Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Tags
  3. Api Security

Api Security

139 projects

Showing 36 of 139 projects

frank_jwt
frank_jwtRust

A Rust implementation of JSON Web Tokens (JWT) supporting multiple signing algorithms.

#jwt-token#authentication#web-tokens
Stars251
Forks44
Last commit1 year ago
jwt-auth
jwt-authGo

A JWT authentication middleware for Go HTTP servers with short-lived auth tokens, refresh tokens, and CSRF protection.

#http-server#web-security#go-middleware
Stars238
Forks41
Last commit5 years ago
djwt
djwtTypeScript

A lightweight library for creating and verifying JSON Web Tokens (JWT) in Deno and browser environments.

#jsonwebtoken#web-crypto#authentication
Stars235
Forks22
Last commit2 years ago
FastAPI Security
FastAPI SecurityPython

A FastAPI extension that provides authentication and authorization via dependencies.

#fastapi#oauth2#authentication
Stars234
Forks9
Last commit3 years ago
oauth-signature-js
oauth-signature-jsJavaScript

A JavaScript library for generating OAuth 1.0a signatures compliant with RFC 5849 for Node.js and browser environments.

#oauth#authentication#nodejs
Stars232
Forks69
Last commit9 years ago
oauth2
oauth2Erlang

An Erlang library for implementing the server side of OAuth 2.0 authorization.

#oauth2#server-side#authentication
Stars221
Forks69
Last commit1 day ago
jwt
jwtCrystal

A comprehensive JSON Web Token (JWT) implementation for the Crystal programming language.

#crystal-shard#crystal-library#token-based-authentication
Stars212
Forks24
Last commit3 months ago
goiabada
goiabadaGo

An open-source OAuth2 and OpenID Connect server for simple, secure authentication, built in Go.

#oauth2#authentication#user-management
Stars204
Forks24
Last commit1 day ago
Imperial
ImperialSwift

A Vapor middleware for adding federated authentication with OAuth providers to Swift server applications.

#hacktoberfest#federated-login#oauth
Stars194
Forks52
Last commit1 year ago
KarserRecaptcha3Bundle
KarserRecaptcha3BundlePHP

A Symfony bundle for integrating Google reCAPTCHA v3 to protect forms and APIs from bots without user interaction.

#bot-protection#recaptcha#google-recaptcha
Stars187
Forks24
Last commit10 months ago
GraphQLer
GraphQLerPython

A dependency-aware GraphQL API fuzzing tool that automatically generates and executes security tests based on schema introspection.

#api#graphql#api-testing-framework
Stars173
Forks17
Last commit3 days ago
phoenix_token_auth
phoenix_token_authElixir

A token authentication library for Phoenix applications, designed for API authentication in single-page apps.

#elixir#single-page-app#authentication
Stars163
Forks37
Last commit10 years ago
Paseto.Core
Paseto.CoreC#

A .NET implementation of Paseto (Platform-Agnostic Security Tokens) for secure token generation, validation, and key serialization.

#security-tokens#authentication#paseto
Stars156
Forks11
Last commit24 days ago
DunglasAngularCsrfBundle
DunglasAngularCsrfBundlePHP

Automatic CSRF protection for JavaScript apps using Symfony APIs via cookie-header validation.

#csrf-attacks#cookie-validation#web-security
Stars148
Forks32
Last commit5 years ago
json_web_token_ex
json_web_token_exElixir

An Elixir implementation of the JSON Web Token (JWT) standard (RFC 7519) for secure authentication and data exchange.

#rfc 7519#elixir#token-based-authentication
Stars144
Forks52
Last commit5 years ago
liboauth2
liboauth2C

A C library for building OAuth 2.x and OpenID Connect servers and clients, with plugins for Apache and NGINX.

#c-library#oauth#oauth2
Stars139
Forks33
Last commit1 month ago
Jwt Artisan
Jwt ArtisanPHP

A JWT authentication package for Laravel and Lumen with built-in security features and middleware.

#lumen#composer#laravel
Stars138
Forks8
Last commit9 months ago
rhabdomancer
rhabdomancerRust

A fast IDA Pro plugin that finds calls to insecure API functions in binaries to aid vulnerability research.

#headless-tool#vulnerability-research#binary-analysis
Stars137
Forks15
Last commit3 days ago
goctopus
goctopusGo

A fast GraphQL discovery and fingerprinting toolbox for security testing and reconnaissance.

