Lib.rs

keyring

Cross-platform library for managing passwords/credentials

oauth2

An extensible, strongly-typed implementation of OAuth2

scrypt

password-based key derivation function

rpassword

Read passwords in console applications

casbin

An authorization library that supports access control models like ACL, RBAC, ABAC

sequoia-wot

OpenPGP's web of trust

totp-rs

RFC-compliant TOTP implementation with ease of use as a goal and additionnal QoL features

jwt-cli

A super fast CLI tool to decode and encode JWTs built in Rust

cotp

Trustworthy, encrypted, command-line TOTP/HOTP authenticator app with import functionality

jwt-simple

Easy to use, secure, non opinionated JWT (JSON Web Tokens) implementation for Rust

openidconnect

OpenID Connect library

google-managedidentities1

A complete library to interact with Managed Service for Microsoft Active Directory Consumer API (protocol v1)

sspi

Security Support Provider Interface (SSPI) API

http-auth

HTTP authentication: parse challenge lists, respond to Basic and Digest challenges. Likely to be extended with server support and additional auth schemes.

gcp_auth

Google cloud platform (GCP) authentication using default and custom service accounts

vaultrs

An asynchronous Rust client library for the Hashicorp Vault API

prs-cli

Secure, fast & convenient password manager CLI with GPG & git sync

josekit

JOSE (Javascript Object Signing and Encryption) library for Rust

jwt-ui

A Terminal UI for decoding/encoding JSON Web Tokens

bcrypt-pbkdf

password-based key derivation function

webauthn-rs

Webauthn Framework for Rust Web Servers

ssh-agent-lib

A collection of types for writing custom SSH agents

actix-web-grants

Authorization extension actix-web to protect your endpoints

libreauth

Collection of tools for user authentication

redox_users

access Redox users and groups functionality

samael

A SAML2 library for Rust

filepack

file verification utility

google-tagmanager2

A complete library to interact with Tag Manager (protocol v2)

openid

Connect & Discovery client library using async / await

stytch

client

oxide-auth

A OAuth2 library for common web servers, featuring a set of configurable and pluggable backends

rsasl

SASL framework, aimed at both middleware-style protocol implementation and application code. Designed to make SASL authentication simple and safe while handing as much control to the user as possible

ssi

Core library for Verifiable Credentials and Decentralized Identifiers

streamstore-cli

CLI for S2

auth-git2

Authentication for git2

ctap-hid-fido2

Rust FIDO2 CTAP library

google-oauth

Google oauth server-side client

biscuit

work with Javascript Object Signing and Encryption(JOSE), including JSON Web Tokens (JWT), JSON Web Signature (JWS) and JSON Web Encryption (JWE)

diceware

A command line diceware, with or without dice

zitadel

API access and authentication in Rust

secretgarden

generating and securely storing secrets

aliri

Implementations of the Javascript/JSON Object Signing and Encryption (JOSE) standards

reqwest-oauth1

Add OAuth1 signature to reqwest with oauth1-request

sha-crypt

Pure Rust implementation of the SHA-crypt password hash based on SHA-512 as implemented by the POSIX crypt C library

compact_jwt

Minimal implementation of JWT for OIDC and other applications

libgssapi

A safe binding to gssapi

git2_credentials

Provide credential function to used with git2::RemoteCallbacks.credentials

axum-auth

High-level http auth extractors for axum

ant-cli

CLI client for the Autonomi network

passepartui

A TUI for pass

oauth1-request

OAuth 1.0 client library

gix-credentials

gitoxide project to interact with git credentials helpers

cratery

-- a private cargo registry

akas

API Key Authorization Server

identity_iota

Framework for Self-Sovereign Identity with IOTA DID

biscuit-cli

a CLI to manipulate biscuit tokens

mnemonic

Encode any data into a sequence of English words

yubirs

interacting with YubiKeys (OTP and PIV functionality)

