Lib.rs

keyring

Cross-platform library for managing passwords/credentials

oauth2

An extensible, strongly-typed implementation of OAuth2

rpassword

Read passwords in console applications

scrypt

password-based key derivation function

casbin

An authorization library that supports access control models like ACL, RBAC, ABAC

jwt-simple

Easy to use, secure, non opinionated JWT (JSON Web Tokens) implementation for Rust

sequoia-wot

OpenPGP's web of trust

jwt-cli

A super fast CLI tool to decode and encode JWTs built in Rust

openidconnect

OpenID Connect library

sspi

Security Support Provider Interface (SSPI) API

totp-rs

RFC-compliant TOTP implementation with ease of use as a goal and additionnal QoL features

cotp

Trustworthy, encrypted, command-line TOTP/HOTP authenticator app with import functionality

prs-cli

Secure, fast & convenient password manager CLI with GPG & git sync

google-books1

A complete library to interact with books (protocol v1)

gcp_auth

Google cloud platform (GCP) authentication using default and custom service accounts

vaultrs

An asynchronous Rust client library for the Hashicorp Vault API

http-auth

HTTP authentication: parse challenge lists, respond to Basic and Digest challenges. Likely to be extended with server support and additional auth schemes.

cratery

-- a private cargo registry

jwt-ui

A Terminal UI for decoding/encoding JSON Web Tokens

josekit

JOSE (Javascript Object Signing and Encryption) library for Rust

ssh-agent-lib

A collection of types for writing custom SSH agents

balloon-hash

Pure Rust implementation of the Balloon password hashing function

redox_users

access Redox users and groups functionality

ssi

Core library for Verifiable Credentials and Decentralized Identifiers

secretgarden

generating and securely storing secrets

passepartui

A TUI for pass

libreauth

Collection of tools for user authentication

actix-web-grants

Authorization extension actix-web to protect your endpoints

webauthn-rs

Webauthn Framework for Rust Web Servers

filepack

file verification utility

saml2aws-auto

management tool for AWS credentials when using Keycloak with SAML

diceware

A command line diceware, with or without dice

oxide-auth

A OAuth2 library for common web servers, featuring a set of configurable and pluggable backends

reqwest-oauth1

Add OAuth1 signature to reqwest with oauth1-request

bcrypt-pbkdf

password-based key derivation function

biscuit

work with Javascript Object Signing and Encryption(JOSE), including JSON Web Tokens (JWT), JSON Web Signature (JWS) and JSON Web Encryption (JWE)

rsasl

SASL framework, aimed at both middleware-style protocol implementation and application code. Designed to make SASL authentication simple and safe while handing as much control to the user as possible

stytch

client

aliri

Implementations of the Javascript/JSON Object Signing and Encryption (JOSE) standards

google-walletobjects1

A complete library to interact with Walletobjects (protocol v1)

kanidm_lib_crypto

Kanidm cryptographic functionality

auth-git2

Authentication for git2

mnemonic

Encode any data into a sequence of English words

ctap-hid-fido2

Rust FIDO2 CTAP library

zitadel

API access and authentication in Rust

xaskpass

A lightweight passphrase dialog

google-oauth

Google oauth server-side client

yubirs

interacting with YubiKeys (OTP and PIV functionality)

openpgp-card-tools

inspecting, configuring and using OpenPGP cards

openid

Connect & Discovery client library using async / await

libgssapi

A safe binding to gssapi

tame-oauth

A (very) simple oauth 2.0 library

oauth1-request

OAuth 1.0 client library

biscuit-cli

a CLI to manipulate biscuit tokens

ory-client

SDK Client for Ory

aegis-cli

Show TOTPs from Aegis vault on CLI

git2_credentials

Provide credential function to used with git2::RemoteCallbacks.credentials

akas

API Key Authorization Server

sasl

authentication. Currently only does the client side.

