Open source oauth2 projects

Every project in the registry tagged oauth2, ranked by real GitHub adoption.

projects 9 combined stars ★ 216K refresh nightly
01 Supabase ★ 110K

Postgres-powered backend platform for production apps

last push4 hours ago languageTypeScript licenseApache-2.0
02 Better Auth ★ 30K

Framework-agnostic authentication for TypeScript applications

last push9 hours ago languageTypeScript licenseMIT
03 Authentik ★ 26K

Take control of your identity with a secure, flexible solution

last push5 hours ago languagePython license
04 Zitadel ★ 15K

Secure, customizable identity infrastructure for developers

last push6 hours ago languageGo licenseAGPL-3.0
05 Logto ★ 15K

Secure, seamless authentication for modern applications

last push10 hours ago languageTypeScript licenseMPL-2.0
06 Nango ★ 12K

Build product integrations with 500+ APIs in hours

last push4 hours ago languageTypeScript license
07 ACI.dev ★ 4.9K

Build reliable AI agents with unified tool integration

last push4 months ago languagePython licenseApache-2.0
08 Authgear ★ 2.1K

Managed identity and access management for any app

last push16 hours ago languageGo licenseApache-2.0
09 daptin ★ 1.9K

Self-hosted application server for schema-driven APIs, identity, files, automation, integrations, realtime, metering, and protocols.

last push11 hours ago languageGo licenseLGPL-3.0

Related tags

← all tags

Frequently asked questions

How many open source oauth2 projects are there?

This registry tracks 9 projects tagged oauth2, with 216,153 GitHub stars between them. The most-adopted is Supabase at 109,900 stars.

Are these oauth2 projects free to use?

Yes — 7 of the 9 carry an explicit open-source licence across 5 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which oauth2 project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these oauth2 projects still maintained?

8 of the 9 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.