Rust Authorization

Open-source Rust projects categorized as Authorization

Missing quite a few other open source projects in this space like SuperTokens ( and Keycloak.

Top 12 Rust Authorization Projects

  • Ockam

    Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

  • Project mention: Tunnelmole, an ngrok alternative (open source) | | 2024-03-21

    disclosure: I work at Ockam.

    The Portals for Mac app is an example of the type of thing you could build using the open source stack of protocols. The README (linked by parent) links out to all of the relevant parts of the protocol documentation to explain how these work together. The NAT Traversal ( part of the README is probably the best explanation of why the free relay you get via Ockam Orchestrator is a useful part of this demo.

    As for why would anyone trust this: The protocols are designed so you absolutely don't have to trust the relay. Trust is pushed out to the edges that you control and so you're not susceptible to a MITM attack if something like a relay is compromised. The protocol design for all of this is open and documented, and was independently audited by (IMO) some of the best in the business, Trail of Bits:

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • oso

    Oso is a batteries-included framework for building authorization in your application.

  • Project mention: Who's hiring developer advocates? (October 2023) | | 2023-10-02

    Link to GitHub -->

  • casbin-rs

    An authorization library that supports access control models like ACL, RBAC, ABAC in Rust.

  • inspektor

    Inspektor is a protocol-aware proxy that is used to enforce access policies👮

  • yup-oauth2

    An oauth2 client implementation providing the Device, Installed, Service Account, and several more flows.

  • rauthy

    OpenID Connect Single Sign-On Identity & Access Management

  • Project mention: Rauthy OIDC v0.19 — Better support for Solid and Matrix | /r/SelfhostingHub | 2023-11-18
  • biscuit-rust

    Rust implementation of the Biscuit authorization token

  • Project mention: Authorization is still a nightmare for engineers | | 2024-04-16

    > We have a post on this coming soon! The short version is that Polar is a logic language based on Prolog/Datalog/miniKanren. And logic languages are a particularly good fit for representing the branching conditional logic you often see in authorization configurations.

    Ha, I've been playing around with Biscuits ( and was writing up a blog post on using them in a git forge. When I saw the Polar data units described as "facts" and read your end to end example ( I thought "Oh this looks very similar". I will say - I do like how Polar seems to type stuff and provide some concepts that Biscuits force you to build out on your own, that's pretty neat.

    What is the proof of identity in Polar? Is it something like a token in Biscuits? I'm curious if you can do things like add caveats to reduce what the token is capable of as it gets handed off to different systems. I consider that one of the "killer use cases" of biscuits.

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  • protect-endpoints

    Authorization extension for popular web-frameworks to protect your endpoints

  • Project mention: Significant update within the `*-grants` ecosystem: crates to protect endpoints in widely used web frameworks. | /r/rust | 2023-12-01
  • auth-rs

    Authentication and authorization service, written in Rust

  • Project mention: Feedback on authorization and authentication API using Actix web | /r/rust | 2023-08-18
  • fga-rs

    authorization/permission service, inspired by Google Zanzibar

  • Project mention: Google Zanzibar: Rust Implementation(wip) | | 2024-03-27
  • tower-biscuit-auth

    Integrating Biscuit authentication with the Tower ecosystem.

  • authzen

    A framework for easily integrating authorization into backend services.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Rust Authorization discussion

Log in or Post with

Rust Authorization related posts

  • Authorization is still a nightmare for engineers

    6 projects | | 16 Apr 2024
  • Biscuit Authorization

    4 projects | | 13 Dec 2023
  • Biscuit – an authorization token with offline attenuation

    1 project | | 30 Oct 2023
  • Biscuit tokens 3.0 release! Decentralized authorization in Rust, wasm and a lot of other platforms

    2 projects | /r/rust | 4 Apr 2023
  • Show HN: Biscuit Security Authorization

    1 project | | 28 Mar 2023
  • What's everyone working on this week (10/2023)?

    11 projects | /r/rust | 6 Mar 2023
  • Any source for learning JWT with .net corr

    2 projects | /r/dotnet | 3 Mar 2023
  • A note from our sponsor - InfluxDB | 14 Jun 2024
    Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →


What are some of the best open-source Authorization projects in Rust? This list will help you:

Project Stars
1 Ockam 4,372
2 oso 3,428
3 casbin-rs 804
4 inspektor 278
5 yup-oauth2 210
6 rauthy 207
7 biscuit-rust 204
8 protect-endpoints 188
9 auth-rs 10
10 fga-rs 6
11 tower-biscuit-auth 3
12 authzen 3

Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.