser environments.

The platform distinguishes itself through a strict zero-knowledge architecture where all encryption and decryption occur locally on the client, ensuring that plaintext data remains inaccessible to the server. It supports flexible deployment models, allowing organizations to choose between managed cloud services or self-hosted infrastructure to meet specific data sovereignty and compliance requirements. Furthermore, the system integrates with external identity providers to streamline user provisioning and authentication, while offering advanced administrative controls for policy enforcement and security auditing.

Beyond core storage, the platform provides extensive tools for DevOps and automated workflows, including command-line interfaces for secret injection and programmatic SDKs for custom integrations. It also includes robust collaboration features for secure data sharing, team resource management, and credential health monitoring to help organizations maintain a strong security posture.
- [fosrl/pangolin](https://awesome-repositories.com/repository/fosrl-pangolin.md) (21,255 ⭐) — Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet.

The platform distinguishes itself through a declarative infrastructure model that synchronizes network state using version-controlled manifests. It supports complex connectivity requirements through peer-to-peer NAT traversal, which facilitates direct encrypted connections between nodes, with automatic fallback to server-based relaying when necessary. Additionally, it provides browser-based access to remote resources, eliminating the need for local client software for many common administrative and service-access tasks.

Beyond its core tunneling capabilities, the platform includes a comprehensive suite of tools for traffic management, security, and observability. It features granular access control policies based on user identity, geolocation, and network attributes, alongside automated certificate management and multi-factor authentication. The system also provides extensive monitoring, audit logging, and alerting capabilities to track infrastructure health and security events across multi-site deployments.

Pangolin is designed for containerized and multi-site environments, offering flexible deployment options through standard packaging and automated reconciliation workflows.
- [anoma/anoma](https://awesome-repositories.com/repository/anoma-anoma.md) (33,787 ⭐) — Anoma is a distributed operating system designed to abstract the complexities of blockchain networks into a unified interface for cross-chain coordination. At its core, the platform utilizes a resource-based state machine and an intent-centric execution model, where user-defined goals are processed and settled by decentralized solvers rather than through direct, manual execution. This architecture enables the creation of applications that operate across heterogeneous distributed networks while maintaining a consistent developer and user experience.

The platform distinguishes itself through a privacy-preserving framework that leverages zero-knowledge proofs to hide transaction details, sender identities, and asset amounts on public ledgers. Security is managed through hardware-backed passkeys, which derive hierarchical cryptographic keyrings in session memory to eliminate the need for persistent local storage. Furthermore, Anoma employs protocol adapters—smart contracts deployed to external chains—to act as secure gateways for cross-chain asset interoperability and shielded transaction management.

The system includes a comprehensive toolkit for building decentralized applications, featuring high-performance cryptographic operations executed via WebAssembly modules. Developers can access diagnostic utilities like the Anoma Explorer to monitor protocol activity, indexed transactions, and resource logic. The infrastructure also supports private resource retrieval through discovery-key-based indexing, ensuring that encrypted data is routed securely to the appropriate user keyring.

Documentation and developer resources include practical tutorials for building applications, such as guides for implementing passkey-based identity management and shielded token deposit workflows.
- [hardikkamboj/an-introduction-to-statistical-learning](https://awesome-repositories.com/repository/hardikkamboj-an-introduction-to-statistical-learning.md) (2,493 ⭐) — This project is a machine learning textbook companion and code reference that translates theoretical statistical learning exercises into executable implementations. It serves as a programmatic study guide for implementing foundational machine learning algorithms and solving structured data problems.

The repository provides predictive modeling notebooks that combine narrative explanations with code to derive and validate statistical algorithms. These implementations are available as a reference for both Python and R, utilizing the Scikit-Learn API for model fitting and prediction.

The codebase covers predictive modeling workflows, including data processing, dataset partitioning, and the translation of mathematical formulas into computational proofs. It focuses on the practical application of statistical learning concepts to verify theoretical understanding through direct computation.
- [corbado/flutter-passkeys](https://awesome-repositories.com/repository/corbado-flutter-passkeys.md) (177 ⭐) — Easily provide passkey authentication based on FIDO2 / WebAuthn for Flutter apps (iOS & Android) via a dedicated Flutter package
- [lucia-auth/lucia](https://awesome-repositories.com/repository/lucia-auth-lucia.md) (10,461 ⭐) — Lucia is an authentication library that provides session management, OAuth integration, and password-based login for web applications. It creates and validates server-side sessions using cryptographically random tokens stored in HttpOnly, Secure, SameSite=Lax cookies, with constant-time token comparison to prevent timing side-channel attacks.

