Show HN: Obligator – An OpenID Connect server for self-hosters

1. obligator

   1 9 753 8.5 Go

   Simple and opinionated OpenID Connect server designed for self-hosters

   

   Sorry, this is indeed not very clear. Others already answered well, but if you look at the example[0] config you can see how you would use your own instance of obligator as a client to the instance running at lastlogin.io. This is a bit meta, but applies equally to any client application.

   [0]: https://github.com/anderspitman/obligator#running-it

2. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

3. OpenID

   2 15 1,019 9.2 C

   OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

   

   Personally I went with Keycloak, because it's fairly well documented and also has Docker images available: https://www.keycloak.org/getting-started/getting-started-doc... although the fact that they want you to create an "optimized" image yourself and have a long build/setup process on startup instead is slightly annoying: https://www.keycloak.org/server/containers

   Regardless, with something like mod_auth_openidc or another Relying Party implementation, all of the sudden authn/authz becomes easier to manage (you can literally get user information including roles in headers that are passed from your gateway/relying party to apps behind the reverse proxy), regardless of what you have actually running in your APIs: https://github.com/OpenIDC/mod_auth_openidc (there are other options, of course, but I went with that because I already use mod_md).

   It's actually cool that there are plentiful options in the space, since OIDC is pretty complex in of itself and attempts at creating something pleasant to actually use are always welcome, I've also heard good things about Authentik: https://goauthentik.io/

4. authentik

   3 175 15,360 10.0 Go

   The authentication glue you need.

   

   Personally I went with Keycloak, because it's fairly well documented and also has Docker images available: https://www.keycloak.org/getting-started/getting-started-doc... although the fact that they want you to create an "optimized" image yourself and have a long build/setup process on startup instead is slightly annoying: https://www.keycloak.org/server/containers

   Regardless, with something like mod_auth_openidc or another Relying Party implementation, all of the sudden authn/authz becomes easier to manage (you can literally get user information including roles in headers that are passed from your gateway/relying party to apps behind the reverse proxy), regardless of what you have actually running in your APIs: https://github.com/OpenIDC/mod_auth_openidc (there are other options, of course, but I went with that because I already use mod_md).

   It's actually cool that there are plentiful options in the space, since OIDC is pretty complex in of itself and attempts at creating something pleasant to actually use are always welcome, I've also heard good things about Authentik: https://goauthentik.io/

5. dex

   4 39 9,750 9.5 Go

   OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

   

6. Ory Kratos

   5 47 11,644 9.6 Go

   Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network. (by ory)

   

   I was expecting hydra / kratos to show up as an alternative.. but did not see any. Does any have any experience, good or bad about it?

   https://github.com/ory/kratos

7. node-oidc-provider

   6 15 3,343 8.4 JavaScript

   OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

   

   I could recommend https://github.com/panva/node-oidc-provider supports most of the oidc/oauth 2 rabbit hole specs.

8. traefik-forward-auth

   7 33 2,243 1.9 Go

   Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy

   

9. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

10. portier-broker

    8 1 568 8.7 Rust

    Portier Broker reference implementation, written in Rust

    

    This looks like it has the same core functionality as Portier? https://github.com/portier/portier-broker

    I'm on mobile, so haven't really checked where we differ in details.

11. zitadel

    9 89 10,035 9.8 Go

    ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.

    

12. Keycloak

    10 261 26,060 10.0 Java

    Open Source Identity and Access Management For Modern Applications and Services

    

13. podman-networking-docs

    11 3 77 7.2

    rootless Podman networking documentation with examples

    

    Here are some documentation and demos from me and others if you're interested:

    https://github.com/eriksjolund/podman-networking-docs

14. podman-nginx-socket-activation

    12 10 36 4.8 Shell

    Demo of how to run socket-activated nginx with Podman. Source IP address is preserved.

    

    https://github.com/eriksjolund/podman-nginx-socket-activatio...

15. podman-nginx-socket-activatio

    13 1 - -

    https://github.com/eriksjolund/podman-nginx-socket-activatio...

16. mariadb-podman-socket-activation

    14 5 15 2.4

    Demo of a templated systemd user service that runs rootless Podman and starts MariaDB with socket activation

    https://github.com/eriksjolund/mariadb-podman-socket-activat...

17. mariadb-podman-socket-activat

    15 2 - -

    https://github.com/eriksjolund/mariadb-podman-socket-activat...

18. podman-socket-activated-services

    16 1 2 2.4 Dockerfile

    Various podman container services configured to support running with systemd socket-activation

    

    https://github.com/PhracturedBlue/podman-socket-activated-se...

19. podman-socket-activated-se

    17 1 - -

    https://github.com/PhracturedBlue/podman-socket-activated-se...

20. SaaSHub

    www.saashub.com featured

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    

Suggest a related project