Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

Save 30% token costs when using Claude Code, Codex, OpenCode for free - with open source, local semantic search. Works for small and large codebases and monorepos! Enterprise-ready and fully compliant via Ollama and SQLite-vec.

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work.

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

Kubernetes Helm Charts for the ORY ecosystem.

No description.

This is an ExpressJS reference implementation for the Ory Hydra User Login and Consent interface written in TypeScript and ExpressJS.

Accurate Code Coverage reporting for Golang (Go)

A best practice http server set up that supports graceful shutdown

A curated collection of examples and solutions created by the Ory Community.

The place where Ory's SDKs are being auto-generated

Ory Elements is a component library that makes building login, registration and account pages for Ory a breeze.

The Ory documentation

A simple mock SAML 2.0 Identity Provider

A full reference implementation for designing your own login, registration, recovery, verification, ... pages using Ory Kratos' APIs.

A lightweight Go library for writing responses and errors to HTTP

THIS REPOSITORY IS NOT UP TO DATE. Different docker-based examples for ORY's services (Hydra, Keto, Oathkeeper).

Web-scale and security-hardened API key server for users, services, machine to machine, and AI agents. Token derivation brings fine-grained capability tokens to avoid common API key pitfalls. Apache2 open source for indie deployments, commercial for scalable and HA.

A fast, self-hosted API key management server that creates, validates, and revokes keys, with a token derivation feature that generates short-lived, permission-limited tokens from long-lived keys.

Libraries used in the Ory ecosystem

A reference implementation of an app using ORY Kratos for auth (login), sign up (registration), profile settings (update password), MFA/2FA, account recovery (password reset), and more for React Native. This repository is available as an expo template!

No description.

Ory runs a global end-to-end security infrastructure for humans, robots, and servers. We build and use open source software.

No description.

Add login, registration, account recovery (password reset), account verification (email verification), social sign in, multi-factor authentication to your Next.js / React App using Ory!

Create bulk action scripts, automate your tasks, manage your projects, and seamlessly interact with the Ory Network using the Ory command line interface (CLI).

No description.

Kuberenetes CRD Controller for Ory Hydra. :warning: Maintained by the community, not an official Ory project!

A simple consent app for Hydra written in Go - for Hydra =< 1.0.0

A simple nodejs consent app based on express - for Hydra =< 1.0.0

Kuberenetes CRD Controller for Ory Oathkeeper. :warning: Maintained by the community, not an official Ory project!

Want to build the next generation identity stack? You've come to the right place!

ReRAG - Secure retrieval augmented generation with Google Zanzibar style relationship based access control (ReBAC) and SQLite Vector

PostgreSQL storage backend for RangelReale osin OAuth2

No description.

No description.

A GitHub action to open an issue when GitHub references in your code are closed.

Collection of SAML Jackson example apps that show how to integrate Enterprise SSO and Directory Sync with JavaScript-based web and authentication frameworks.

Well-tested helpers for dealing with daily problems in Go.

No description.

DEPRECATED

Terraform provider for managing Ory Network resources — identities, OAuth2 clients, permissions, organizations, projects, and more.

No description.

No description.

DOES NOT WORK WITH VERSIONS > 0.10.0 - A simple library to help you build node-based identity providers that work with Hydra.

A place where we plan and schedule our open source activities and track cross-project and ory-wide issues

No description.

Production-ready go-mail fork. The best way to send emails in Go.

A simple wrapper that reduces boilerplate code when using redux-saga in combination with async backend calls.

SAML 2.0 parser for Node.js

A very simple cli helper that encrypts files in directories using AES-GCM (128bit)

Autogenerated kratos SDK.

No description.

Local, web-based mail server application. Slurp mails into oblivion!

No description.

A GitHub action to build and lint protobuf using buildbuf

This repository holds all material related to the Ory Summit, specifically the presentations.

JSONSchema (draft04, draft06, draft07) Validation using Go

DEPRECATED

Ory's cross-project go libraries, intended for internal use.

No description.

Autogenerated kratos SDK.

This repository shows examples of practical solutions using Ory projects and other OSS

No description.

Secure, fault tolerant, and maintained CSRF protection middleware for Go.

Automation and robots for Ory's CI and CD pipelines

No description.

No description.

No description.

No description.

Autogenerated hydra SDK.