The library supports authentication through email and password, GitHub OAuth, Google OAuth, and passkey-based sign-in. It enforces two-factor authentication using time-based one-time passwords (TOTP) from authenticator apps, generates recovery codes for account access, and requires 2FA verification before password resets. Session lifecycle management includes idle timeouts that extend only during active user interaction, short-lived tokens for speed and revocability, and throttled database writes to reduce load during session verification.

Additional capabilities include stateless token validation for self-contained tokens like JWTs, CSRF protection through Origin header checks or anti-CSRF tokens, and throttling of failed login attempts. The library adapts session handling to work with framework-specific request and response patterns.
- [simple-login/app](https://awesome-repositories.com/repository/simple-login-app.md) (6,735 ⭐) — This project is an email alias management platform and masking proxy designed to protect user privacy. It functions as a gateway that creates unique email addresses to hide a user's primary mailbox, forwarding incoming messages while routing outbound replies through a reverse-proxy to maintain sender anonymity.

The system distinguishes itself through advanced domain and privacy controls, including the ability to link personal domains via DNS for branded aliases and catch-all routing. It further secures communications via a PGP encryption gateway that encrypts forwarded email content using public keys and masks sensitive subject lines.

The platform covers a broad range of capabilities including automated alias generation using regular expressions, multi-mailbox routing, and email deliverability optimization through SPF, DKIM, and DMARC configuration. Access is managed via an identity system supporting OAuth2 and OpenID Connect for social logins, complemented by two-factor authentication and time-based one-time passwords.

Financial administration is handled through subscription plan management and the application of educational or loyalty discounts.
- [manaflow-ai/cmux](https://awesome-repositories.com/repository/manaflow-ai-cmux.md) (22,717 ⭐) — cmux is a GPU-accelerated terminal emulator and workspace manager designed for coordinating multiple concurrent AI coding agents. It functions as an orchestration terminal that uses scriptable workspaces and split panes to manage parallel AI agent workflows, while also serving as a headless browser automation tool and a remote development relay.

The project differentiates itself through a programmatic control plane using a Unix domain socket and CLI, allowing for the automated management of terminal layouts and input delivery. It features an integrated web engine for programmatic DOM manipulation and session state capture, as well as a proxy system that executes agents on remote servers while relaying notifications and interfaces locally over SSH.

Its broader capabilities include high-density session scaling via vertical tabs and grouped environments, real-time workspace metadata monitoring, and event-driven notification routing across desktop and mobile devices. The system also supports state restoration for window layouts and agent sessions, along with built-in content rendering for markdown and local file previews.
- [better-auth/better-auth](https://awesome-repositories.com/repository/better-auth-better-auth.md) (28,736 ⭐) — This project is a modular authentication framework designed to manage user identity, session tracking, and access control across web applications. It provides a unified solution for handling email-based credentials and social identity federation, allowing developers to implement secure login and registration flows that maintain consistent user states across client and server environments.

The system utilizes a plugin-based architecture and middleware-driven request interception to allow for the extension of core authentication logic. It features type-safe schema generation, which derives database structures and API contracts directly from configuration, and employs a database-agnostic adapter pattern to interface with various storage backends. These capabilities enable the creation of custom security logic and database schemas that adapt to specific application requirements.

To support development, the framework includes integrated tooling that provides context-aware knowledge to coding assistants. By configuring agent skills and connecting documentation through standardized protocols, developers can automate the implementation of authentication patterns while ensuring adherence to established conventions and security standards.
- [kunals131/login-app-with-appwrite](https://awesome-repositories.com/repository/kunals131-login-app-with-appwrite.md) (0 ⭐) — Login App with google's OAuth and custom signin and signup features with complete tutorial
- [pajswigger/add-request-to-macro](https://awesome-repositories.com/repository/pajswigger-add-request-to-macro.md) (7 ⭐) — Burp extension to add a request to a macro
- [microsoft/windows-universal-samples](https://awesome-repositories.com/repository/microsoft-windows-universal-samples.md) (9,696 ⭐) — This repository is a comprehensive collection of reference implementations and sample libraries for the Universal Windows Platform. It provides practical examples of how to use Windows Runtime APIs to build cross-device applications, including detailed guidance on XAML-based declarative user interfaces and DirectX-integrated rendering.

The project distinguishes itself by providing a wide array of hardware integration suites, covering low-level communication with USB, Serial, I2C, SPI, and GPIO peripherals. It includes specialized implementations for mixed reality holographic rendering, advanced digital inking, and computer vision tasks such as real-time face tracking and barcode scanning.

