Open Source Packages
Libraries, frameworks, tools, and SDKs used by the apps in this directory — scored the same way as the apps themselves.
All Packages
Category1
Sort:Used by Most Apps
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
Open Policy Agent (OPA)
Open source policy engine for unified authorization and compliance decisions across your stack.
league/oauth2-client
A framework-agnostic PHP client for building OAuth 2.0 login and API-authorization flows.
Standard Webhooks (Python)
Python reference implementation for verifying Standard Webhooks HMAC-signed webhook payloads
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
Symfony SecurityBundle
Symfony's full-stack authentication and authorization layer, configuring firewalls, authenticators, and access rules from YAML
TwoFactorAuth
PHP library for TOTP-based two-factor authentication with pluggable QR code providers
Firebase php-jwt
A simple PHP library to encode and decode JSON Web Tokens conforming to the JWT spec.
lcobucci/jwt
A simple, RFC 7519-compliant PHP library for creating, signing, and validating JSON Web Tokens
Bouncer
Elegant roles and abilities authorization for Laravel using Eloquent.
Symfony Security Core
Infrastructure for authentication and sophisticated authorization, decoupled from user credential storage.
Symfony Security CSRF
Generate and validate CSRF tokens to protect PHP applications against cross-site request forgery.
OTPHP
A PHP library for generating TOTP and HOTP one-time passwords per RFC 4226 and RFC 6238
jws
Complete JSON Web Signature (JWS) implementation for Node.js with sync and streaming APIs
Laragear TwoFactor
On-premises TOTP two-factor authentication for Laravel users
PragmaRX Recovery
Generates two-factor auth recovery/backup codes with configurable count, format, and casing.
JWT Auth for Laravel
JSON Web Token authentication for Laravel and Lumen APIs, with token issuing, refresh and blacklisting.
Kiota Authentication Azure
Azure Identity-backed authentication provider for Python API clients generated by Microsoft Kiota.
Laravel Impersonate
A Laravel package that lets administrators authenticate as their users and impersonate accounts in one click.
Laratrust
Flexible role-based access control (RBAC) for Laravel with roles, permissions, teams, and caching
@fastify/jwt
JWT authentication plugin for Fastify, decorating routes with sign, verify, and decode utilities built on fast-jwt.
OAuth2 Google Provider
Google OAuth 2.0 provider for The PHP League's OAuth 2.0 Client
php-jwt
Ultra-lightweight, dependency-free JSON Web Token (JWT) library for PHP 7 and 8.
jwt-simple
A fast, safe-by-default Rust library for creating and verifying JWT and JWE tokens across every major signing and encryption algorithm.
