CATEGORY
Authentication 2,312 crates
Data as of 2026-07-25 (crates.io database dump, timestamp 2026-07-25T02:00:36Z). Source: crates.io · db-dump.tar.gz · methodology & corrections.
ockam_signature_blsThe Ockam BLS signature impementation.1,225Apache-2.0
ockam_signature_coreSignature core types of the Ockam library.1,223Apache-2.0
authkestra-coreCore traits and types for the authkestra authentication framework1,219MIT OR Apache-2.0
synta-x509-verificationRFC 5280 X.509 certificate path validation using synta-certificate1,214MIT OR Apache-2.0
azure-jwt-simple-jwksLibrary to validate JWT tokens using JSON Web Key Set (JWKS)1,214MIT
bsv-wallet-toolboxPure Rust BSV wallet-toolbox implementation1,211non-standard
git-authA git credential helper that aims to integrate better with your git workflow1,210MIT OR Apache-2.0
authfixA simple and extensible authentication layer for Actix Web, designed for fast integration and easy configuration.1,203MIT OR Apache-2.0
rust_unityA library that handles everything with Twitch EventSub helix api for you.1,195MIT
hibp-verifierHigh-performance library for checking passwords against the Have I Been Pwned breach database using binary search on sha1t48…1,191MIT
sendenvQuickly and securely share `.env` files using 1Password1,190MIT
ockam_signature_bbsThe Ockam BLS signature impementation.1,189Apache-2.0
weftos-rvf-cryptoRuVector Format cryptographic primitives — SHA-3, Ed25519, ML-DSA-65 dual signing (WeftOS fork)1,182MIT OR Apache-2.0
hyper1-proxyA proxy connector for Hyper-based applications1,179MIT
prisma_authA simple authentication crate supporting both Rocket backend API and Yew frontend authentication components1,178non-standard
vercre-issuerOpenID for Verifiable Credential Issuance1,159MIT OR Apache-2.0
reclaim-rust-sdkA Rust SDK for Reclaim Protocol1,157MIT
vercre-verifierOpenID for Verifiable Presentations1,152MIT OR Apache-2.0
auths-policyPolicy expression engine for Auths - composable authorization logic1,138Apache-2.0
twitcheventsub-unityA library that handles everything with Twitch EventSub helix api for you.1,134MIT
xmlsig-lc-rsXML-DSig signature verification and SAML assertion validation backed by aws-lc-rs (FIPS-capable). The XML canonicalization engine…1,126BSD-2-Clause
arbiter-mcpMCP JSON-RPC request parser for Arbiter proxy1,125Apache-2.0
axum-tower-sessions-csrfCSRF protection for Axum using tower-sessions with the Synchronizer Token Pattern1,116MIT OR LGPL-3.0-or-later
sshcerts-hatter-forkA library for parsing, verifying, and creating SSH Certificates1,113non-standard
arbiter-auditStructured audit logging with argument redaction for the Arbiter proxy1,113Apache-2.0
hodei-hrnHodei Resource Names (HRN) - Unique resource identification system for authorization1,105MIT OR Apache-2.0
bitsrun-libLogin and logout library for 10.0.0.55 at BIT1,104MIT
hodei-deriveDerive macros for Hodei authorization framework - auto-generate Cedar schemas1,104MIT OR Apache-2.0
MKT_KSA_Geolocation_SecuritySmart geolocation & behavioral security library for Rust1,103Apache-2.0
intel-dcap-apiIntel DCAP API Client1,095Apache-2.0 OR MIT
wA minimalist library for MediaWiki APIs1,093MIT OR Apache-2.0
authnz-totpRFC-compliant TOTP implementation with ease of use as a goal and additionnal QoL features. Edited for Authnz1,078MIT
anp-rs-sdkANP Rust SDK - 智能体网络协议自动配置工具包,提供HTTP服务器自动配置、DID自动生成、智能体描述等功能1,075MIT
vercre-holderOpenID compliant Verifiable Credential holder API, typically implemented by a wallet1,074MIT OR Apache-2.0
arbiter-metricsPrometheus-compatible metrics for the Arbiter proxy1,073Apache-2.0
bell_systemAdvanced privilege escalation system with multi-level security and compliance features1,069GPL-3.0-or-later
authnz-u2fRust FIDO U2F Library. Edited for Authnz1,067MIT OR Apache-2.0
proto-blue-identityAT Protocol identity resolution: DID and handle resolution1,063MIT OR Apache-2.0
rullst-connectOAuth2 Social Login for Rust web frameworks.1,063MIT
gmail-mcp-serverA clean, simplified MCP server for Gmail integration built with Rust1,062MIT
netrc-parserA Rust library for parsing and manipulating .netrc files1,061MIT
rustwallAdvanced Rust-based firewall and security system with DDoS protection, CAPTCHA verification, and specialized Tor network security…1,055MIT