The codebase covers a broad surface of system capabilities, including adaptive media streaming, biometric authentication, and background task management. It also demonstrates the use of linguistic services for text analysis, globalization tools for regional formatting, and persistent storage strategies for application data.

The repository serves as a practical implementation guide for the Windows SDK, providing a library of samples for building responsive interfaces and integrating system-level services.
- [facebook/react](https://awesome-repositories.com/repository/facebook-react.md) (245,669 ⭐) — React is a JavaScript library for building user interfaces based on a component-driven architecture and unidirectional data flow.
- [mystenlabs/sui](https://awesome-repositories.com/repository/mystenlabs-sui.md) (7,612 ⭐) — Sui is a blockchain platform featuring an object-centric state model and resource-oriented smart contracts. It utilizes parallel transaction execution to increase network throughput and supports programmable transaction blocks that bundle multiple operations into single atomic units.

The platform distinguishes itself with a capability-based access control system and zero-knowledge login mechanisms, enabling users to authenticate via identity providers without seed phrases. It also implements deterministic object addressing to allow predictable state lookups and supports the creation of soulbound assets.

Its capability surface covers a broad range of financial and operational primitives, including on-chain order books, margin trading, and prediction markets. The system provides comprehensive tooling for smart contract development in the Move language, alongside high-performance data indexing, gRPC-based real-time event streaming, and cross-chain interoperability via bridge message verification.

Developers can interact with the network using multi-language SDKs in TypeScript, Rust, Python, and Go, or through a dedicated command-line interface for package deployment and debugging.
- [aviaryan/awesome-no-login-web-apps](https://awesome-repositories.com/repository/aviaryan-awesome-no-login-web-apps.md) (3,254 ⭐) — 🚀 Awesome (free) web apps that work without login
- [nesquena/hermes-webui](https://awesome-repositories.com/repository/nesquena-hermes-webui.md) (14,912 ⭐) — Hermes-webui is a self-hosted AI orchestrator and web interface for managing autonomous agents. It serves as a multi-provider gateway that connects cloud and local large language models, providing a central hub to execute scheduled background jobs, run shell commands, and manage agent memory on private hardware.

The system distinguishes itself through a persistent memory manager that utilizes knowledge graphs and markdown files for long-term context across sessions. It features a model context protocol host for extending agent capabilities with standardized tools and supports the orchestration of specialized sub-agents to handle parallel workloads.

The platform covers a broad range of operational capabilities, including autonomous task scheduling via a built-in cron system, cross-platform messaging synchronization with external apps, and sandboxed execution across Docker and SSH environments. It also provides tool integration for automated web searches, workspace file navigation, and a secure shell execution workflow with user-approval gating.

The interface supports real-time response streaming, voice interaction, and a cross-platform desktop application for managing sessions and configurations.
- [calcom/cal.com](https://awesome-repositories.com/repository/calcom-cal-com.md) (45,760 ⭐) — Cal.com is a comprehensive scheduling infrastructure platform designed to manage availability, booking workflows, and calendar synchronization across multiple users and external services. It provides a backend service for automated appointment scheduling, enabling the creation, confirmation, and management of booking lifecycles through a centralized state machine. The platform also offers embeddable user interface components that allow developers to integrate interactive booking experiences directly into third-party websites.

What distinguishes the platform is its extensible app ecosystem and intelligent automation capabilities. Developers can build custom integrations using a modular plugin architecture, while an AI-driven interface allows for complex scheduling operations and configuration updates via natural language commands. The system includes a sophisticated event routing engine that automatically assigns meetings to hosts based on availability, round-robin rules, and organizational hierarchy, supported by real-time webhook orchestration to keep external systems synchronized.

The platform covers a broad capability surface including CRM data synchronization, granular role-based access control, and secure OAuth-based integration management. It supports advanced booking configurations, such as prefilling form data and monitoring state changes, alongside specialized tools for Salesforce connectivity, including assignment traceability and fuzzy account matching. Users can also leverage local or remote server hosting options to maintain control over their infrastructure and security configurations.
- [jamesm0rr1s/add-and-track-custom-issues](https://awesome-repositories.com/repository/jamesm0rr1s-add-and-track-custom-issues.md) (4 ⭐) — Add & Track Custom Issues is a Burp Suite extension that allows users to add and track manual findings that the automated scanner was unable to identify.
- [hacksider/deep-live-cam](https://awesome-repositories.com/repository/hacksider-deep-live-cam.md) (93,878 ⭐) — Deep-Live-Cam is a generative video transformation tool designed for real-time facial manipulation and cinematic enhancement. It functions as a local-first AI runtime, performing all media processing directly on the user's hardware to ensure complete data privacy without external network dependencies. By utilizing a high-performance processing pipeline, the application enables live face swapping and interactive video modifications during active streaming sessions or on pre-recorded media.