Autogenerated kratos SDK.

No description.

Autogenerated hydra SDK.

Autogenerated client SDK.

No description.

Autogenerated client SDK.

Autogenerated client SDK.

Autogenerated hydra SDK.

Autogenerated hydra SDK.

Autogenerated kratos SDK.

Autogenerated kratos SDK.

No description.

No description.

No description.

A NodeJS library for working with Auth0 as an Identity Provider

Autogenerated client SDK.

Autogenerated client SDK.

Location for all of Ory's homebrew packages

No description.

Autogenerated kratos SDK.

Autogenerated hydra SDK.

No description.

The ESLint configuration used by Ory (React specific)

A maintained fork of spf13/viper with several bugfixes for races, panics, and other errors

Autogenerated client SDK.

No description.

Autogenerated oathkeeper SDK.

Autogenerated oathkeeper SDK.

Autogenerated oathkeeper SDK.

No description.

A GitHub action for cross-compiling (Linux, Windows, Mac) and releasing CGO applications using Goreleaser

This extension enables Visual Studio Code to use the Ory CLI to interact with your Ory projects and services.

A interceptor which makes axios requests resilient.

No description.

Ory Changelog Generator

Autogenerated oathkeeper SDK.

Autogenerated keto SDK.

No description.

No description.

No description.

A simple metrics middleware for segment.io

No description.

Autogenerated keto SDK.

Autogenerated hydra SDK.

No description.

Autogenerated client SDK.

No description.

No description.

No description.

No description.

No description.

No description.

No description.

Autogenerated keto SDK.

No description.

No description.

A way to test the growth of a db (mysql, postgresql, ...) when running Hydra. This is specifically related to this issue: https://github.com/ory/hydra/issues/1574

Segment analytics client for Go

safe and easy casting from one type to another in Go

The ESLint configuration used by Ory

No description.

No description.

Release infrastructure for ORY and related components

A github action that allows a repository to list out the contributors in a clean table-like manner

DEPRECATED - The prettier config used by all ORY projects. This is probably the most over-engineered repo ever.

No description.

Autogenerated oathkeeper SDK.

Autogenerated oathkeeper SDK.

A Tasty Treat For All Your Database Needs

Example showing how to use NextAuth.js with Next.js and Ory

No description.

A small example file sharing service that demonstrates how to consume Keto from a Node JS backend.

Responsible for building oryd/e2e-env which is used by cypress tests.

Autogenerated keto SDK.

Autogenerated keto SDK.

Autogenerated keto SDK.

No description.

A Go OpenID Connect client.

No description.

No description.

No description.

Distribute and install Go binaries via NPM

Get JSON values quickly - JSON parser for Go

An implementation of JSON Schema, draft v4 v6 & v7 - Go language

JSON Reference implementation in Golang

For the distributed charts search at hub.helm.sh (under development)

Curated applications for Kubernetes

logrus middleware for negroni

🐒 Golang client for MailChimp API 3.0.

A Commander for modern Go CLI interactions

Add Matomo Analytics to your Discourse forum

No description.

Sonatype Nancy for GitHub Actions

Autogenerated oathkeeper SDK.

Autogenerated hydra SDK.

Autogenerated kratos SDK.

Go-ne slackin

No description.

MockFedCM is a free FedCM Relying Party (RP) and Identity Provider (IdP) for testing FedCM integrations. Easily simulate real-world authentication flows, debug your implementation, and validate user experiences—all without needing a production IdP or RP.

No description.

Simple Go snapshot testing

A sql driver that will wrap any other driver and log/trace all its calls

Store and retrieve encrypted configs from etcd or consul

Requests more info from PRs/Issues with either the default title or a blank body

Sample code and reference configuration for integrating Ory Network with third-party products.

Ory for Codex

Ory bundled into Gemini CLI: skills and TOML slash commands that scaffold Ory authentication into your codebase, a local Ory stack you can spin up in one command, and (when pointed at an Ory project) authentication, authorization, and audit for every tool Gemini runs.

Autogenerated keto SDK.

Authentication for the Web.

A high performance memory-bound Go cache

No description.

A simple greetings bot for Slack that uses events api and hosted on AWS Lambda

Go net/http configurable handler to handle CORS requests

Package gorilla/sessions provides cookie and filesystem sessions and infrastructure for custom session backends.