identity_iota

Framework for Self-Sovereign Identity with IOTA DID

ideatopia-password_generator

Generates passwords with various complexities

samael

A SAML2 library for Rust

eff-wordlist

packaging EFF wordlist

http-auth-basic

HTTP Basic Authentication Scheme (RFC 7617 and RFC 2617 compilant, base64-encoded credentials) for Rust applications

git-credential-keepassxc

Helper that allows Git and shell scripts to use KeePassXC as credential store

google-managedidentities1

A complete library to interact with Managed Service for Microsoft Active Directory Consumer API (protocol v1)

blockchyp

SDK for Rust. Like all BlockChyp SDKs, it provides a full client for the BlockChyp gateway and BlockChyp payment terminals.

gix-credentials

gitoxide project to interact with git credentials helpers

autonomi-cli

Autonomi CLI

rs-firebase-admin-sdk

Firebase Admin SDK for Rust

totp-lite

correct TOTP library

aws-sdk-rolesanywhere

AWS SDK for IAM Roles Anywhere

axum-keycloak-auth

Protect axum routes with a JWT emitted by Keycloak

passkey

A one stop library to implement a passkey client and authenticator

qiniu-upload-manager

Qiniu Upload Manager for Rust

ddnet-accounts

The account server binary, which takes HTTP requests for account related operations

totp_rfc6238

generating Time-based One-time Password (TOTP) codes/tokens defined in RFC 6238

jwks_client_rs

JWKS-sync client implementation for Auth0

jwt-authorizer

jwt authorizer middleware for axum and tonic

yayo

Manage and generate OTP (one time password) codes

portier_broker

Reference implementation of the Portier broker protocol

radius-rust

Pure Rust implementation of RADIUS Server/Client

tauri-plugin-authenticator

Use hardware security-keys in your Tauri App

ybaas

Don't you love when you accidentally tap your Yubikey when you have your IRC client in focus and you send 987947 into Libera? Want to be able to have that experience without having…

qiniu-upload-token

Qiniu Upload Policy Builder & Parser, Upload Token Generator & Parser for Rust

passgen-desktop

Cross-platform gui-tool (emilk/egui) for generating cryptographically secure passwords/tokens and other sets and sequences

adv_random

Create random numbers, passwords, or strings based on rules

wow_login_messages

Message definitions for World of Warcraft authentication servers

docker_credential

Reads a user's docker credentials from config

hanko

Keeps your Git allowed signers file up to date with signing keys configured on software development platforms like GitHub and GitLab

ripasso

A password manager that uses the file format of the standard unix password manager 'pass'

scram-rs

Salted Challenge Response Authentication Mechanism (SCRAM) SASL mechanism, a library which implements SCRAM logic

phraze

Random passphrase generator

openid-client

OpenID client for Rust

ssh-key-dir

sshd AuthorizedKeysCommand to read ~/.ssh/authorized_keys.d

bws

Bitwarden Secrets Manager CLI

propelauth

managing authentication and authorization with support for multi-tenant / B2B products, powered by PropelAuth

rusty-mail

A CLI Gmail client built in Rust

share-1password

Securely share notes with others using 1Password. Perfect for developers sending passwords to clients.

sasl2-sys

Bindings for Cyrus SASL

cryptex

uses system keyrings to store and retrieve secrets or a local file

twitch_oauth2

Oauth2 for Twitch endpoints

passage_flex

Passkey Flex for Rust - Add passkey authentication to your own Rust authentication flows with Passage by 1Password

ledger-apdu

Ledger Hardware Wallet - Common APDU Protocol Types

jwt

JSON Web Token library

cargo-credential

assist writing Cargo credential helpers

powerplatform-dataverse-service-client

unofficial rust client library for connecting to Microsoft Dataverse environments

zkryptium

Rust crypto library for zero-knowledge proofs

webauthn_rp

Server-side Web Authentication (WebAuthn) Relying Party (RP) API

oidc-cli

A command line tool to work with OIDC tokens

firestore-db-and-auth

allows easy access to your Google Firestore DB via service account or OAuth impersonated Google Firebase Auth credentials

async-oauth2

An asynchronous OAuth2 flow implementation

axum_session_auth

Provide a User Authentication and privilege Token Checks. It requires the Axum_Session library.