The system distinguishes itself through a hardware-abstraction execution layer that dynamically routes compute tasks to available graphics hardware, such as CUDA or CoreML backends. This architecture supports complex operations like multi-face mapping, where distinct target faces are applied to multiple subjects simultaneously, and preserves original mouth movements to maintain natural speech synchronization. To ensure visual fidelity, the engine employs precision mask-based blending and generative detail restoration, effectively integrating source features into target video geometry.

Beyond core transformation capabilities, the application includes tools for cinematic rendering, such as real-time color grading and frame interpolation. It manages system resources through chunked memory and frame-based stream processing, which prevents crashes during intensive workloads and maintains stable performance. The interface is designed for focused workflows, offering distraction-free modes and automated projection window management to streamline the user experience during live operations.
- [analyticsinmotion/add-chatgpt-to-microsoft-word](https://awesome-repositories.com/repository/analyticsinmotion-add-chatgpt-to-microsoft-word.md) (105 ⭐) — How to add ChatGPT's Text Completion to Microsoft Word
- [0xjacky/nginx-ui](https://awesome-repositories.com/repository/0xjacky-nginx-ui.md) (11,172 ⭐) — This project is a web-based management interface designed for the administration, monitoring, and configuration of Nginx server instances. It functions as a centralized platform for managing reverse proxy settings, traffic routing, and server lifecycles, providing a visual dashboard to replace manual configuration file editing.

The platform distinguishes itself through integrated infrastructure automation and observability tools. It supports distributed environments by synchronizing configuration states across multiple nodes and containerized services, while offering artificial intelligence assistance for syntax guidance and complex configuration reasoning. Users can manage security hardening, automated certificate renewals, and real-time performance analytics directly through the interface, which also includes a web-based terminal for remote system administration.

Beyond core management, the system provides comprehensive operational support, including automated backup scheduling with support for remote object storage, log indexing and visualization, and robust access control mechanisms. Security features include support for passkey authentication, IP-based restrictions, and encrypted data storage to protect administrative access and configuration history.

The application is designed for lightweight deployment, utilizing an embedded database for state persistence and offering an automated installation bypass for rapid setup across multiple environments.
- [appwrite/appwrite](https://awesome-repositories.com/repository/appwrite-appwrite.md) (56,318 ⭐) — Appwrite is a backend-as-a-service platform that provides a unified development environment for building full-stack applications. It integrates essential infrastructure components—including authentication, databases, storage, and serverless functions—into a single, centralized interface to simplify application development and resource management.

The platform distinguishes itself through a container-based microservices architecture that ensures consistent execution across diverse infrastructure. It features a versatile connectivity layer that links frontend applications with third-party services, databases, and external APIs through standardized interfaces. Developers can manage and automate the configuration of these backend resources using infrastructure-as-code tools, while granular role-based access control enforces security policies across all platform resources and API endpoints.

Beyond its core services, the platform offers a broad capability surface that includes cross-platform data synchronization, event-driven webhooks, and comprehensive billing and usage monitoring. It supports extensive integrations for AI utilities, payment processing, messaging, and logging, allowing developers to extend application functionality through modular, event-driven workflows.

The platform is designed for both managed and self-hosted deployments, providing tools for production environment optimization, data migration, and custom domain configuration.
- [vercel/vercel](https://awesome-repositories.com/repository/vercel-vercel.md) (15,738 ⭐) — Vercel is a cloud platform for building, deploying, and scaling web applications. It provides a unified infrastructure that automates the build process by detecting project frameworks and distributing static and dynamic content through a global content delivery network. The platform executes application logic using serverless functions that scale automatically based on real-time traffic demand.

The platform distinguishes itself through a centralized AI gateway that proxies requests to multiple model providers, enabling standardized authentication, observability, and cost tracking. It supports advanced development workflows by integrating AI coding agents directly into the terminal and version control systems, allowing for automated code analysis, pull request reviews, and infrastructure management. Security is maintained through isolated microVM-based sandboxing for untrusted code and edge-side middleware that handles request routing and personalization before traffic reaches the origin.

Beyond its core hosting capabilities, the platform offers a comprehensive suite of tools for monitoring application performance, managing team access via identity providers, and orchestrating durable background tasks. It includes features for incremental content updates, which allow developers to refresh specific pages without requiring full site rebuilds, and provides granular control over traffic management through global configuration and feature flags.

