Open source oauth projects
Every project in the registry tagged oauth, ranked by real GitHub adoption.
Zero-config VPN with WireGuard for secure networking
Framework-agnostic authentication for TypeScript applications
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user ca
Secure, customizable authentication for your applications
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML
Build product integrations with 500+ APIs in hours
Modular auth, payments, emails, and analytics for your product
Open-source auth gateway connecting 1500+ SaaS providers to AI agents through SDK, CLI, MCP, HTTP, and OpenAPI.
PRAW, an acronym for "Python Reddit API Wrapper", is a python package that allows for simple access to Reddit's API.
Easy integration with OAuth 2.0 service providers.
Switch between Claude accounts, Gemini, Copilot, OpenRouter (300+ models) via CLIProxyAPI OAuth proxy. Visual dashboard, remote proxy support, WebSearch fallbac
Zero-Trust VPN with built-in 2FA/MFA and SSO capabilities
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
Related tags
Frequently asked questions
How many open source oauth projects are there?
This registry tracks 15 projects tagged oauth, with 169,198 GitHub stars between them. The most-adopted is Tailscale at 38,534 stars.
Are these oauth projects free to use?
Yes — 10 of the 15 carry an explicit open-source licence across 5 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which oauth project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these oauth projects still maintained?
14 of the 15 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.