passkey

A one stop library to implement a passkey client and authenticator

openpgp-card-tools

inspecting, configuring and using OpenPGP cards

http-auth-basic

HTTP Basic Authentication Scheme (RFC 7617 and RFC 2617 compilant, base64-encoded credentials) for Rust applications

git-credential-keepassxc

Helper that allows Git and shell scripts to use KeePassXC as credential store

affinidi-messaging-sdk

Affinidi Messaging SDK

tame-oauth

A (very) simple oauth 2.0 library

jwt-authorizer

jwt authorizer middleware for axum and tonic

eff-wordlist

packaging EFF wordlist

ldap3_client

LDAP Client Library for Tokio

saml2aws-auto

management tool for AWS credentials when using Keycloak with SAML

blockchyp

SDK for Rust. Like all BlockChyp SDKs, it provides a full client for the BlockChyp gateway and BlockChyp payment terminals.

aws-sdk-rolesanywhere

AWS SDK for IAM Roles Anywhere

google-walletobjects1

A complete library to interact with Walletobjects (protocol v1)

adv_random

Create random numbers, passwords, or strings based on rules

totp-lite

correct TOTP library

sasl

authentication. Currently only does the client side.

xaskpass

A lightweight passphrase dialog

askpass-1p

An askpass utility that integrates with 1Password CLI

totp_rfc6238

generating Time-based One-time Password (TOTP) codes/tokens defined in RFC 6238

rs-firebase-admin-sdk

Firebase Admin SDK for Rust

qiniu-upload-manager

Qiniu Upload Manager for Rust

ory-client

SDK Client for Ory

ybaas

Don't you love when you accidentally tap your Yubikey when you have your IRC client in focus and you send 987947 into Libera? Want to be able to have that experience without having…

portier_broker

Reference implementation of the Portier broker protocol

zkryptium

Rust crypto library for zero-knowledge proofs

legba

A fast multi protocol credential bruteforcer/sprayer/enumerator

phraze

Random passphrase generator

docker_credential

Reads a user's docker credentials from config

axum-keycloak-auth

Protect axum routes with a JWT emitted by Keycloak

jwks_client_rs

JWKS-sync client implementation for Auth0

radius-rust

Pure Rust implementation of RADIUS Server/Client

wow_login_messages

Message definitions for World of Warcraft authentication servers

axum_session_auth

Provide a User Authentication and privilege Token Checks. It requires the Axum_Session library.

webauthn_rp

Server-side Web Authentication (WebAuthn) Relying Party (RP) API

scram-rs

Salted Challenge Response Authentication Mechanism (SCRAM) SASL mechanism, a library which implements SCRAM logic

sasl2-sys

Bindings for Cyrus SASL

ripasso

A password manager that uses the file format of the standard unix password manager 'pass'

twitch_oauth2

Oauth2 for Twitch endpoints

supabase-auth

Supabase Auth implementation following the official client libraries

powerplatform-dataverse-service-client

unofficial rust client library for connecting to Microsoft Dataverse environments

bws

Bitwarden Secrets Manager CLI

tauri-plugin-authenticator

Use hardware security-keys in your Tauri App

yayo

Manage and generate OTP (one time password) codes

ledger-apdu

Ledger Hardware Wallet - Common APDU Protocol Types

ogk

cli tool for open.go.kr

snmp2

SNMP v1/v2/v3 sync/async client library with traps and MIB support

ideatopia-password_generator

Generates passwords with various complexities

cargo-credential

assist writing Cargo credential helpers

oidc-cli

A command line tool to work with OIDC tokens

ssh-key-dir

sshd AuthorizedKeysCommand to read ~/.ssh/authorized_keys.d

cryptex

uses system keyrings to store and retrieve secrets or a local file

grammers-session

Different session storages for Telegram data

ory-kratos-client

SDK Client for Ory Kratos

passgen-cmd

Cross-platform tool for generating cryptographically secure passwords/tokens and other sets and sequences

share-1password

Securely share notes with others using 1Password. Perfect for developers sending passwords to clients.