The platform is designed to be accessed via a command-line interface and integrates directly with Git repositories to automate the entire deployment lifecycle, from preview environments for every branch commit to production releases.
- [farminf/aws-cdk-passwordless](https://awesome-repositories.com/repository/farminf-aws-cdk-passwordless.md) (0 ⭐) — An AWS CDK construct for creating passwordless authentication resources on AWS. This Construct will create following resources with their configuration:
- [quantumnous/new-api](https://awesome-repositories.com/repository/quantumnous-new-api.md) (39,722 ⭐) — This project is an AI model API gateway and proxy server designed to provide a unified interface for interacting with diverse artificial intelligence service providers. It functions as a centralized middleware platform that routes, load balances, and translates API requests across multiple models, enabling developers to access text, image, audio, and video generation capabilities through a single, standardized integration.

The gateway distinguishes itself through comprehensive administrative and financial controls, including event-driven usage accounting, real-time token consumption tracking, and granular role-based access control. It supports complex traffic management by distributing requests across multiple credential pools and providers to optimize throughput and bypass rate limits. Furthermore, it integrates a robust identity federation system that supports OIDC, OAuth, and hardware-backed passkeys to secure user access and manage multi-tenant environments.

Beyond core routing, the platform provides extensive tooling for service maintenance, including automated health checks, model registry synchronization, and content moderation filters. It also features a complete billing and payment infrastructure, allowing administrators to manage user credit balances, process prepaid redemptions, and monitor cost structures across different model vendors.

The system is designed for flexible deployment across containerized and distributed infrastructure, with administrative interfaces for auditing usage logs, managing API channels, and configuring global system parameters.
- [expo/expo](https://awesome-repositories.com/repository/expo-expo.md) (50,111 ⭐) — Expo is a universal mobile framework designed to build native iOS and Android applications from a single codebase using web-standard technologies. It provides a comprehensive development environment that includes a unified runtime for testing, cloud-based infrastructure for compiling and signing native binaries, and automated tools for managing the entire mobile release lifecycle, including app store submission.

The framework distinguishes itself through a plugin-based native configuration engine that programmatically modifies project files, allowing developers to integrate native modules without manual intervention. It also features a file-based routing system that maps directory structures directly to navigation paths, and an over-the-air update service that enables the deployment of JavaScript and asset changes directly to user devices, bypassing traditional app store review cycles.

Beyond these core capabilities, the platform offers a wide range of integrated services for managing project metadata, environment variables, and persistent data storage. It includes a robust set of UI components and utilities for handling hardware-level features such as camera access, geolocation, audio and video playback, and push notifications. Developers can also leverage managed cloud services to orchestrate custom build profiles and automate CI/CD workflows.

The project is managed via a command-line interface that facilitates project setup, native module integration, and the generation of custom development builds. Documentation and tooling are provided to support both standalone applications and the integration of Expo into existing native projects.
- [quahac/burp-add-to-sitemap-plusplus](https://awesome-repositories.com/repository/quahac-burp-add-to-sitemap-plusplus.md) (3 ⭐) — Add to sitemap++ is a BURP extension that can read URLs from files or clipboard and add the discovered information on the site map of the selected host(s).
- [jamesm0rr1s/burpsuite-add-and-track-custom-issues](https://awesome-repositories.com/repository/jamesm0rr1s-burpsuite-add-and-track-custom-issues.md) (4 ⭐) — Add & Track Custom Issues is a Burp Suite extension that allows users to add and track manual findings that the automated scanner was unable to identify.
- [octelium/octelium](https://awesome-repositories.com/repository/octelium-octelium.md) (3,371 ⭐) — Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs.

The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration, providing identity-based routing, payload sanitization, and guardrails for LLM providers and AI agent architectures.

The platform covers a broad capability surface including attribute-based access control via a policy-as-code engine, layer-7 traffic management using Lua scripting for request manipulation, and secure remote tunneling through WireGuard and QUIC. It also includes integrated observability using OpenTelemetry to stream identity-aware access logs and telemetry.

The infrastructure is managed through a command-line interface that supports declarative, GitOps-style configuration and automated deployment to Kubernetes environments.
- [tejasq/add-gitignore](https://awesome-repositories.com/repository/tejasq-add-gitignore.md) (722 ⭐) — An interactive CLI tool that adds a .gitignore to your projects.
- [pocket-id/pocket-id](https://awesome-repositories.com/repository/pocket-id-pocket-id.md) (8,185 ⭐) — Pocket ID is a self-hosted OpenID Connect (OIDC) identity provider that replaces traditional passwords with passkey-based authentication using WebAuthn public-key cryptography. It runs as a standalone service on user-managed infrastructure, eliminating shared secrets entirely by authenticating users through passkeys instead of passwords.

