Awesome GitHub RepositoriesBiometric Authentication

JumpServer is a privileged access management platform designed to manage and audit secure access to SSH, RDP, Kubernetes, and database endpoints. It functions as a centralized gateway that brokers remote terminal and graphical sessions to isolate users from critical infrastructure. The system utilizes a web-based protocol gateway to translate remote connections into browser-compatible streams and a protocol-based proxy layer to isolate end-user devices from target assets. It incorporates security watermarking to deter unauthorized screen captures and provides a Kubernetes access gateway for c

InsightFace is a comprehensive deep learning framework designed for face recognition, biometric identity verification, and feature extraction. It provides a specialized engine for one-to-one verification and one-to-many identification tasks, utilizing convolutional neural networks to transform raw image pixels into high-dimensional vector embeddings. The project includes a complete toolkit for detecting, aligning, and processing facial data to ensure consistent identity discrimination. Beyond core recognition, the platform distinguishes itself through an extensive model management and optimiz

Compose Samples is a collection of reference implementations for the Jetpack Compose UI library, serving as a practical guide for building native Android user interfaces. It demonstrates the use of a declarative framework where Kotlin functions describe layout structures and data dependencies, enabling developers to construct modern, reactive interfaces. The repository highlights architectural patterns that prioritize maintainability and testability, such as layered organization and unidirectional data flow. It showcases how to implement adaptive layouts that automatically adjust to various s

Teleport is a zero-trust access platform designed to provide secure, identity-based connectivity to servers, databases, and Kubernetes clusters. It functions as a centralized gateway that replaces static credentials with short-lived, identity-bound cryptographic certificates, effectively eliminating the need for traditional VPNs and long-term secret exposure. The platform distinguishes itself by orchestrating access through a unified control plane that maps external identity provider claims to granular, role-based infrastructure permissions. It enforces security through mutual TLS gateways an

Sunflower is a reference implementation designed to demonstrate modern Android development patterns and industry-standard architectural practices. It serves as a comprehensive guide for building functional mobile applications by integrating declarative user interface toolkits with robust data management and navigation systems. The project distinguishes itself by showcasing the transition from legacy view-based systems to modern declarative frameworks. It provides a practical example of how to organize code into distinct layers, manage complex state, and implement dependency injection to ensur

KeeWeb is a web-based password manager and vault that allows users to open and edit encrypted databases through a browser interface. It functions as a cross-platform tool for managing password vaults using the KeePass database format. The application provides a self-hosted password vault that can be deployed as a single HTML file or via Docker. It integrates with remote storage providers using OAuth to synchronize encrypted database files across multiple devices. The system includes capabilities for secure credential generation, two-factor authentication management through time-based one-tim

Aegis is a mobile application designed to manage and store multi-factor authentication tokens. It functions as a local-first credential vault that generates time-based and counter-based one-time passwords to verify user identity across various online services. The application secures sensitive authentication data by employing authenticated symmetric encryption and hardware-backed key storage to protect credentials at rest. Access to the stored tokens is gated by system-level biometric authentication or password verification, ensuring that only authorized users can retrieve the generated secur

This repository provides a collection of interactive sample applications and reference implementations for the Electron framework. It serves as a library of API reference demos designed to help developers learn how to implement core desktop features. The project features visual demonstrations of cross-platform GUI management and practical examples of native operating system integration. It includes dedicated samples for handling native modules, crash reports, and the configuration of security implementations such as content security policies and process sandboxing. The codebase covers a broa

This project is an Android password manager application that provides an end-to-end encrypted vault for storing and synchronizing login credentials, secure notes, and identities. It functions as a secure storage system using zero-knowledge encryption to ensure that only the user can decrypt their stored data. The application integrates directly with the Android system to provide an autofill service that populates usernames and passwords into mobile apps and browser login fields. It also serves as a passkey management wallet for FIDO2 cryptographic passkeys and a time-based one-time password a

Secretive is an SSH key manager that utilizes hardware-backed security modules to generate and store non-exportable private keys. It integrates with secure enclaves to ensure that sensitive cryptographic material remains within the hardware and cannot be exported from the device. The system implements a biometric authentication workflow, requiring fingerprint or wearable verification before a private key is released for signing operations. It also provides the ability to bridge signing requests to external hardware tokens for systems that lack a built-in secure enclave. The project includes

Howdy is a biometric authentication system for Linux that uses infrared cameras to provide passwordless login and privileged access. It functions as a Pluggable Authentication Module to integrate facial recognition into the standard Linux authentication pipeline. The system relies on near-infrared camera feeds and facial models to verify identity, ignoring visible light interference. Biometric data is stored as encrypted mathematical templates on the local disk to ensure that facial models are not transmitted over a network. The project includes tools for face model management, infrared came