qwicket

http query management tool for commandline lovers

propelauth

managing authentication and authorization with support for multi-tenant / B2B products, powered by PropelAuth

pinentry

API for interacting with pinentry binaries

pkpw

What if correct horse battery staple, but Pokémon

encrypt_config

manage, persist and encrypt your configurations

kadmin

Rust bindings for the Kerberos administration interface (kadm5)

pe-sign

cross-platform tool developed in Rust, designed for parsing and verifying digital signatures in PE files. It provides a simple command-line interface that supports extracting certificates…

pam

Safe Rust wrappers for PAM authentication

spotify-quickauth

Quickly authenticate librespot-based applications with Spotify

prs-gtk3

Secure, fast & convenient password manager CLI with GPG & git sync

keepass-to-env

convert Keepass database to environment variable

keyring-search

Cross-platform library for searching the platform specific credential store, made possible by keyring-rs

cargo-credential-1password

A Cargo credential process that stores tokens in a 1password vault

mas-iana

IANA registry data for JOSE and OAuth 2.0

firestore-db-and-auth

allows easy access to your Google Firestore DB via service account or OAuth impersonated Google Firebase Auth credentials

aws-assume-role-rs

A command line tool to generate AWS temporary security credentials

casdoor-sdk-rust

A Casdoor SDK (contain APIs) with more complete interfaces and better usability

okta-jwt-verifier

A helper library for working with JWT's for Okta in Rust

sshcerts

parsing, verifying, and creating SSH Certificates

twitch_oauth_token

Twitch oauth

bitwarden-api-api

Api bindings for the Bitwarden API

tauri-plugin-oauth

A Tauri plugin for spawning a localhost server. Needed for some oauth flows (Login with X).

rotp

command line HOTP and TOTP generator

async-oauth2

An asynchronous OAuth2 flow implementation

openid-client

OpenID client for Rust

partout

🧊 Iced desktop app for pass

simple-ldap

A high-level LDAP client for Rust

lade

Automatically load secrets from your preferred vault as environment variables, and clear them once your shell command is over

aws-iam

dealing with AWS IAM Policy resources

otpauth

Two-step verification of HOTP/TOTP for Rust

rusty_oauth

lightweight, secure OAuth 2.0 library for Rust, providing streamlined authentication flows for applications and services. Includes support for authorization codes, client credentials…

mc-attestation-verifier

SGX Enclave Attestation Report Verification

pamsm

Rust wrappers around PAM Service Modules functions

challenge_response

Perform HMAC-SHA1 and OTP challenges with YubiKey, OnlyKey and NitroKey, in pure Rust

okta

A fully generated & opinionated API client for the Okta API

pavex_session

HTTP sessions support for Pavex

some-auth

User management and JWT logic for API services

diqwest

Trait to extend reqwest for digest auth flow

oauth-lib

Asynchronous Rust library to deal with OAuth flows

gravel-gateway

A Prometheus Push Gateway for FAAS applications

bitwarden

Secrets Manager SDK

mattermost-rust-client

Rust client for Mattermost

identity_credential

Verifiable Credentials standard

npwg

Securely generate random passwords

ntfy

sending notifications over ntfy

nervemq-actix-identity

Identity management for Actix Web

actix-casbin

An Actix actor for casbin

crowbar

Securily generates temporary AWS credentials through Identity Providers using SAML

trino-rust-client

A trino client library

passage_flex

Passkey Flex for Rust - Add passkey authentication to your own Rust authentication flows with Passage by 1Password

poem-grants

Authorization extension for poem to protect your endpoints

z_osmf

z/OSMF Client

totp

CLI tool for generating TOTP codes

jwt

JSON Web Token library

rusty-mail

A CLI Gmail client built in Rust

azure_jwt

JWT validator for Microsoft Azure Id tokens

oauth10a

oauth 1.0a protocol fully-async with logging, metrics and tracing facilities

openiap

test client

light-openid

Lightweight OpenID primitives & client

min_jwt

Minimal JSON Web Token library

twitch_eventsub

that handles everything with Twitch EventSub helix api for you

smart-id-rust-client

Smart ID Rust Client

clubstatusd

HTTP API which allows the folks in your hackerspace to track it's status, with privacy enabled. Features: ternary status (public, private, closed), announcements (who's coming, talks…