The project distinguishes itself through security-hardened deployment patterns, including distroless container images, non-root user execution, and read-only root filesystems to reduce the attack surface. It supports configurable token signing algorithms (RSA, ECDSA, or EdDSA) with user-defined key sizes and rotation capabilities, along with wildcard callback URL matching and user group access restrictions for OIDC clients.

Beyond core authentication, Pocket ID provides user and group management through LDAP directory synchronization, a REST API for automation, and flexible registration workflows including manual creation, invitation links, or open registration. It includes audit logging for security monitoring, anonymous usage telemetry for instance counting, and email notifications for sign-ins from unrecognized devices. The project is deployed as a containerized service with documented setup guides for integrating with third-party applications.
- [gitroomhq/postiz-app](https://awesome-repositories.com/repository/gitroomhq-postiz-app.md) (32,271 ⭐) — Postiz is an open-source social media management platform designed to centralize the scheduling, publishing, and analysis of content across diverse social networks, community forums, and blogging platforms. It functions as a unified hub where users can coordinate, review, and distribute content through a shared team workspace, while leveraging integrated artificial intelligence to assist in drafting text and generating multimedia assets.

The platform distinguishes itself through a modular architecture that utilizes a provider-specific adapter pattern to ensure consistent content distribution across various external services. It incorporates an AI-driven tool execution model that connects natural language models to internal functions, enabling automated content generation and media configuration. Furthermore, the system provides a programmatic API gateway that allows external applications to interact with its scheduling and management features via structured payloads.

Beyond core scheduling, the platform includes comprehensive tools for performance tracking, media storage abstraction, and collaborative workflows. It supports complex content strategies through features like multi-part thread scheduling and automated campaign execution, while maintaining secure identity management through OAuth-based mediation and support for external identity providers.

The application is designed for self-hosting and can be deployed into containerized environments using provided configuration charts.
- [hiddify/hiddify-app](https://awesome-repositories.com/repository/hiddify-hiddify-app.md) (30,948 ⭐) — Hiddify is a cross-platform proxy client designed to manage secure network connections and traffic routing across desktop and mobile operating systems. It functions as a unified proxy manager, providing a centralized interface to configure and control various network proxy protocols for encrypted and private internet access.

The application distinguishes itself by integrating local loopback interception, which configures the operating system network stack to route traffic through a local port for granular filtering. It also serves as a self-hosted infrastructure tool, enabling users to automate the deployment of private proxy servers on remote infrastructure through simplified command-line initialization.

The system maintains consistency across environments by synchronizing remote server states through declarative configuration files and utilizing an event-driven daemon to monitor proxy health and network state changes. It employs a shared bridge layer to interact with native system APIs and firewall rules, while bundling all necessary dependencies into a singular, self-contained executable package.
- [swebarre/log-login](https://awesome-repositories.com/repository/swebarre-log-login.md) (0 ⭐) — log-login This plugin logs login atempts to YOURLS. I wrote this to be used with fail2ban.
- [dreamhunter2333/cloudflare_temp_email](https://awesome-repositories.com/repository/dreamhunter2333-cloudflare-temp-email.md) (6,098 ⭐) — This project is a disposable email inbox service built to run entirely on Cloudflare's edge network. It creates temporary email addresses that automatically receive and store incoming messages and attachments, all without managing any traditional server infrastructure. The service uses Cloudflare Workers for serverless processing, Durable Objects for persistent inbox state, and Workers KV for storing email data, with attachments handled through R2 object storage.

The service distinguishes itself through a comprehensive set of access and management features. Users can authenticate through multiple methods including stored credentials, OAuth2 providers like GitHub and Authentik, or passwordless passkeys. An admin console provides centralized control for creating email addresses, managing users, configuring blacklists, and setting access passwords. The system also supports role-based permissions, CAPTCHA verification via Cloudflare Turnstile, and configurable rate limiting to prevent abuse.

Beyond basic email reception, the platform offers advanced email processing capabilities. Incoming emails are parsed using a Rust WebAssembly module for reliable content extraction, and an AI-powered feature can automatically identify verification codes and authentication links. Users can filter their inbox by address or keyword, forward emails to other addresses, and even send emails with DKIM signing support. The service also integrates with Telegram for notifications and a mini app interface, and can fire webhook events for external system integration.

