The 15 best open-source Auth libraries in 2026, ranked by our maintenance-health metric plus real adoption (stars and weekly downloads) and security signals. Right now appwrite leads the field with a 100/100 health score. Each links to a full analysis with install commands, license, and alternatives.
appwrite is an open-source TypeScript project with 56.3k GitHub stars. It is associated with android, appwrite, backend, backend-as-a-service. The repository is actively maintained, with recent commits.
requests is an open-source Python project with 54k GitHub stars. It is associated with client, cookies, forhumans, http. The repository is actively maintained, with recent commits.
directus is an open-source TypeScript project with 36k GitHub stars. It is associated with api, app, cms, composable. The repository is actively maintained, with recent commits.
django-rest-framework is an open-source Python project with 30.1k GitHub stars. It is associated with api, django, python, rest. The repository is actively maintained, with recent commits.
better-auth is an open-source TypeScript project with 28.7k GitHub stars. It is associated with authentication, iam, oauth, oauth2. The repository is actively maintained, with recent commits.
next-auth is an open-source TypeScript project with 28.3k GitHub stars. It is associated with auth, authentication, csrf, jwt. The repository is actively maintained, with recent commits.
authelia is an open-source Go project with 28k GitHub stars. It is associated with 2fa, authentication, docker, golang. The repository is actively maintained, with recent commits.
devise is an open-source Ruby project with 24.4k GitHub stars. It is associated with authentication, devise, rails, ruby. The repository is actively maintained, with recent commits.
casbin is an open-source Go project with 20.2k GitHub stars. It is associated with abac, access-control, acl, apache. The repository is actively maintained, with recent commits.
fail2ban is an open-source Python project with 18k GitHub stars. It is associated with anti-bot, attack-prevention, ban-hosts, ban-management. The repository is actively maintained, with recent commits.
oauth2-proxy is an open-source Go project with 14.5k GitHub stars. It is associated with cloud-infrastructure, hacktoberfest, oauth2-proxy, ssl. The repository is actively maintained, with recent commits.
zitadel is an open-source Go project with 14k GitHub stars. It is associated with 2fa, authentication, authorization, fido2. The repository is actively maintained, with recent commits.
kratos is an open-source Go project with 13.7k GitHub stars. It is associated with hacktoberfest, identity, identity-management, login. The repository is actively maintained, with recent commits.
google-api-nodejs-client is an open-source TypeScript project with 12.2k GitHub stars. It is associated with client, client-library, google, google-api. The repository is actively maintained, with recent commits.
logto is an open-source TypeScript project with 12.1k GitHub stars. It is associated with authentication, authorization, email, identity. The repository is actively maintained, with recent commits.