casdoor
Grant
| casdoor | Grant | |
|---|---|---|
| 37 | 5 | |
| 8,028 | 4,027 | |
| - | - | |
| 0.0 | 5.7 | |
| 3 months ago | about 2 months ago | |
| Go | JavaScript | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
casdoor
-
Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens
I'm using Casdoor: https://github.com/casbin/casdoor and glad to see it only has ~77,000 LOC according to the shared link.
Keycloak was good but has too much legacy for 10+ years. Casdoor is pretty new and has become a good replacement for Keycloak for me with more functionalities.
- CSRF Vulnerability Leads to Account Takeover in Casdoor IdP
- Casdoor: Open source Payment Gateway (PayPal, Stripe), SSO and SaaS subscription management platform in Golang
- 📦⚡️ Casdoor
-
Help needed - is there a product that provides the auth functionality we need?
Access keys & secrets are supported: https://github.com/casdoor/casdoor/pull/1971
-
Keycloak – Open-Source Identity and Access Management Interview
Looking at your username, it would be nice to mention that you are one of the main developers behind the tool instead of making it sound like you are unrelated: https://github.com/casbin/casbin/graphs/contributors https://github.com/casdoor/casdoor/graphs/contributors
-
Casdoor: a new open source SSO/IAM written in Go, with beautiful web UI, OIDC, OAuth 2.0, SAML, CAS, LDAP, WebAuthn and 2FA
Apparently they even removed the Chinese Tracker to Baidu now.
- An open-source Identity and Access Management (IAM) / Single-Sign-On (SSO) SaaS platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, SMS, 2FA, Captcha, Casbin and subscription management
- Casdoor: an open-source Identity and Access Management (IAM) platform with beautiful web UI supporting OAuth 2.0, OIDC, SAML and CAS
Grant
- Most stable and easy to implement Auth with SvelteKit?
-
Anybody can help with Authentication
I am implementing OAuth with Grant. It looks pretty fantastic with 200+ providers and completely manages full OAuth with a single config file. The problem is I am unable to work it with Next JS. The library works perfectly when I create a test project with express and express-session with these libraries it works perfectly from login to logout everything. In Next JS, I am using iron-session for session management.
-
Call to help beta test wireless highlight backups with https://kobli.me/
Thanks for taking a look! I use the https://www.npmjs.com/package/grant for OAuth (to spare people having to remember yet another password) and I believe it uses cookies to prevent OAuth replay attacks. Thanks for highlighting this. I'll work on a better error message if cookies are not enabled.
-
I got tired of fussing with auth, so I built a thing for building OAuth login in under 60 seconds.
Use a proxy like grant or delegating Idp like dex
-
Made an API(Express, Node)and Frontend(React). Now i want to add Authentication feature so that when user logs in, only then he lands on my Home Page.Sugggest good Resouces for these steps...
An alternative to passport is https://github.com/simov/grant
What are some alternatives?
casbin - An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN
Passport - Simple, unobtrusive authentication for Node.js.
Ory Hydra - OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security Modules. Compatible with MITREid.
workload-discovery-on-aws - Workload Discovery on AWS is a solution to visualize AWS Cloud workloads. With it you can build, customize, and share architecture diagrams of your workloads based on live data from AWS. The solution maintains an inventory of the AWS resources across your accounts and regions, mapping their relationships and displaying them in the user interface.
zitadel - ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.
everyauth - node.js auth package (password, facebook, & more) for Connect and Express apps
authelia - The Single Sign-On Multi-Factor portal for web apps
passwordless - node.js/express module to authenticate users without password
pam-keycloak-oidc - PAM module connecting to Keycloak for user authentication using OpenID Connect/OAuth2, with MFA/2FA/TOTP support
sveltekit-adapter-lambda - An adapter to build a SvelteKit app into a lambda ready for deployment with lambda proxy via the Serverless Framework.
Keycloak - Open Source Identity and Access Management For Modern Applications and Services
cloudfront-auth - An AWS CloudFront Lambda@Edge function to authenticate requests using Google Apps, Microsoft, Auth0, OKTA, and GitHub login