SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Ruby Authorization Projects
-
Project mention: How much of your codebase should AI write? A trust-zone breakdown | dev.to | 2026-06-12
Auth boundaries. Who can do what. The rules that decide whether a logged-in user is allowed to see another user's records, edit their settings, charge their card. In a Rails app these usually live in a small set of rule files (a library like Pundit is the common choice) plus the login layer. This is the single most crucial security concern of an application to get right. The simplest check is to log in as two different users and try to access each other's URLs; if that works, you have a hole. The rules are the answer to "who is allowed to do what here," and that answer names the system's verbs - the actions a system is able to perform.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
Project mention: Rails Authorization Beyond Models: Securing Dashboards and Service Controllers with CanCanCan | dev.to | 2026-02-06
Authorization, which decides what they can do, is where the mess begins. Most of us start with CanCanCan basics: you add load_and_authorize_resource to a PostsController, and magic happens. Admins edit, users read. Life is good.
-
-
RubyLLM
One delightful Ruby framework for every major AI provider. Build AI agents, chatbots, RAG apps, and multimodal workflows in beautiful, expressive code.
Project mention: RubyLLM: A single, beautiful Ruby framework for all major AI providers | news.ycombinator.com | 2026-06-24Thank you!
Since a few mentioned Responses API: the reason why it wasn't implemented in 1.x is because RubyLLM 1.x effectively assumes a 1:1 mapping between provider and protocol. That assumption no longer holds since OpenAI has 2 protocols with different capabilities, and to access all VertexAI models we need to support a bunch under that single provider.
Therefore, a major refactoring to split Protocols and from Providers was needed, as well as a way to route different models to different Protocols under the same Provider, transparently.
That's one of the many things that's gonna ship with RubyLLM 2.0.
If you're curious: https://github.com/crmne/ruby_llm/commit/d398354da493570b050...
-
-
OAuth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC) (by ruby-oauth)
oauth2 v2.0.18 was released... almost five months ago. And I never got around to posting about it. Being unemployed is a LOT of work...
-
-
Declarative Authorization
An unmaintained authorization plugin for Rails. Please fork to support current versions of Rails
-
-
-
-
-
-
-
-
-
-
rabarber
Rabarber is a role-based authorization library for Ruby on Rails. It provides a set of tools for managing user roles and defining authorization rules, with support for multi-tenancy and fine-grained access control.
-
-
Canard
Makes role based authorization in Rails really simple. Wraps CanCan and RoleModel up with a smattering of syntactic sugar, some generators and scopes.
-
-
islandjs-rails
IslandJS Rails supports the development of React (or other JS library) islands in Rails (7+) apps
-
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Ruby Authorization discussion
Ruby Authorization related posts
-
RubyLLM: A single, beautiful Ruby framework for all major AI providers
-
RubyLLM 1.16: concurrent tool execution, Rails-style instrumentation, and more
-
🇧🇷 Glancer — Converse com seu banco de dados Rails em linguagem natural
-
How to implement AI agents in Rails with RubyLLM
-
💎REL: oauth2 v2.0.18
-
Rails Authorization Beyond Models: Securing Dashboards and Service Controllers with CanCanCan
-
Praxis-Emergent/Islandjs-Rails
-
A note from our sponsor - SaaSHub
www.saashub.com | 12 Jul 2026
Index
What are some of the best open-source Authorization projects in Ruby? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | Pundit | 8,514 |
| 2 | CanCanCan | 5,669 |
| 3 | Doorkeeper | 5,510 |
| 4 | RubyLLM | 4,235 |
| 5 | rolify | 3,178 |
| 6 | OAuth2 | 2,179 |
| 7 | Action Policy | 1,560 |
| 8 | Declarative Authorization | 1,236 |
| 9 | acl9 | 850 |
| 10 | AccessGranted | 778 |
| 11 | Next Rails | 577 |
| 12 | graphql-guard | 466 |
| 13 | Consul | 334 |
| 14 | RoleCore | 301 |
| 15 | banken | 269 |
| 16 | Pundit Matchers | 248 |
| 17 | Groupify | 196 |
| 18 | rabarber | 191 |
| 19 | RedisWebManager | 170 |
| 20 | Canard | 124 |
| 21 | Yabeda::Puma::Plugin | 83 |
| 22 | islandjs-rails | 82 |
| 23 | verifica | 60 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com