otpauth

Two-step verification of HOTP/TOTP for Rust

grammers-session

Different session storages for Telegram data

google-tagmanager2

A complete library to interact with Tag Manager (protocol v2)

spotify-quickauth

Quickly authenticate librespot-based applications with Spotify

some-auth

User management and JWT logic for API services

pam

Safe Rust wrappers for PAM authentication

cargo-credential-1password

A Cargo credential process that stores tokens in a 1password vault

kanidm_utils_users

Kanidm utility crate

compact_jwt

Minimal implementation of JWT for OIDC and other applications

ory-kratos-client

SDK Client for Ory Kratos

openiap

test client

encrypt_config

manage, persist and encrypt your configurations

bitwarden

Secrets Manager SDK

sshcerts

parsing, verifying, and creating SSH Certificates

pe-sign

cross-platform tool developed in Rust, designed for parsing and verifying digital signatures in PE files. It provides a simple command-line interface that supports extracting certificates…

okta

A fully generated & opinionated API client for the Okta API

keyring-search

Cross-platform library for searching the platform specific credential store, made possible by keyring-rs

okta-jwt-verifier

A helper library for working with JWT's for Okta in Rust

gravel-gateway

A Prometheus Push Gateway for FAAS applications

rusty_oauth

lightweight, secure OAuth 2.0 library for Rust, providing streamlined authentication flows for applications and services. Includes support for authorization codes, client credentials…

lade

Automatically load secrets from your preferred vault as environment variables, and clear them once your shell command is over

pkpw

What if correct horse battery staple, but Pokémon

keepass-to-env

convert Keepass database to environment variable

ogk

cli tool for open.go.kr

mas-iana

IANA registry data for JOSE and OAuth 2.0

kadmin

Rust bindings for the Kerberos administration interface (kadm5)

ci-id-bin

CLI app to detect ambient OIDC credentials on CI systems

prs-gtk3

Secure, fast & convenient password manager CLI with GPG & git sync

fidoprobe

manage FIDO2 devices

bitwarden-api-api

Api bindings for the Bitwarden API

challenge_response

Perform HMAC-SHA1 and OTP challenges with YubiKey, OnlyKey and NitroKey, in pure Rust

mc-attestation-verifier

SGX Enclave Attestation Report Verification

pinentry

API for interacting with pinentry binaries

oauth10a

oauth 1.0a protocol fully-async with logging, metrics and tracing facilities

affinidi-did-resolver-cache-sdk

Affinidi DID Resolver SDK

rotp

command line HOTP and TOTP generator

actix-casbin

An Actix actor for casbin

simple-ldap

A high-level LDAP client for Rust

pavex_session

HTTP sessions support for Pavex

supabase-auth

Supabase Auth implementation following the official client libraries

diqwest

Trait to extend reqwest for digest auth flow

pam-f

Safe Rust wrappers for PAM authentication

smart-id-rust-client

Smart ID Rust Client

crowbar

Securily generates temporary AWS credentials through Identity Providers using SAML

mattermost-rust-client

Rust client for Mattermost

identity_credential

Verifiable Credentials standard

passrs

Linux pass program, with shared folders

digest_auth

Digest Auth algorithm as defined in IETF RFC 2069, 2617, and 7616, intended for HTTP clients

clerk-fapi-rs

An unofficial Rust SDK for the Clerk REST Frontend API

sha-crypt

Pure Rust implementation of the SHA-crypt password hash based on SHA-512 as implemented by the POSIX crypt C library

z_osmf

z/OSMF Client

oauth-lib

Asynchronous Rust library to deal with OAuth flows

pamsm

Rust wrappers around PAM Service Modules functions

azure_jwt

JWT validator for Microsoft Azure Id tokens

teller

A developer-first multi provider secret manager

twitch_eventsub

that handles everything with Twitch EventSub helix api for you

rsub

A high-performance message broker with QUIC transport and pub/sub messaging patterns

poem-grants

Authorization extension for poem to protect your endpoints

bios-iam

An embeddable message queue system

tauri-plugin-oauth

A Tauri plugin for spawning a localhost server. Needed for some oauth flows (Login with X).

