Zitadel: The best of Auth0 and Keycloak combined

1. zitadel

   1 89 9,956 9.8 Go

   ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.

   

2. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

3. oidc

   2 16 1,505 8.7 Go

   Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

   

   I had to set up a OIDC server so our website could act as OIDC provider, and was really surprised how hard that is to do if you simply need the most basic setup. In fact it would seem that everybody would just keep a Keycloak or whatever— in their cluster and would keep it up-to-date with whatever user schema they would have in their app. This felt like too much work for me (I didn't want to maintain a whole extra service to just be able and provide a couple Oauth scopes from our API back-end.) so instead I went on and implemented the server directly in our app using https://github.com/zitadel/oidc. In fact this was the only fully-functioning OIDC implementation in Go that I could just plug in and make it work. So big props up to the Zitadel guys, the only worry would be from my side that the server implementation could be more generic and could rely on a set of interfaces that the users would be able to implement easily, without having to import a bunch of code from 'examples/server' like we have to do at the moment?

4. PHP OAuth 2.0 Server

   3 10 6,574 9.2 PHP

   A spec compliant, secure by default PHP OAuth 2.0 Server

   

   Disclosure: I work for FusionAuth.

   Depends on what you are looking for.

   If you want a standalone auth server, you can use FusionAuth in docker/docker-compose: https://fusionauth.io/docs/v1/tech/installation-guide/docker

   You can also package up a library; most major languages have one or more OAuth/OIDC libraries: https://github.com/doorkeeper-gem/doorkeeper for Ruby, https://spring.io/projects/spring-security for Spring/Java, https://oauth2.thephpleague.com/ for PHP, https://pypi.org/project/oauthlib/ for Python.

   https://oauth.net/code/ has a further selection of libraries in a variety of languages.

5. Doorkeeper

   4 7 5,366 8.3 Ruby

   Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

   

   Disclosure: I work for FusionAuth.

   Depends on what you are looking for.

   If you want a standalone auth server, you can use FusionAuth in docker/docker-compose: https://fusionauth.io/docs/v1/tech/installation-guide/docker

   You can also package up a library; most major languages have one or more OAuth/OIDC libraries: https://github.com/doorkeeper-gem/doorkeeper for Ruby, https://spring.io/projects/spring-security for Spring/Java, https://oauth2.thephpleague.com/ for PHP, https://pypi.org/project/oauthlib/ for Python.

   https://oauth.net/code/ has a further selection of libraries in a variety of languages.

6. simplecloud.info

   5 1 57 4.8 HTML

   code for simplecloud.info

   

   We recently finished shipping a SCIM server implementation. It was a big lift (it's quite protean).

   If anyone else wants to look at software supporting SCIM, this list seems like a place to start: http://www.simplecloud.info/#Implementations2 It lists both SCIM servers (which can be the source of truth for a set of users and groups) and SCIM clients (which can received CRUD requests from a SCIM server).

   (I submitted our company to the list but I think they got caught up in the GitHub/Heroku situation, since changes in the GH repo don't seem to be going live: https://github.com/erdtman/simplecloud.info )

7. scim-for-keycloak

   6 2 187 3.6 Java

   a third party module that extends keycloak by SCIM functionality

   

   Likely this one: https://github.com/Captain-P-Goldfish/scim-for-keycloak

   An wonderful piece of work. Note, however, that the most recent supported Keycloak version is 16.1.x. Whereas Keycloak has recently been reworked (beginning with 17.x) around Quarkus. So the plugin is behind the curve WRT Keycloak.

Suggest a related project