teller

A developer-first multi provider secret manager

digest_auth

Digest Auth algorithm as defined in IETF RFC 2069, 2617, and 7616, intended for HTTP clients

ddnet-accounts

The account server binary, which takes HTTP requests for account related operations

sshauth

SSH key based (agents or static files) authentication tokens

provider-archive

reading and writing wasmCloud capability provider archive files

msal

Stub library for libhimmelblau

passrs

Linux pass program, with shared folders

casdoor-sdk

Casdoor SDK

passage-auth

Authentication API for Passage by 1Password

pam-client2

Application API wrapper to Pluggable Authentication Modules (PAM) (forked and fixed version of pam-client)

branca

Authenticated encrypted API tokens for Rust. A secure alternative to JWT.

nitrocli

A command line tool for interacting with Nitrokey devices

graph-oauth

Rust SDK Client for Microsoft Identity Platform

rdf-proofs

BBS+ signatures and zero-knowledge proofs for Linked Data

aegis-vault

parsing and dumping Aegis vaults

opentalk-types-signaling-livekit

Signaling types for the OpenTalk livekit module

pam-f

Safe Rust wrappers for PAM authentication

clerk-fapi-rs

An unofficial Rust SDK for the Clerk REST Frontend API

frank_jwt

JSON JWT

ci-id-bin

CLI app to detect ambient OIDC credentials on CI systems

galileo-osnma

Galileo OSNMA (Open Service Navigation Message Authentication)

oauth-axum

OAuth2 authorization code flow with Axum

qiniu-objects-manager

Qiniu Objects Manager for Rust

affinidi-messaging-didcomm

DIDComm for Rust

macaroon

Fully functional implementation of macaroons in Rust

webauthn-authenticator-rs

Webauthn Authenticator Client Library

keyweave

Fetches secrets from Azure Key Vault and weaves them into a convenient .env file

balloon-hash

Pure Rust implementation of the Balloon password hashing function

kanidm_lib_file_permissions

Kanidm File Permissions Library

lfspull

git lfs file pulling implementation in pure rust. Can only pull files / folders and only support token-auth for now.

ockam_identity

Ockam is a library for building devices that communicate securely, privately and trustfully with cloud services and other devices

ssi-data-integrity

Verifiable Credentials Data Model v1.1 for the ssi library

rsub

A high-performance message broker with QUIC transport and pub/sub messaging patterns

dtz-identity-auth

authentication traits for DownToZero backends

authly-common

Authly common datatypes and algorithms

trailbase-extension

SQLite extension used by TrailBase

penumbra-sdk-txhash

Produce Penumbra tx effecting data and authorization hashes

hyphae-handshake

Noise protocol framework handshakes for QUIC

jsonwebtokens

A Json Web Token implementation for Rust

msgraph-rs

interacting with Microsoft Graph API

brize_auth

A tiny async authentication library

ucred

safe access to ucred(3C), user credentials for processes

google-analytics3

A complete library to interact with analytics (protocol v3)

ntlmclient

NTLM client library for Rust

pow_account

generates cryptographic hashes with a second round of hashing to produce configurable leading zeros for proof-of-work or validation

slauth

oath HOTP and TOTP complient implementation

dacquiri

An authorization framework with compile-time enforcement

digest-access

HTTP Digest Access Authentication compliant with ITEF RFC2069, RFC2617 and RFC7616 for Rust