branca

Authenticated encrypted API tokens for Rust. A secure alternative to JWT.

brize_auth

A tiny async authentication library

galileo-osnma

Galileo OSNMA (Open Service Navigation Message Authentication)

legba

A fast multi protocol credential bruteforcer/sprayer/enumerator

passage-auth

Authentication API for Passage by 1Password

ory-hydra-client

SDK Client for Ory Hydra

min_jwt

Minimal JSON Web Token library

totp

CLI tool for generating TOTP codes

light-openid

Lightweight OpenID primitives & client

sshauth

SSH key based (agents or static files) authentication tokens

password

manage passwords

nitrocli

A command line tool for interacting with Nitrokey devices

npwg

Securely generate random passwords

provider-archive

reading and writing wasmCloud capability provider archive files

pam-client2

Application API wrapper to Pluggable Authentication Modules (PAM) (forked and fixed version of pam-client)

graph-oauth

Rust SDK Client for Microsoft Identity Platform

hyphae-handshake

Noise protocol framework handshakes for QUIC

fs-share

A cross-platform file-sharing CLI application

partout

Iced app for pass

ssi-data-integrity

Verifiable Credentials Data Model v1.1 for the ssi library

valorant_api_official

interacting with the Official Valorant API

qiniu-credential

Qiniu Credential SDK for Rust

nethsm-tests

Containerized testing environments for NetHSM related projects

psw-gen

passworld generator

lfspull

git lfs file pulling implementation in pure rust. Can only pull files / folders and only support token-auth for now.

ucred

safe access to ucred(3C), user credentials for processes

aliri_reqwest

Background token management and renewal for reqwest based on best practices

casdoor-sdk

Casdoor SDK

keyweave

Fetches secrets from Azure Key Vault and weaves them into a convenient .env file

macaroon

Fully functional implementation of macaroons in Rust

frank_jwt

JSON JWT

aws-iam

dealing with AWS IAM Policy resources

ntlmclient

NTLM client library for Rust

ntfy

sending notifications over ntfy

qiniu-objects-manager

Qiniu Objects Manager for Rust

vade

VC and DID engine

cargo-credential-netrc

Cargo credential provider that parses your .netrc file to get credentials

runeauth

Extendable Cookies

pow_account

generates cryptographic hashes with a second round of hashing to produce configurable leading zeros for proof-of-work or validation

biscuit-parser

Datalog parser used in the biscuit-auth and biscuit-quote crates

remote-files

a cli/lib wrapper of opendal to download/upload and manage remote files on buckets

tame-oidc

A (very) thin layer of OIDC like functionality

ecksport-auth

Native auth impl using NaCl-based signing key system

axum_jwt_ware

Axum Authentication Library

ofi-pass

A password promptor for pass

phabricator-oauth

OAuth2 authentication on Phabricator

aegis-vault

parsing and dumping Aegis vaults

digest-access

HTTP Digest Access Authentication compliant with ITEF RFC2069, RFC2617 and RFC7616 for Rust

fi-verifiable-data

VC and VP wrapper for rust and WASM. fi-digital-signatures crate is used to sign and verify the data objects.

