Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Tags
  3. Api Security

Api Security

139 projects

Showing 36 of 139 projects

Optimus
OptimusPHP

A PHP library for obfuscating integer IDs using Knuth's multiplicative hashing method, generating reversible integer hashes.

#ids#url-parameters#laravel
Stars1.3k
Forks75
Last commit2 years ago
Cherrybomb
CherrybombRust

A CLI tool that audits API specifications, validates OpenAPI compliance, and runs security tests to prevent undefined user behavior.

#firecracker#business-logic#cyber
Stars1.2k
Forks84
Last commit1 year ago
csrf
csrfGo

A Go middleware library providing CSRF protection for web applications with support for HTML forms and JavaScript frameworks.

#http-handler#web-security#csrf-protection
Stars1.2k
Forks173
Last commit1 year ago
AuthX
AuthXPython

A ready-to-use and customizable authentication and OAuth2 management library for FastAPI applications.

#fastapi#authentification#oauth2
Stars1.2k
Forks62
Last commit2 days ago
Lonkero
LonkeroRust

A professional-grade web security scanner for penetration testing with intelligent, context-aware scanning and proof-based vulnerability detection.

#sql-injection#web-security#security-automation
Stars972
Forks80
Last commit2 days ago
paseto
pasetoGo

A pure Go implementation of PASETO tokens, a secure alternative to JWT for stateless authentication.

#auth#soa#authentication
Stars940
Forks39
Last commit3 years ago
FastAPI JWT Auth
FastAPI JWT AuthPython

A FastAPI extension providing secure, easy-to-use JWT authentication with access/refresh tokens, WebSocket support, and CSRF protection.

#token-management#fastapi#authentication
Stars830
Forks179
Last commit2 years ago
Slim JWT Auth
Slim JWT AuthPHP

A PSR-7 and PSR-15 compatible middleware for JWT authentication in PHP applications.

#php-middleware#token-authentication#rest-api
Stars819
Forks142
Last commit1 year ago
joken
jokenElixir

A comprehensive JSON Web Token (JWT) library for Elixir applications.

#elixir#authentication#joken
Stars813
Forks102
Last commit5 months ago
FastAPI Limiter
FastAPI LimiterPython

A request rate limiter for FastAPI applications, powered by pyrate-limiter.

#fastapi#asyncio#dependency-injection
Stars789
Forks77
Last commit5 months ago
oxide-auth
oxide-authRust

A comprehensive and extensible OAuth2 server library for Rust with pluggable backends and web server integrations.

#web-authentication#actix-web#authorization-server
Stars781
Forks101
Last commit5 months ago
jwt
jwtGo

A safe, simple, and fast JSON Web Token (JWT) library for Go, implementing RFC 7519.

#jwt-token#rfc 7519#jwt-claims
Stars690
Forks47
Last commit1 year ago
GraphQL Cop
GraphQL CopPython

A lightweight Python utility for running common security tests against GraphQL APIs, ideal for CI/CD checks.

#graphql#penetration-testing#security
Stars681
Forks100
Last commit8 months ago
FastAPI Azure Auth
FastAPI Azure AuthPython

Easy and secure Azure Entra ID authentication for FastAPI APIs with B2C, single-tenant, and multi-tenant support.

#fastapi#azuread#openid
Stars679
Forks77
Last commit22 days ago
Lumen Passport
Lumen PassportPHP

A service provider that enables Laravel Passport OAuth2 server functionality in Lumen micro-framework applications.

#lumen#micro-framework#oauth2
Stars650
Forks138
Last commit2 years ago
go-guardian
go-guardianGo

A Go library providing simple, clean, and idiomatic authentication for modern APIs and web applications.

#totp#web-authentication#oauth2
Stars613
Forks61
Last commit2 years ago
graphql-armor
graphql-armorTypeScript

A customizable security middleware for Apollo GraphQL, Yoga, and Envelop GraphQL servers.

#hacktoberfest#dos-protection#graphql
Stars586
Forks51
Last commit1 day ago
Strong node.js
Strong node.jsJavaScript

An exhaustive security checklist for Node.js web services, focused on Express and Hapi frameworks.

#secure-coding#vulnerability-assessment#owasp
Stars508
Forks28
Last commit2 years ago
a12n-server
a12n-serverTypeScript

A lightweight, open-source OAuth2 and OpenID Connect authentication server for Node.js.

