Top 8 C Authentication Projects

FreeRADIUS

4 1,931 5.3 C

FreeRADIUS - A multi-protocol policy server.

Project mention: My collection of Ansible roles for self-hosting everything with Rocky Linux and FreeIPA | /r/selfhosted | 2023-06-02

FreeRADIUS WiFi authentication server
Themis

0 1,776 5.5 C

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Onboard AI

getonboard.dev
sponsored

Learn any GitHub repo in 59 seconds. Onboard AI learns any GitHub repo in minutes and lets you chat with it to locate functionality, understand different parts, and generate new code. Use it for free at www.getonboard.dev.
OpenID

3 918 0.0 C

OpenID Certified™ OpenID Connect Relying Party implementation for Apache HTTP Server 2.x

Project mention: Easy to use OpenID Connect client and server library written for Go | news.ycombinator.com | 2023-12-01

otherwise connections would randomly drop. I was looking for other ways to make development a bit easier and also settled on mod_auth_openidc, which is an Apache module that lets it act like a Relying Party and handle lots of the heavy lifting (protecting endpoints, refreshing tokens etc.) for me, and lets me work with just a few headers that are passed to the protected resources: https://github.com/OpenIDC/mod_auth_openidc
It works, but I'm still not happy - I realize that there are many types of attacks that have historically been a problem and that certain OpenID Connect flows try to protect against, in addition to the fact that if I wrote my own security code it'd almost certainly be worse and have vulnerabilities (in the words of Eoin Woods: "Never invent security technology"), and it's a good thing to follow standards... but the whole thing is such a pain. Both OpenID Connect, Keycloak and configuring mod_auth_openidc.
Right now I'm moving permissions/roles from Keycloak back into the app DB, with references to the Keycloak user IDs, because I don't want to have to work with the Keycloak REST API every time I want to change what a user can or cannot do in the system, in addition to permissions which might only apply conditionally (one user might be related to multiple organizations, having different permissions in the context of each).
Regardless, it's nice that there are more pieces of software out there to choose from!
pam_reattach

0 514 0.0 C

Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)
eid-mw

0 185 0.0 C

eID Middleware (main repository)
l8w8jwt

1 109 10.0 C

Minimal, OpenSSL-less and super lightweight JWT library written in C.

Project mention: L8w8jwt – a minimal, OpenSSL-less and lightweight JWT library written in C | news.ycombinator.com | 2023-07-23
ecc

0 25 0.0 C

elliptic-curve cryptography
InfluxDB

www.influxdata.com
sponsored

Collect and Analyze Billions of Data Points in Real Time. Manage all types of time series data in a single, purpose-built database. Run at any scale in any environment in the cloud, on-premises, or at the edge.
3crypt

0 1 0.0 C

Strong encryption tool, aiming for 512 bits of symmetric security and memory hard key derivation.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2023-12-01.