Top THOR GitHub Repositories & Tools (2026)

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

FlashRT is a high-performance realtime inference engine for small-batch, latency-sensitive AI workloads. The flagship integration is production VLA control for Pi0, Pi0.5, GROOT N1.6, and Pi0-FAST. Also support llm e.g, qwen3.6-27B

One library | Many payment processors | Scale to multiple processors with few lines of code.

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

Class Variance Authority

Istio governance material.

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

An authorization library that supports access control models like ACL, RBAC, ABAC in Laravel.

A set of RSpec matchers for testing Pundit authorisation policies.

The official community-maintained Clerk SDK for Rust

Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services

Lightweight typescript library for cross-chain wallets. Connect with multiple blockchains via a common interface, with support for the minimum features necessary.

A modern, open-source full-stack SaaS starter built with Next.js, TypeScript, MongoDB, and shadcn/ui a solid foundation for building scalable SaaS applications.

ThunderID is a high-performance, open-source identity stack designed for developers to secure and manage access for humans, AI agents, and machines through fully composable identity flows.

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.