jsonwebtokens

A Json Web Token implementation for Rust

iam-runtime-rs

Generated protobufs for integrating with and implementing iam-runtime services

oauth-certs

The project fetches oauth certificates from providers during runtime and stores them in static Read / Write lock

clio-auth

OAuth 2 helper library for CLI and desktop applications

rjwt

A recursive Javascript Web Token with support for ECDSA

dacquiri

An authorization framework with compile-time enforcement

oauth-axum

OAuth2 authorization code flow with Axum

axum-token-auth

passwordless authentication middleware for axum

identity_dbus_broker

DBus Broker which supplies credentials for authenticated Entra ID users

rs-keycloak

Faça a autenticação dos seus projetos usando Keycloak

rp-supabase-auth

client library for interacting with Supabase’s Authentication API

passport-strategies

A thin wrapper on top of oauth2-rs that simplifies oauth2 authentication

msgraph-rs

interacting with Microsoft Graph API

authifier

Opinionated Rust authentication library

lightspeed_auth

LightSpeed

rocket_airlock

TL;DR: Authentication and Authorization for rocket applications. The security airlock is the entry point to a rocket. Everything from the outside environment that wants to enter a rocket…

cargo-credential-libsecret

A Cargo credential process that stores tokens with GNOME libsecret

pesel-rs

PESEL validation and detail extraction with multiple data layout implementations

oauth2-types

OAuth 2.0 types used by the Matrix Authentication Service

axum-auth

High-level http auth extractors for axum

s3-presign

A minimal library for generating presigned URLs for Amazon S3 compatible services

project_tstings

test project

kanidm_lib_file_permissions

Kanidm File Permissions Library

streambed

core library components

sd-jwt-rs

Rust reference implementation of the IETF SD-JWT specification (v7)

alcoholic_jwt

validation of RS256 JWTs

gix-sec

gitoxide project providing a shared trust model

yubico

Yubikey client API library

dimo-rust-sdk

Community-driven DIMO SDK in Rust

msal

Stub library for libhimmelblau

feedsweeper

🧹 Automatically tidy up your RSS feed backlog

ate-auth

Represents a standardized data model and API for authenticating an ATE chain-of-trust

ockam_identity

Ockam is a library for building devices that communicate securely, privately and trustfully with cloud services and other devices

onepassword-secret-util

Enhance 1password secret expansion with the opx CLI

opentalk-types-signaling-livekit

Signaling types for the OpenTalk livekit module

authress

SDK for RUST - provides authorization as a service with fully compatible REST apis. Authentication / Authorization / User Identity Roles / Permissions / Policies

rasn-credssp

Data types for the Credential Security Support Provider Protocol

auto-launch

Auto launch any application or executable at startup. Supports Windows, macOS, and Linux.

dtz-identity-auth

authentication traits for DownToZero backends

kaldav

Caldav client

rocket_firebase_auth

Encode/decode firebase tokens in rocket apps with ease

eternaltwin_oauth_client

RfcOauthClient implementations

libpwquality

bindings for Rust

fattureincloud-rs

Connect your software with Fatture in Cloud, the invoicing platform chosen by more than 500.000 businesses in Italy. The Fatture in Cloud API is based on REST, and makes possible…

tauri-plugin-keychain

A Tauri keychain plugin

otp-std

Generating and checking one-time passwords

grawler

Check PR and issue URLs state

envio

A Modern And Secure CLI Tool For Managing Environment Variables

pwfuzz-rs

Password list mutator/expander

himmelblau_kerbeiros

Kerberos client library

fenc_cli

passgen-console-linuxwin

Cross-platform console-gui-tool for generating cryptographically secure passwords/tokens and other sets and sequences

google-authenticator

can be used to interact with the Google Authenticator mobile app for 2-factor-authentication

ids-daps-client

A client to connect with the IDS DAPS

password-rules-parser

Parser for the HTML passwordrules attribute

two-factor-auth

CLI to generate two-factor-auth token compatible with Google Authenticator

scram-2

A SCRAM provider library

ledger-transport-hid

Ledger Hardware Wallet - HID Transport

nitrokey-dmenu

Quickly fetch passwords from your nitrokey

wow_srp

Server and client library for the World of Warcraft flavor of SRP6 with support for reconnection

