SaaSHub helps you find the best software and product alternatives Learn more →
Top 20 Go openid-connect Projects
-
Project mention: Authelia: The Single Sign-On Multi-Factor portal for web apps | news.ycombinator.com | 2024-07-11
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
Ory Hydra
The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.
Project mention: Show HN: Graceful token refresh for open source OAuth2 Server Ory Hydra | news.ycombinator.com | 2025-01-21 -
-
Ory Oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
-
-
traefik-forward-auth
Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy
Project mention: Ask HN: What type of Auth are you using on your side projects? | news.ycombinator.com | 2024-10-05I use Traefik with OpenID Connect for everything, and Google as IdP. It's few enough people that I simply add them manually to traefik-forward-auth's settings in Docker Compose.
https://github.com/thomseddon/traefik-forward-auth
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
oidc
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
-
-
I work on opkssh and I agree with everything you have just said.
The value of opkssh makes sense in an environment in which already have OpenID Connect as the foundation for identity in your system.
OpenPubkey[0], the protocol opkssh is built on, supports cosigners, which parallel identity attestations. OpenPubkey is currently is designed to use cosigners purely for security, i.e., to remove the IDP as a single point of compromise.
OpenPubkey is built on JSON Web Signatures and JSON Web Signatures can support any number of signers. One could easily extend OpenPubkey to something like, 0x1234 is Alice's public if her public key signed by 7 out of 10 identity cosigners.
What you are describing is the same dream I have: decentralized, secure, human-meaningful names. This is hard to build [1] and you have to start sometime, so I started with the existing identity provider infrastructure but that the beginning. If you are interested in building this future, come work on https://github.com/openpubkey/openpubkey/
[0] OpenPubkey: Augmenting OpenID Connect with User held Signing Keys https://eprint.iacr.org/2023/296
[1] Zooko's triangle is a trilemma of three properties that some people consider desirable for names of participants in a network protocol https://en.wikipedia.org/wiki/Zooko%27s_triangle
-
s3-proxy
S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)
-
-
-
Project mention: Launch HN: Stack Auth (YC S24) – An Open-Source Auth0/Clerk Alternative | news.ycombinator.com | 2024-08-08
Congrats for the launch! We also launched an open sources (Apache 2 licensed) auth0 alternatives with paid hosting / enterprise support as revenue few years ago. Glad to see more efforts to help make software more secure for consumers!
https://github.com/authgear/authgear-server
-
-
pam-keycloak-oidc
PAM module connecting to Keycloak for user authentication using OpenID Connect/OAuth2, with MFA/2FA/TOTP support
-
-
lico
LibreGraph Connect implements an OpenID provider (OP) with integrated web login and consent forms.
-
Ferrum
Simple and Fast OpenId-Connect authorization server with Keycloak compatible API written in GO. The possibility to increase application clients number and authentication/authorization speed without any modification due to the API compatibility (by Wissance)
This approach and package could be used not only for containerized applications but for apps running natively too. This package is successfully working on our authorization server.
-
Project mention: Show HN: Authduck – Playground Server for OpenID Connect Clients | news.ycombinator.com | 2024-12-05
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Go openid-connect discussion
Go openid-connect related posts
-
Use OIDC with SSH (Open Source)
-
OpenID Coming to SSH
-
Open-Sourcing OpenPubkey SSH
-
Override Go app configuration with Environment variable
-
OpenPubkey: Protocol for leveraging OpenID to bind identities to public keys
-
14 DevOps and SRE Tools for 2024: Your Ultimate Guide to Stay Ahead
-
Easy to use OpenID Connect client and server library written for Go
-
A note from our sponsor - SaaSHub
www.saashub.com | 13 May 2025
Index
What are some of the best open-source openid-connect projects in Go? This list will help you:
# | Project | Stars |
---|---|---|
1 | authelia | 23,733 |
2 | Ory Hydra | 16,152 |
3 | zitadel | 10,559 |
4 | Ory Oathkeeper | 3,353 |
5 | fosite | 2,390 |
6 | traefik-forward-auth | 2,275 |
7 | kubelogin | 1,948 |
8 | oidc | 1,557 |
9 | opkssh | 1,484 |
10 | openpubkey | 839 |
11 | s3-proxy | 346 |
12 | heimdall | 186 |
13 | goiabada | 149 |
14 | authgear-server | 114 |
15 | go-oidc-middleware | 99 |
16 | pam-keycloak-oidc | 82 |
17 | pam_oidc | 66 |
18 | lico | 42 |
19 | Ferrum | 6 |
20 | authduck | 4 |