Public GitHub footprint of Ory

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work.

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

Kubernetes Helm Charts for the ORY ecosystem.

No description provided for this repository.

This is an ExpressJS reference implementation for the Ory Hydra User Login and Consent interface written in TypeScript and ExpressJS.

Accurate Code Coverage reporting for Golang (Go)

Save 30% token costs when using Claude Code, Codex, OpenCode for free - with open source, local semantic search. Works for small and large codebases and monorepos! Enterprise-ready and fully compliant via Ollama and SQLite-vec.

A best practice http server set up that supports graceful shutdown

A curated collection of examples and solutions created by the Ory Community.

The place where Ory's SDKs are being auto-generated

Ory Elements is a component library that makes building login, registration and account pages for Ory a breeze.

The Ory documentation

A simple mock SAML 2.0 Identity Provider

A full reference implementation for designing your own login, registration, recovery, verification, ... pages using Ory Kratos' APIs.

A lightweight Go library for writing responses and errors to HTTP

Libraries used in the Ory ecosystem

A reference implementation of an app using ORY Kratos for auth (login), sign up (registration), profile settings (update password), MFA/2FA, account recovery (password reset), and more for React Native. This repository is available as an expo template!

Web-scale and security-hardened API key server for users, services, machine to machine, and AI agents. Token derivation brings fine-grained capability tokens to avoid common API key pitfalls. Apache2 open source for indie deployments, commercial for scalable and HA.

Ory runs a global end-to-end security infrastructure for humans, robots, and servers. We build and use open source software.

No description provided for this repository.

No description provided for this repository.

Add login, registration, account recovery (password reset), account verification (email verification), social sign in, multi-factor authentication to your Next.js / React App using Ory!

Create bulk action scripts, automate your tasks, manage your projects, and seamlessly interact with the Ory Network using the Ory command line interface (CLI).

No description provided for this repository.

Kuberenetes CRD Controller for Ory Hydra. :warning: Maintained by the community, not an official Ory project!

A simple consent app for Hydra written in Go - for Hydra =< 1.0.0

Kuberenetes CRD Controller for Ory Oathkeeper. :warning: Maintained by the community, not an official Ory project!

ReRAG - Secure retrieval augmented generation with Google Zanzibar style relationship based access control (ReBAC) and SQLite Vector

No description provided for this repository.

No description provided for this repository.

A GitHub action to open an issue when GitHub references in your code are closed.

Terraform provider for managing Ory Network resources — identities, OAuth2 clients, permissions, organizations, projects, and more.

No description provided for this repository.

A place where we plan and schedule our open source activities and track cross-project and ory-wide issues

No description provided for this repository.

Production-ready go-mail fork. The best way to send emails in Go.

SAML 2.0 parser for Node.js

A very simple cli helper that encrypts files in directories using AES-GCM (128bit)

Autogenerated kratos SDK.

No description provided for this repository.

Local, web-based mail server application. Slurp mails into oblivion!

No description provided for this repository.

No description provided for this repository.

Autogenerated kratos SDK.

Automation and robots for Ory's CI and CD pipelines

No description provided for this repository.

No description provided for this repository.

No description provided for this repository.

No description provided for this repository.

Autogenerated hydra SDK.

Autogenerated kratos SDK.

No description provided for this repository.

Autogenerated hydra SDK.

Autogenerated client SDK.

No description provided for this repository.

Autogenerated client SDK.

Autogenerated client SDK.

Autogenerated hydra SDK.

Autogenerated hydra SDK.

Autogenerated kratos SDK.

Autogenerated kratos SDK.

Autogenerated client SDK.

Autogenerated client SDK.

Location for all of Ory's homebrew packages

No description provided for this repository.

Autogenerated kratos SDK.

Autogenerated hydra SDK.

Autogenerated client SDK.

No description provided for this repository.

Autogenerated oathkeeper SDK.

Autogenerated oathkeeper SDK.

Autogenerated oathkeeper SDK.

No description provided for this repository.

No description provided for this repository.

Autogenerated keto SDK.

Autogenerated hydra SDK.

No description provided for this repository.

Autogenerated client SDK.

No description provided for this repository.

Autogenerated oathkeeper SDK.

Autogenerated oathkeeper SDK.

A Tasty Treat For All Your Database Needs

Example showing how to use NextAuth.js with Next.js and Ory

Autogenerated oathkeeper SDK.

Autogenerated hydra SDK.

Autogenerated kratos SDK.

Go-ne slackin

No description provided for this repository.

MockFedCM is a free FedCM Relying Party (RP) and Identity Provider (IdP) for testing FedCM integrations. Easily simulate real-world authentication flows, debug your implementation, and validate user experiences—all without needing a production IdP or RP.

Ory for Codex

Ory bundled into Gemini CLI: skills and TOML slash commands that scaffold Ory authentication into your codebase, a local Ory stack you can spin up in one command, and (when pointed at an Ory project) authentication, authorization, and audit for every tool Gemini runs.

Sample code and reference configuration for integrating Ory Network with third-party products.

Autogenerated keto SDK.

Authentication for the Web.