SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Go Authentication Projects
-
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
Project mention: Authelia: The Single Sign-On Multi-Factor portal for web apps | news.ycombinator.com | 2024-07-11
-
casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN
-
Authentik - Open-source Identity Provider focused on flexibility and versatility.
-
-
hanko
The Complete Authentication and User Management Solution for the Passkey Era. Open Source Alternative to Clerk, Auth0, et al.
Project mention: My Journey with the OSS.GG Hackathon: A Fulfilling Open Source Experience | dev.to | 2024-10-28Participating in the OSS.GG hackathon has been an exciting and enriching experience. Engaging with projects from multiple partners like Dub, Formbricks, Hanko, OpenBB, Papermark, Twenty, and Unkey offered me the opportunity to explore the vast landscape of open source. Through this hackathon, I didn’t just contribute to code; I also got hands-on experience in non-code contributions, which opened up new avenues for collaboration and learning.
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
Ory Oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
-
S.S.Octopus
sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services
-
Project mention: Caddy – The Ultimate Server with Automatic HTTPS | news.ycombinator.com | 2025-02-16
With nginx I'm assuming you would use something like Vouch or oauth2-proxy? Something like the architecture described here:
https://github.com/vouch/vouch-proxy?tab=readme-ov-file#what...
Can't speak for caddy-security, but the forward_auth feature is the caddy equivalent to nginx's auth_request
-
-
Project mention: Launch HN: Stack Auth (YC S24) – An Open-Source Auth0/Clerk Alternative | news.ycombinator.com | 2024-08-08
This is great. Competition is definitely needed in the Authentication/Authorization space.
Quick question. How would this compare to supabase/gotrue [0] and permify [1]?
[0]: https://github.com/supabase/auth
-
authorizer
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
-
caddy-security
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
-
-
-
-
centrifuge
Real-time messaging library for Go. The simplest way to add feature-rich and scalable WebSocket support to your application. The core of Centrifugo server.
Project mention: Centrifugo v6 released – major update of scalable WebSocket server written in Go | news.ycombinator.com | 2025-01-16Hi everyone!
I'd like to share that we've just released Centrifugo v6 - a major update of scalable WebSocket server. The release addresses some usability pain points and adds nice features and more observability.
Centrifugo is an open-source standalone server written in Go – https://github.com/centrifugal/centrifugo. Centrifugo can instantly deliver messages to application online users connected over supported transports (WebSocket, HTTP-streaming, Server-Sent Events (EventSource), GRPC, WebTransport). Centrifugo has the concept of a channel – so it's a user-facing PUB/SUB server. Everything implemented in a language-agnostic way – so Centrifugo can be used in combination with any frontend or backend stack.
These days we also provide Centrifugo PRO version – and trying to find a balance to be sustainable.
The server is based on the open-source Centrifuge library - https://github.com/centrifugal/centrifuge, so many improvements mentioned in Centrifugo v6 release blog post (even those for Centrifugo PRO) may be used just as a library in Go application.
We provide real-time SDKs for popular client environments – for browser and mobile development – they connect to both Centrifuge library based servers and Centrifugo server.
Generally Centrifugal ecosystem provides a good alternative to Socket.IO and cloud services like Pusher.com and Ably.com
Will be happy to answer on any questions
-
The final middleware we need to add to our server is authentication. In this example, we'll use Keycloak as our identity provider. To interface with Keycloak in Go, we'll use the gocloak module. By leveraging gocloak, we can perform authentication against Keycloak using Gin middleware.
-
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Go Authentication discussion
Go Authentication related posts
-
PocketBase: Open-source back end in 1 file
-
PocketBase: Backend Made Simple
-
Zitadel Supports SCIM
-
PocketBase + SurrealDB
-
Top 16 DevOps Tools for 2025: (Excellent for SREs, Too!)
-
How (not) to sign a JSON object (2019)
-
Building a REST API with Golang, Gin, and Pocketbase
-
A note from our sponsor - SaaSHub
www.saashub.com | 16 May 2025
Index
What are some of the best open-source Authentication projects in Go? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | pocketbase | 47,007 |
| 2 | authelia | 23,733 |
| 3 | casbin | 18,594 |
| 4 | authentik | 16,120 |
| 5 | zitadel | 10,603 |
| 6 | hanko | 8,040 |
| 7 | go-grpc-middleware | 6,506 |
| 8 | gotrue | 4,058 |
| 9 | Ory Oathkeeper | 3,353 |
| 10 | S.S.Octopus | 3,112 |
| 11 | vouch-proxy | 3,072 |
| 12 | fosite | 2,391 |
| 13 | auth | 1,896 |
| 14 | authorizer | 1,799 |
| 15 | caddy-security | 1,748 |
| 16 | docker_auth | 1,318 |
| 17 | firebase-admin-go | 1,209 |
| 18 | auth | 1,199 |
| 19 | centrifuge | 1,189 |
| 20 | gocloak | 1,138 |
| 21 | go-keyring | 959 |
| 22 | paseto | 874 |
| 23 | pinniped | 654 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com