Python Authorization

Open-source Python projects categorized as Authorization

Missing quite a few other open source projects in this space like SuperTokens (https://supertokens.com) and Keycloak.

Top 20 Python Authorization Projects

  • OAuthLib

    A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

  • OPAL

    Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...) (by permitio)

  • Project mention: Top 5 Access Control Features You Should Implement in 2024 | dev.to | 2023-12-27

    Another tool that can help you deploy a Policy as Code-based solution in 2024 is OPAL, the Open Policy Administration Layer. OPAL is an open-source project that provides a comprehensive policy-based service for applications. With one click, you can deploy a full architecture of a Git-based centralized policy store with decentralized policy engines running as a sidecar with your applications. OPAL also provides a unified architecture to sync all the data you need with the policy engines.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • django-rules

    Awesome Django authorization, without the database

  • KubiScan

    A tool to scan Kubernetes cluster for risky permissions

  • pycasbin

    An authorization library that supports access control models like ACL, RBAC, ABAC in Python

  • Authomatic

    Simple yet powerful authorization / authentication client library for Python web applications.

  • Autorize

    Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

  • Project mention: Autorize – The most popular tool to discover AuthZ/AuthN flaws | news.ycombinator.com | 2023-12-28
  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • Python Social

    Python Social Auth - Core

  • Project mention: New, easy to integrate OAuth2 authentication for FastAPI | /r/Python | 2023-08-22

    fastapi-oauth2 is a middleware-based social authentication mechanism supporting several OAuth2 providers. It leverages the social-core authentication backends and integrates seamlessly with FastAPI applications.

  • django-rest-framework-passwordless

    Passwordless Auth for Django REST Framework

  • easyauth

    Create a centralized Authentication and Authorization token server. Easily secure FastAPI endpoints based on Users, Groups, Roles or Permissions with very little database usage.

  • route-detect

    Find authentication (authn) and authorization (authz) security bugs in web application routes.

  • Project mention: Introducing route-detect: find authentication and authorization bugs in web application routes | /r/netsec | 2023-06-29

    Here's the paper [PDF] behind route-detect if you're interested in the details: https://github.com/mschwager/route-detect/blob/main/practicum/final-paper.pdf

  • raider

    OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions (by OWASP)

  • django-casbin

    Authorization middleware for Django based on PyCasbin

  • Project mention: Ask HN: How do you implement authorization in Django? | news.ycombinator.com | 2023-12-03
  • sanic-security

    An effective, simple, and async security library for the Sanic framework.

  • deny

    Python authorization library

  • fastapi-auth-middleware

    Lightweight auth middleware for FastAPI that just works. Fits most auth workflows with only a few lines of code

  • simple-auth0-fastapi-react-app

    A simple application for authentication, authorization and user management based on Auth0. 🐍 Python ⚡ FastAPI + React.

  • EdgeAuth-Token-Python

    Akamai Authorization Token for Python

  • targe

    Policy based authorization library built for python.

  • blog-rbac

    A simple blogging application built using Flask featuring RBAC model based on Google Zanzibar implemented via Permify service. (by BOVAGE)

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Python Authorization related posts

Index

What are some of the best open-source Authorization projects in Python? This list will help you:

Project Stars
1 OAuthLib 2,740
2 OPAL 2,281
3 django-rules 1,767
4 KubiScan 1,277
5 pycasbin 1,276
6 Authomatic 1,027
7 Autorize 882
8 Python Social 817
9 django-rest-framework-passwordless 688
10 easyauth 524
11 route-detect 226
12 raider 103
13 django-casbin 97
14 sanic-security 90
15 deny 84
16 fastapi-auth-middleware 74
17 simple-auth0-fastapi-react-app 73
18 EdgeAuth-Token-Python 27
19 targe 9
20 blog-rbac 4

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com