This project is a collection of practical implementation examples and demonstrations for building mobile applications using a JavaScript-based native framework. It serves as a cross-platform mobile framework demo, providing a gallery of interactive interface patterns and native integration suites. The repository showcases specialized capabilities including high-performance 2D and 3D visual content through OpenGL graphics implementation. It also features a suite of native hardware integrations, covering biometric authentication via fingerprint scanning and gesture-based unlock patterns. The p

AndroidX is the official collection of Android Jetpack libraries for building Android applications. It provides a suite of backward-compatible APIs that expose modern platform features on older Android versions, ensuring consistent functionality across devices. The project is built around lifecycle-aware component architecture, with tools like ViewModel for preserving UI data across configuration changes, LiveData for lifecycle-aware data observation, and WorkManager for constraint-based background task scheduling. The project distinguishes itself through compile-time code generation and type

WebDriverAgent 是一个设备端控制代理和自动化服务器，为 iOS 设备实现了 WebDriver 协议。它作为一个桥梁，能够远程控制物理 iOS 设备和模拟器上的应用程序及操作系统，以进行自动化测试。 该项目提供了一个 UI 测试框架，能够与屏幕元素交互、捕获屏幕截图并模拟用户手势。它将远程命令转换为原生系统调用，以与 iOS 辅助功能层次结构进行交互。 该服务器涵盖了广泛的设备编排和 UI 自动化功能，包括应用程序生命周期管理、设备方向控制和主屏幕导航。它还处理系统级任务，如生物识别身份验证模拟、系统警报处理和元素属性查询。 连接通过在目标设备上运行的 REST 服务器建立，支持通过 USB 隧道或无线连接进行通信。

Valet 是一个 Swift 库，用于管理 Apple 系统钥匙串中跨 iOS 和 macOS 的安全数据存储。它为使用硬件支持的安全隔离区存储和检索敏感字符串及数据对象提供了高级封装。 该项目支持通过基于云的钥匙串服务在多台设备间同步存储的钥匙串数据。它还包括用于在同一开发者的多个应用之间交换安全凭据的机制，使用共享钥匙串访问和应用组授权。 该库涵盖了用于保护数据检索的生物识别身份验证，并管理现有钥匙串条目的迁移和重映射。

FingerprintPay is an Android biometric payment bridge and credential manager that replaces manual password entry with biometric verification for checkout processes in compatible mobile applications. It functions as a tool to authorize payment transactions and automate credential entry through fingerprint verification. The system utilizes hardware-backed security to decrypt stored payment credentials and map biometric identities to encrypted data blobs stored within the device hardware security module. The project covers mobile payment security and automated credential entry by combining hard

This is a PHP native application framework used to build standalone desktop and mobile applications. It functions as a cross-platform app wrapper and binary application bundler, encapsulating PHP codebases into native binaries and installers for macOS, Windows, Linux, iOS, and Android. The project provides a native device API bridge and OS integration layer, allowing PHP application logic to connect directly to host operating system services. This enables the execution of applications as local binaries without the requirement of a remote web server. The framework covers several high-level ca

Lux is a blockchain infrastructure project providing a distributed ledger and a smart contract platform. It utilizes a hybrid proof-of-work and proof-of-stake consensus mechanism to secure decentralized transactions and maintain network stability. The project features a peer-to-peer ecosystem that includes a decentralized file storage system for immutable data, a masternode network for governance, and a cross-chain asset bridge. It distinguishes itself with an ASIC-resistant hashing algorithm optimized for general-purpose CPUs and a decentralized order book for matching trades without a centr

Sekey is a hardware-backed SSH key manager and authentication agent designed to isolate private keys from system memory. It utilizes a secure enclave to generate, store, and manage cryptographic key pairs, ensuring that sensitive material remains within a protected hardware environment and cannot be extracted by the host system. The project implements biometric-gated request signing, requiring a biometric authentication event before the hardware security module signs a cryptographic challenge. It functions as a middleware bridge that connects standard SSH protocols to these hardware-based sig

This project is a Go library designed for facial detection, landmark mapping, and identity verification. It provides a toolkit for integrating computer vision capabilities into applications, enabling the automated identification and analysis of human faces within digital images. The library utilizes a deep residual network to transform facial data into compact vector representations, which are then compared using geometric distance calculations to confirm identities. It employs histogram-based object detection to locate facial structures and maps specific points on the face to define geometry