opaque-borink

configuration of OPAQUE, a passowrd-authenticated key exchange protocol

runeauth

Extendable Cookies

affinidi-did-resolver-cache-sdk

Affinidi DID Resolver SDK

iam-runtime-rs

Generated protobufs for integrating with and implementing iam-runtime services

identity_dbus_broker

DBus Broker which supplies credentials for authenticated Entra ID users

ecksport-auth

Native auth impl using NaCl-based signing key system

yubico

Yubikey client API library

pesel-rs

PESEL validation and detail extraction with multiple data layout implementations

fidoprobe

manage FIDO2 devices

cargo-credential-netrc

Cargo credential provider that parses your .netrc file to get credentials

another-steam-totp

Steam time-based one-time password

streambed

core library components

oauth2-types

OAuth 2.0 types used by the Matrix Authentication Service

sd-jwt-rs

Rust reference implementation of the IETF SD-JWT specification (v7)

ory-hydra-client

SDK Client for Ory Hydra

oauth-certs

The project fetches oauth certificates from providers during runtime and stores them in static Read / Write lock

authifier

Opinionated Rust authentication library

psw-gen

passworld generator

ate-auth

Represents a standardized data model and API for authenticating an ATE chain-of-trust

betfair-adapter

interacting with Betfair from Rust

rocket_airlock

TL;DR: Authentication and Authorization for rocket applications. The security airlock is the entry point to a rocket. Everything from the outside environment that wants to enter a rocket…

rs-keycloak

Faça a autenticação dos seus projetos usando Keycloak

fs-share

A cross-platform file-sharing CLI application

clio-auth

OAuth 2 helper library for CLI and desktop applications

fi-verifiable-data

VC and VP wrapper for rust and WASM. fi-digital-signatures crate is used to sign and verify the data objects.

password

manage passwords

feedsweeper

🧹 Automatically tidy up your RSS feed backlog

otpget

A command-line tool for automatically retrieving OTP codes from email messages

valorant_api_official

interacting with the Official Valorant API

tauri-plugin-keychain

A Tauri keychain plugin

authress

SDK for RUST - provides authorization as a service with fully compatible REST apis. Authentication / Authorization / User Identity Roles / Permissions / Policies

rjwt

A recursive Javascript Web Token with support for ECDSA

auto-launch

Auto launch any application or executable at startup. Supports Windows, macOS, and Linux.

passkey-client

Webauthn client in Rust

kvac

Keyed-Verification Anonymous Credentials (KVAC) and Algebraic MACs

alcoholic_jwt

validation of RS256 JWTs

kaldav

Caldav client

autonomi-cli

Autonomi CLI

passport-strategies

A thin wrapper on top of oauth2-rs that simplifies oauth2 authentication

c2pa-status-tracker

Status tracking internals for c2pa-rs crate

eternaltwin_oauth_client

RfcOauthClient implementations

shield

Web authentication for Rust

password-maker

Highly customizable password generation library.🔑

envio

A Modern And Secure CLI Tool For Managing Environment Variables

wow_srp

Server and client library for the World of Warcraft flavor of SRP6 with support for reconnection

dimo-rust-sdk

Community-driven DIMO SDK in Rust

cargo-credential-libsecret

A Cargo credential process that stores tokens with GNOME libsecret

argentum_user_account_business

Business layer of user account component

phabricator-oauth

OAuth2 authentication on Phabricator

boostydownload

application to bulk-download content from Boosty

p7m-userauth

Rust bindings for the login and authentication API of P7M

rocket_firebase_auth

Encode/decode firebase tokens in rocket apps with ease

biscuit-parser

Datalog parser used in the biscuit-auth and biscuit-quote crates

gecos

parsing and generation of gecos strings

ffsend

Easily and securely share files from the command line. A fully featured Send client

svc-authn

An authentication library

aliri_tower

Tower middleware for interacting with aliri authorities

neocities-client

client for the Neocities API

onepassword-secret-util

Enhance 1password secret expansion with the opx CLI

remote-files

a cli/lib wrapper of opendal to download/upload and manage remote files on buckets