The entire application is deployed through automated GitHub Actions workflows, with the frontend hosted as a static site on Cloudflare Pages and backend logic running on Workers. The repository includes configuration for automatic upstream synchronization, allowing forked instances to stay current with the latest changes.
- [jetify-com/devbox](https://awesome-repositories.com/repository/jetify-com-devbox.md) (12,105 ⭐) — Devbox is a development environment orchestrator designed to create reproducible, isolated workspaces for software projects. By leveraging declarative configuration files and the Nix package manager, it ensures that project dependencies, environment variables, and tooling remain consistent across different machines and team members. It functions as a central manager for project-specific environments, providing isolated shell execution that prevents conflicts with host system software.

The project distinguishes itself through its ability to bridge local development and cloud-hosted infrastructure. It supports container-native deployment by generating container images directly from project configurations and utilizes remote binary caching to accelerate environment setup by storing pre-built artifacts. Beyond environment management, it includes integrated capabilities for background service orchestration, secret management, and automated testing workflows that can be triggered within the development lifecycle.

The platform provides a comprehensive suite of tools for managing the full development lifecycle, including IDE integration, team-based access control, and observability features like log streaming and performance analysis. It also offers extensibility through custom plugin integration and automated package configuration, allowing teams to standardize workflows and maintain consistent tooling across distributed environments.
- [simple-login/mac-app](https://awesome-repositories.com/repository/simple-login-mac-app.md) (52 ⭐) — macOS client with Safari extension for SimpleLogin
- [estrellaxd/auto_bangumi](https://awesome-repositories.com/repository/estrellaxd-auto-bangumi.md) (8,097 ⭐) — Auto Bangumi is an automated anime downloader that subscribes to RSS feeds and downloads new episodes as they are released, then renames and organizes the files into a media-library-friendly structure. The application is packaged as a Docker container for straightforward deployment and provides a browser-based interface for managing RSS feeds, downloader settings, and subscription rules.

The tool distinguishes itself through several integrated capabilities. It includes a calendar-based subscription view that displays subscribed anime according to broadcast schedules, and a mid-season catch-up detection feature that identifies and downloads all missed episodes when joining a show that has already started airing. The file-renaming pipeline transforms raw release-group filenames into clean, organized names like "Show S01E01.mp4", and the system supports WebAuthn passkey authentication for passwordless login.

Beyond its core automation, the application offers RSS feed health monitoring to identify broken or stale subscriptions, TMDB metadata generation for rich library integration, and a setup wizard that guides initial configuration. It also provides anime torrent search functionality that returns results as a real-time stream, and supports qBittorrent integration for handling downloads.
- [fatih/vim-go](https://awesome-repositories.com/repository/fatih-vim-go.md) (16,242 ⭐) — This project is a comprehensive development plugin for the Vim text editor, designed to transform the editor into a specialized environment for Go software development. It provides a suite of integrated tools that facilitate the entire development lifecycle, including writing, maintaining, and navigating Go source code.

The plugin distinguishes itself by orchestrating external command-line binaries and language servers to perform heavy analysis, compilation, and formatting tasks as background processes. By mapping editor events to these external tools and utilizing virtual file system synchronization, it maintains editor responsiveness while providing real-time code intelligence, diagnostics, and automated structural changes.

The feature set covers a broad range of development requirements, including automated import management, static code analysis, and integrated build and test execution. It also supports advanced workflows such as program debugging, test coverage visualization, and documentation lookup, all accessible directly within the editor workspace.
- [ryanmcdermott/react-native-login](https://awesome-repositories.com/repository/ryanmcdermott-react-native-login.md) (460 ⭐) — :iphone: An example React Native project for client login authentication
- [teamhanko/hanko](https://awesome-repositories.com/repository/teamhanko-hanko.md) (8,801 ⭐) — Hanko is an open-source identity provider and customer identity and access management system. It serves as a passkey authentication service and an OAuth and SAML SSO gateway, allowing applications to authenticate users and issue tokens via standard identity protocols.

The project distinguishes itself through a strong focus on passwordless access using WebAuthn-based passkeys and email-based passcodes. It provides framework-agnostic authentication interfaces as customizable web components that can be embedded directly into web applications to handle login, registration, and profile management.

The platform covers a broad range of identity capabilities, including multi-factor authentication, social login integrations, and enterprise single sign-on. It also provides comprehensive session management, role-based and attribute-based access control, and tools for synchronizing identity data via webhooks and external database integrations.

