S.S.Octopus
Ory Hydra
S.S.Octopus | Ory Hydra | |
---|---|---|
5 | 37 | |
3,059 | 15,101 | |
0.2% | 0.6% | |
0.0 | 9.1 | |
7 days ago | 6 days ago | |
Go | Go | |
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
S.S.Octopus
-
Use OpenZiti to secure your monitoring
2. An identity aware SSO proxy by Buzzfeed[0]
I really like Buzzfeed's SSO implementation, but it hasn't received updates in a while and doesn't seem to be maintained to me. I could absolutely see OpenZiti replacing this for me.
I really like Wireguard and have absolutely no complaints with it -- but if OpenZiti could replace this as well and match the performance I get on Wireguard I would consider implementing it at home (and would probably be a happy enough customer to push for it at work).
One non-typical use-case I use Wireguard for is being able to do remote game streaming to my Windows hosts via Moonlight+Nvidia Gamestream. Would anyone be able to (anecdotally or scientifically), share how well a use-case like this would work with OpenZiti?
[0] https://github.com/buzzfeed/sso
-
Libredirect – Redirect social media and websites to privacy friendly front ends
In addition to this suggestion, another viable route is to self-host those applications you rely on and don't expose them to the world (so as to reduce load/attack surface). Using a VPN can allow you to access the applications privately/remotely.
e.g. I self-host the applications I rely on such as Teddit, Nitter, Bibliogram and Cloudtube and then use Wireguard to always remain connected to the network they are accessible on. I have also implemented identity-aware SSO[1] so I can expose those applications remotely to specific individuals.
[1] https://github.com/buzzfeed/sso
-
Add Password Protection to Any Site with OAuth2 Proxy - Plus Social Logins
If oauth2-proxy doesn't suit your needs, there are some projects that have spun-off from oauth2-proxy like pomerium and BuzzFeed's sso. In addition to the open source library, Pomerium offers a paid service with a GUI to help IT staff more easily manage user permissions. BuzzFeed's sso builds upon oauth2-proxy by separating the domain used for auth from the domain used for the proxy (among several other changes).
-
Introduction to Zero Trust on AWS ECS Fargate
SSO to the rescue!
-
Web proxy (Bastion ?) to access Website in "private" network.
https://github.com/buzzfeed/sso - Google only
Ory Hydra
- Show HN: Open-source OAuth2 server Ory Hydra now 6x faster
-
🚀 Top 12 Open Source Auth Projects Every Developer Should Know 🔑
OAuth Server - Hydra
-
Ask HN: Freelancer? Seeking freelancer? (July 2023)
For examples of my work see my contributions to Ory Hydra https://github.com/ory/hydra.
I'd be more than happy to talk about how I can bring value to your project. Let's have a conversation!
- Show HN: Open-Source OAuth2/OIDC Server Ory Hydra 2.1.2 Release
- Open Source OAuth2/OIDC Server Ory Hydra v2.1.2 Released
-
Ory Hydra VS boruta-server - a user suggested alternative
2 projects | 22 May 2023
-
Are there any OIDC Provider libraries for Golang?
Another package you might want to consider is ORY Hydra. https://github.com/ory/hydra
-
Advice me user and oauth2
Check this project: https://github.com/ory/hydra
-
Show HN: Kinde – auth, feature flags and billing (Q3) in one integration
> 10k M2M tokens for $250/month sounds like a really bad deal if I can just spin up https://github.com/ory/hydra that can easily handle 10k requests per second.
Spinning one up is easy, sure. Making sure it's production ready, is not so much.
-
Tailscale – Introducing Custom OIDC
Have not tried Dex so can't speak to that.
https://github.com/ory/hydra
What are some alternatives?
vouch-proxy - an SSO and OAuth / OIDC login solution for Nginx using the auth_request module
casdoor - An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA and RADIUS [Moved to: https://github.com/casdoor/casdoor]
Pomerium - Pomerium is an identity and context-aware reverse proxy for zero-trust access to web applications and services.
IdentityServer - The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core
zitadel - Cloud-native Identity & Access Management solution providing a platform for secure authentication, authorization and identity management.
Keycloak - Open Source Identity and Access Management For Modern Applications and Services
zitadel - ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.
dex - OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Nginx Proxy Manager - Docker container for managing Nginx proxy hosts with a simple, powerful interface
Ory Kratos - Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market!
farside - A smart redirecting gateway for various frontend services
node-oidc-provider - OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js