#2023#introspection-detection#subdomain-enumeration
Stars135
Forks13
Last commit2 years ago
OpenID Connect
OpenID ConnectHTML

A curated list of OpenID Connect providers, libraries, resources, and specifications for implementing modern authentication.

#oauth#developer-tools#oauth2
Stars133
Forks31
Last commit22 days ago
Awesome OpenID Connect
Awesome OpenID ConnectHTML

A curated list of OpenID Connect providers, libraries, resources, and specifications for implementing modern authentication.

#oauth#developer-tools#oauth2
Stars133
Forks31
Last commit22 days ago
sjwt
sjwtGo

A minimalistic Go library for generating, parsing, and verifying HMAC SHA-256 JSON Web Tokens.

#token-management#jsonwebtoken#authentication
Stars123
Forks9
Last commit11 months ago
Cisco REST API Guide
Cisco REST API Guide

Cisco's comprehensive design guidelines for building consistent, secure, and RESTful network APIs.

#json-api#oauth2#enterprise-apis
Stars122
Forks30
Last commit2 years ago
SvelteKit Auth
SvelteKit AuthTypeScript

A SvelteKit example app demonstrating multiple authentication backend implementations with protected routes and API endpoints.

#demo#auth#protected-routes
Stars118
Forks10
Last commit3 years ago
magento2-cors
magento2-corsPHP

A Magento 2 module that adds configurable CORS headers to the GraphQL and REST APIs for headless applications.

#ecommerce#magento2#hacktoberfest
Stars101
Forks33
Last commit1 month ago
OpenIG
OpenIGJava

An open-source identity gateway that provides authentication, access control, and single sign-on for web and cloud applications.

#reverse-proxy#oauth#authentication
Stars94
Forks15
Last commit7 days ago
Guardian
GuardianSwift

A Vapor 3 middleware for rate limiting API requests by IP address and URL, returning HTTP 429 when limits are exceeded.

#api-middleware#http-429#request-throttling
Stars88
Forks6
Last commit8 years ago
speakeasy
speakeasyElixir

Middleware-based authorization for Absinthe GraphQL powered by Bodyguard, providing authentication-agnostic access control.

#elixir#phoenix#graphql
Stars82
Forks7
Last commit3 years ago
Declarative Authorisation Middleware
Declarative Authorisation MiddlewareTypeScript

A declarative authorization middleware for Prisma that operates at the model level to secure GraphQL APIs.

#declarative#graphql#role-based-access
Stars81
Forks2
Last commit1 year ago
Gatekeeper
GatekeeperSwift

Rate limiting middleware for Vapor applications, restricting requests based on client identifiers like IP address.

#vapor-middleware#http-middleware#rate-limits
Stars76
Forks16
Last commit5 years ago
hide
hideGo

A Go package that provides an ID type to prevent exposing internal numeric IDs to clients using HashIDs and JSON marshaling.

#type#id-obfuscation#json-marshaling
Stars72
Forks6
Last commit5 years ago
JWSETKit
JWSETKitSwift

A modern Swift library for JOSE standards (JWT, JWS, JWE, SD-JWT) with first-class CryptoKit and secp256k1 support.

#jsonwebtoken#authentication#cryptokit
Stars69
Forks16
Last commit1 month ago
IdentityServer
IdentityServer

OpenID Connect and OAuth 2.0 framework for ASP.NET Core (archived, superseded by Duende IdentityServer).

#authentication#asp-net-core#oauth-2
Stars64
Forks745
Last commit1 year ago
Flask-GraphQL-Auth
Flask-GraphQL-AuthPython

A Python library providing JWT authentication decorators for Flask-GraphQL applications.

#flask-extension#auth#authentication
Stars63
Forks11
Last commit3 years ago
Muffin/Throttle plugin
Muffin/Throttle pluginPHP

A CakePHP plugin for rate limiting API requests with configurable limits, client identification, and event-driven customization.

#cakephp#cakephp-plugin#rate-limiting
Stars62
Forks13
Last commit3 years ago
Shield
ShieldCrystal

A comprehensive Identity & Access Management solution for the Lucky framework with robust authentication and authorization features.

#oauth2#authentication#crystal-lang
Stars57
Forks8
Last commit22 days ago
PreviousPage 3 of 4

Related Tags

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub
Next
#Authentication70
#Security41
#Jwt38
#Authorization35
#Middleware27
#Oauth227
#Php19
#Openid Connect17
#Python17
#Go17
#Rate Limiting15
#Graphql15