The service is integrated into applications through client and server-side SDKs and supports custom branded domain mapping.
- [backstage/backstage](https://awesome-repositories.com/repository/backstage-backstage.md) (33,679 ⭐) — Backstage is an open-source framework for building internal developer portals. It provides a centralized, metadata-driven software catalog that tracks ownership, dependencies, and lifecycle status for all technical assets by harvesting configuration files directly from version control systems. The platform is built on a plugin-based modular architecture, allowing teams to extend core functionality through isolated, independently deployable modules that integrate into a unified frontend and backend ecosystem.

The project distinguishes itself through its focus on developer productivity and standardized workflows. It includes a template-driven scaffolding engine that automates the creation of new software projects, ensuring consistent architecture and best practices across teams. The platform also features granular, policy-based access control and secure proxy routing, which manage authentication and protect sensitive internal resources while aggregating infrastructure tools and documentation into a single, searchable interface.

Beyond its core catalog and scaffolding capabilities, the platform supports a wide range of operational needs, including infrastructure monitoring, technical documentation management, and automated notification delivery. It provides standardized patterns for custom plugin development, testing, and interface composition, enabling organizations to tailor the portal to their specific requirements. The system is designed to be extensible, with support for AI integration, usage analytics, and interface localization to accommodate diverse organizational needs.
- [rodydavis/flutter_login](https://awesome-repositories.com/repository/rodydavis-flutter-login.md) (713 ⭐) — 100% Shared Code Android/iOS Login Example - JSON API
- [imputnet/cobalt](https://awesome-repositories.com/repository/imputnet-cobalt.md) (41,096 ⭐) — Cobalt is a cross-platform web application designed as a distributed service platform for managing media content downloading. It functions as a full-stack monorepo that integrates a backend API with a responsive frontend, providing a unified interface for users to fetch and save media files from various online platforms.

The project utilizes a modular architecture where backend services, frontend interfaces, and shared logic are organized into decoupled packages within a single repository. This monorepo structure employs centralized workspace orchestration to manage dependencies and cross-package builds, ensuring consistent versioning across the entire application. The backend exposes structured RESTful API endpoints to handle data operations, while the frontend is delivered as pre-compiled static assets for client-side rendering.

The system supports containerized deployment and environment-variable configuration, allowing for consistent execution and self-hosted instances across different infrastructures. Comprehensive technical documentation is included within the repository to guide the deployment and operation of the service.
- [wger-project/wger](https://awesome-repositories.com/repository/wger-project-wger.md) (5,636 ⭐) — wger is an open-source web application for fitness tracking, workout planning, and nutrition management. It provides a self-hosted platform where users can design weekly workout routines from a built-in exercise library, log their training progress, and plan daily meals using a food database with automatic nutritional calculations. The application supports multi-user accounts with credential-based login, passkey authentication, and third-party sign-in through OAuth providers.

The platform includes a documented REST API that enables programmatic access to workout logs, meal plans, and user data, with permanent API key authentication and an OpenAPI 3.0 schema for client library generation. Users can track body measurements, maintain a photo log to document physical changes over time, and monitor their diet and nutrition through calorie logging. The exercise library functions as a community-contributed wiki, allowing users to browse, search, and add new movements with detailed instructions.

wger is designed for self-hosting via Docker Compose, giving users full control over their personal health data on a private server. The application also supports multi-user management for shared or commercial environments.
- [simple-login/simple-login-android](https://awesome-repositories.com/repository/simple-login-simple-login-android.md) (0 ⭐) — SimpleLogin is an open source solution to protect your email inbox. This repository contains source code of SimpleLogin Android client.
- [capacitor-community/facebook-login](https://awesome-repositories.com/repository/capacitor-community-facebook-login.md) (0 ⭐) — Facebook Login @capacitor-community/facebook-login Capacitor community plugin for native Facebook Login.
- [c0re100/qbittorrent-enhanced-edition](https://awesome-repositories.com/repository/c0re100-qbittorrent-enhanced-edition.md) (25,128 ⭐) — qBittorrent-Enhanced-Edition is a cross-platform desktop application designed to manage the downloading and uploading of files across peer-to-peer networks. It functions as an open-source file sharer, facilitating the decentralized distribution of digital content by breaking files into smaller pieces for efficient transfer.

The application utilizes a high-performance library to handle complex protocol specifications and employs a mature widget toolkit to provide a consistent native user interface across Windows, macOS, and Linux. It operates as a network traffic manager, incorporating asynchronous event-driven networking and multi-threaded task scheduling to maintain high throughput and system responsiveness during large-scale data transfers.

Beyond core file sharing, the software includes capabilities for automated content acquisition, remote management via web browsers, and granular bandwidth control. It supports extensible search functionality through external scripts and maintains state integrity using a local relational database for metadata storage.