native-pkcs11-keychain

native-pkcs11 backend for macos keychain

parquet2lance

Convert parquet files to lance

neocities-client

client for the Neocities API

steamguard-cli

A command line utility to generate Steam 2FA codes and respond to confirmations

dioxus-oauth

using OAuth in dioxus

password-maker

Highly customizable password generation library.🔑

gecos

parsing and generation of gecos strings

slauth

oath HOTP and TOTP complient implementation

konpeito

Personal key-value store CLI

scim_proto

Kanidm SCIM Protocol Bindings

yapp

Password Prompt

svc-authn

An authentication library

sos-net

Networking library for the Save Our Secrets SDK

ldap3-serde

Pure-Rust LDAP Client with serde support

bitwarden-data

contains structs for exported bitwarden data

ctap-types

no_std friendly types for FIDO CTAP

atm0s-sdn-identity

generating and verifying identities for atm0s-sdn

mega-security-rs

Mega's security whitepaper

ironworker

lastfm scrobbler

fido-authenticator

FIDO authenticator Trussed app

of_dn_parser

Parser (and formatter) for OpenFinance Brasil standard distinguished names

passgen-cmd

Cross-platform tool for generating cryptographically secure passwords/tokens and other sets and sequences

quickdash

A modern alternative to QuickSFV using Rust

coconut-crypto

Threshold anonymous credentials based on the paper https://eprint.iacr.org/2022/011

distro-keyring

Keyring data files from linux distributions

telegram-auth-rs

Telegram Auth validation

aws-assume-role-rs

A command line tool to generate AWS temporary security credentials

lark_bot_sdk_patch

rust lark bot sdk

rowid

A time-based unique ID solution

tower-jwt

Tower middleware to parse JWTs on Authorization Bearers

argentum_user_account_business

Business layer of user account component

amora-rs

Amora is a secure token inspired by JWT and Branca, but enhanced a bit in some areas

bellissimo_auth0

that simplifies auth0 authorization process!

apt-auth-config

parse APT auth.conf.d configurations

needroleshere

AWS IAM Roles Anywhere helper

drive-v3

interacting the Google Drive API

dcaf

ACE-OAuth framework

aws_sso_flow

AWS SSO authentication flow

github-oidc

validating GitHub OIDC tokens

rocket-basicauth

A high-level basic access authentication request guard for Rocket.rs

mozwire

MozillaVPN wireguard configuration manager

httpclient_oauth2

OAuth2 client library for Rust. Provides middleware for httpclient.

pagetop-user

PageTop package for user, roles, permissions, and session management

protobuf-web-token

Create, verify and decode protobuf web tokens

china_identification_card

validating Chinese identification card numbers based on official rules and checksums

msal-rs

Microsoft Authentication Library for Rust

bios-basic

An embeddable message queue system

google/ctap2

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards

minecraft-msa-auth

authenticating with Microsoft accounts to access online Minecraft services

ddnet-account-client

The account related operations of a client, that want to manage accounts & do requests to the account server

authoscope

Scriptable network authentication cracker

ic-auth-client

A client library for Internet Computer identity authentication services

fireplace

A client for Firebase that seeks to provide a user-friendly interface to interact with Firestore, Firebase Auth, and similar

zenlayercloud-sdk

Async Zenlayer Cloud openapi wrapper

keyscope

key and secret workflow

yubibomb

Don't you love when you accidentally tap your Yubikey when you have your IRC client in focus and you send 987947 into Libera? Want to be able to have that experience without having…

keycloak-oauth

designed for seamless integration with Keycloak's OAuth2 authentication flows

etcd-rs

etcd client for rust

credentials

Fetch secrets from either environment variables or Hashicorp's Vault

garage-door

OIDC provider, for demo purposes

allow-me

An authorization library with json-based policy definition

inth-oauth2-async

OAuth2 client

bmbp_util

BMBP AUTH

mcai_models

Models for Media Cloud AI project

alipan

sdk for rust

gauth

HTTP Client for Google OAuth2

ffsend

Easily and securely share files from the command line. A fully featured Send client