yapp

Password Prompt

password-rules-parser

Parser for the HTML passwordrules attribute

ldap3-serde

Pure-Rust LDAP Client with serde support

pwfuzz-rs

Password list mutator/expander

project_tstings

test project

vade

VC and DID engine

sos-migrate

Import and export for the Save Our Secrets SDK

passgen-console-linuxwin

Cross-platform console-gui-tool for generating cryptographically secure passwords/tokens and other sets and sequences

axum-negotiate-layer

Negotiate HTTP layer library for axum

rp-supabase-client

Supabase PostgREST client wrapper with auth capabilities

s3-presign

A minimal library for generating presigned URLs for Amazon S3 compatible services

ironworker

lastfm scrobbler

bitwarden-data

contains structs for exported bitwarden data

two-factor-auth

CLI to generate two-factor-auth token compatible with Google Authenticator

cawg-identity

Rust SDK for CAWG (Creator Assertions Working Group) identity assertion

quickdash

A modern alternative to QuickSFV using Rust

ddnet-account-client

The account related operations of a client, that want to manage accounts & do requests to the account server

qiniu-upload-token

Qiniu Upload Policy Builder & Parser, Upload Token Generator & Parser for Rust

bios-basic

An embeddable message queue system

distro-keyring

Keyring data files from linux distributions

ctap-types

no_std friendly types for FIDO CTAP

rowid

A time-based unique ID solution

fattureincloud-rs

Connect your software with Fatture in Cloud, the invoicing platform chosen by more than 500.000 businesses in Italy. The Fatture in Cloud API is based on REST, and makes possible…

libpwquality

bindings for Rust

authbeam

Authentication manager

dcaf

ACE-OAuth framework

axum_jwt_ware

Axum Authentication Library

atm0s-sdn-identity

generating and verifying identities for atm0s-sdn

nextera_utils

Next Era Myanmar Solutions Utilities for Rust

fenc_cli

google-authenticator

can be used to interact with the Google Authenticator mobile app for 2-factor-authentication

china_identification_card

validating Chinese identification card numbers based on official rules and checksums

needroleshere

AWS IAM Roles Anywhere helper

alipan

sdk for rust

rasn-credssp

Data types for the Credential Security Support Provider Protocol

himmelblau_kerbeiros

Kerberos client library

google/ctap2

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards

ledger-transport

Ledger Hardware Wallet - Generic Transport

authoscope

Scriptable network authentication cracker

msal-rs

Microsoft Authentication Library for Rust

ofi-pass

A password promptor for pass

verifypass

🐀 | Basic library for checking passwords!

vaultier

write and read secrets from Hashicorp Vault

oauth2_login

Oauth2 login

netdb_auth

Netdb Auth validation for rocket

fireplace

A client for Firebase that seeks to provide a user-friendly interface to interact with Firestore, Firebase Auth, and similar

amora-rs

Amora is a secure token inspired by JWT and Branca, but enhanced a bit in some areas

lark_bot_sdk_patch

rust lark bot sdk

credentials

Fetch secrets from either environment variables or Hashicorp's Vault

xal

Xbox Authentication library

fido-authenticator

FIDO authenticator Trussed app

tame-oidc

A (very) thin layer of OIDC like functionality

mcai_models

Models for Media Cloud AI project

gix-sec

gitoxide project providing a shared trust model

bmbp_util

BMBP AUTH

keycloak-oauth

designed for seamless integration with Keycloak's OAuth2 authentication flows

flutterwave-v3-models

models crate for flutterwaveV3

mozwire

MozillaVPN wireguard configuration manager

axum-token-auth

passwordless authentication middleware for axum

pocket-relay

Pocket Relay Server

coconut-crypto

Threshold anonymous credentials based on the paper https://eprint.iacr.org/2022/011

letmein-proto

Authenticated port knocking - Wire protocol

qm-keycloak

Keycloak helper functions

raos

Async Rust implementation of the OAuth 2.1 Authorization Server

mega-security-rs

Mega's security whitepaper

openmls_basic_credential

A Basic Credential implementation for OpenMLS