#totp#hacktoberfest#oauth2-server
Stars498
Forks52
Last commit5 months ago
Automatic API Attack Tool
Automatic API Attack ToolJava

An automated API security testing tool that generates and runs fuzzing attacks based on an OpenAPI/Swagger specification.

#gradle#fuzzing#swagger
Stars496
Forks93
Last commit3 years ago
FastAPI Simple Security
FastAPI Simple SecurityPython

A drop-in API-key security package for FastAPI with automatic key management and local SQLite storage.

#fastapi#authentication#api-keys
Stars467
Forks31
Last commit2 years ago
graphql-guard
graphql-guardRuby

A Ruby gem providing field-level authorization for GraphQL APIs with flexible policy definitions.

#pundit#graphql#schema-masking
Stars466
Forks35
Last commit3 years ago
Filterus
FilterusPHP

A flexible PHP library for filtering and validating user input with built-in filters and complex chaining.

#validation#security#php
Stars446
Forks52
Last commit7 years ago
Slim Basic Auth
Slim Basic AuthPHP

A PSR-7 and PSR-15 compliant HTTP Basic Authentication middleware for PHP frameworks.

#php-middleware#authentication#http-basic-auth
Stars443
Forks65
Last commit3 months ago
CPP-JWT
CPP-JWTC++

A C++14 library for creating, signing, verifying, and decoding JSON Web Tokens (JWT) with a clean API.

#security-tokens#authentication#jwt-header
Stars439
Forks124
Last commit4 months ago
FastAPI Cloud Auth
FastAPI Cloud AuthPython

A FastAPI extension that simplifies integration with AWS Cognito, Auth0, and Firebase Authentication for token verification and user management.

#fastapi#firebase-authentication#oauth2
Stars438
Forks36
Last commit3 years ago
Gravitee.io API Management ()
Gravitee.io API Management ()Java

An open-source API management platform for controlling access, lifecycle, and analytics of your APIs.

#api-gateway#api-analytics#open-source
Stars431
Forks116
Last commit1 day ago
cors_plug
cors_plugElixir

An Elixir Plug for adding Cross-Origin Resource Sharing (CORS) headers to web applications.

#elixir#phoenix-framework#http-headers
Stars402
Forks79
Last commit2 years ago
optimus-go
optimus-goGo

A Go library for obfuscating integer IDs using Knuth's hashing algorithm to hide database primary keys.

#id-obfuscation#go-library#privacy
Stars369
Forks25
Last commit6 years ago
jwt
jwtGo

A feature-complete, dependency-free JSON Web Token library for Go with secure API design.

#http-handler#public-domain#oauth2
Stars361
Forks24
Last commit3 years ago
Slim CSRF
Slim CSRFPHP

PSR-15 middleware for CSRF protection in Slim Framework applications.

#web-security#form-security#csrf-protection
Stars352
Forks59
Last commit7 months ago
GraphCrawler - The all-in-one GraphQL Security toolkit
GraphCrawler - The all-in-one GraphQL Security toolkitPython

An automated security testing toolkit for GraphQL endpoints that discovers, analyzes, and scores vulnerabilities.

#api#api-hacking#graphql
Stars335
Forks23
Last commit
RateLimitBundle
RateLimitBundlePHP

A Symfony bundle that adds rate limiting to controllers and actions using PHP attributes.

#redis#symfony-bundle#rate-limiting
Stars334
Forks74
Last commit8 months ago
Google Tink
Google TinkJava

A Google-developed Java cryptography library providing secure, misuse-resistant APIs for developers.

#crypto#java-library#enterprise-security
Stars294
Forks37
Last commit1 day ago
hashids
hashidsElixir

An Elixir library for obfuscating numerical IDs into short, unique, reversible strings.

#elixir#library#id-obfuscation
Stars282
Forks16
Last commit2 years ago
API Guard
API GuardRuby

A JWT-based authentication gem for Rails APIs with token refreshing, blacklisting, and easy integration.

#token-management#refresh-tokens#rails
Stars278
Forks30
Last commit2 years ago
PreviousPage 2 of 4

Related Tags

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub
2 years ago
Next
#Authentication70
#Security41
#Jwt38
#Authorization35
#Middleware27
#Oauth227
#Php19
#Openid Connect17
#Python17
#Go17
#Rate Limiting15
#Graphql15