arctic-oauthAuthorization-code-flow-only OAuth 2.0 client library with 64 pre-configured providers1,049MIT
huskarl-crypto-webcryptoWebCrypto support for huskarl (OAuth2 client) ecosystem.1,049MIT OR Apache-2.0
trojan-authAuthentication backends for trojan-rs1,048GPL-3.0-only
coz-rsCoz cryptographic JSON messaging specification1,047BSD-3-Clause
profile_kitA flexible, lightweight Rust library for managing user profiles.1,044Apache-2.0
huskarl-reqwestreqwest support for huskarl (OAuth2 client) ecosystem.1,025MIT OR Apache-2.0
licenseseatOfficial Rust SDK for LicenseSeat - simple, secure software licensing1,011MIT
smbcloud-auth-sdkClient SDK for smbCloud Auth — authenticate your users via smbCloud Auth service.1,008Apache-2.0
u2f-hatter-forkRust FIDO U2F Library1,007MIT OR Apache-2.0
rustywtA simple JWT (JSON Web Token) crate implemented in Rust, focusing on the HS256 (HMAC SHA-256) algorithm.1,001MIT
spake2-confluxThe SPAKE2 password-authenticated key-exchange algorithm.999MIT OR Apache-2.0
auths-idMulti-device identity and attestation crate for Auths991Apache-2.0
ferro-mcp-oauthOAuth 2.1 authorization server for ferro-mcp-server endpoints989MIT
openmetadata-rs-sdkOpenMetadata client SDK. Open Standard for Metadata. A Single place to Discover, Collaborate and Get your data right987Apache-2.0
wstep-rsImplementation of the [MS-WSTEP] WS-Trust X.509v3 Token Enrollment Extensions protocol977BSD-3-Clause
oauth2_loginOauth2 login974Apache-2.0
wcce-rsImplementation of the [MS-WCCE] certificate enrollment protocol971BSD-3-Clause
hodei-authzCore authorization traits and types for Hodei framework with Cedar Policy970MIT OR Apache-2.0
proto-blue-oauthAT Protocol OAuth 2.0 client: DPoP, PKCE, PAR, session management970MIT OR Apache-2.0
arbiter-identityAgent identity model and in-memory registry for Arbiter968Apache-2.0
rocket_flex_sessionFlexible sessions for Rocket applications964MIT
codora-securityAuthentication and Authorization library written in rust953MIT
rvaultA local-first, multi-tenant password manager with cloud sync capabilities952MIT
wecanencryptSimple Rust OpenPGP library for encryption, signing, and key management.952MIT
cedros-login-serverAuthentication server for cedros-login with email/password, Google OAuth, and Solana wallet sign-in946MIT
rust-rbacA flexible Role-Based Access Control (RBAC) system for Rust applications939MIT
ssh-auth-commonCommon types and utilities for ssh-auth-cmd suite936MIT
passgen-telegramTelegram bot-service for generating cryptographically secure passwords/tokens and other sets and sequences.933MIT
bls-sig-cliA command-line tool for BLS signature operations (keygen, pubkey, sign, verify).932MIT OR Apache-2.0
kiwaviA secure TOTP-based key derivation system using user salts931Apache-2.0
archeAn opinionated backend foundation for Axum applications, providing batteries-included integrations for cloud services, databases,…924MIT
koi-cryptoKey management, TOTP, signing, and encryption primitives for local network trust919Apache-2.0 OR MIT
hessra-macrosHessra authorization service macros for Rust917Apache-2.0
x-midCreating a Machine ID hash for MacOS/Windows/Linux910MIT OR Apache-2.0
zanzibarA high-performance, Postgres-backed ReBAC (Relationship-Based Access Control) engine inspired by Google's Zanzibar paper.905Apache-2.0
vc-holderOpenID compliant Verifiable Credential holder API, typically implemented by a wallet902MIT OR Apache-2.0
decide-coreA fast, lightweight permission engine for Rust and TypeScript with condition support.900MIT
tacacs-plusAn asynchronous, runtime-independent RFC8907 TACACS+ client894MPL-2.0
threatflux-coreCore types and utilities for ThreatFlux security platform894MIT
tauri-plugin-keyring-storeStronghold-inspired secrets and crypto helpers backed by the OS credential store (keyring-core).893MIT OR Apache-2.0
pwtCreate, verify and decode protobuf web tokens - with protobuf instead of prost888 BSD-3-Clause
atlas-transparency-logA cryptographically secure transparency log service for C2PA manifests with Merkle tree proofs887Apache-2.0
miai调用你的小米、小爱音箱885MIT
kotoba-securityComprehensive authentication and authorization system with JWT, OAuth2, MFA883Apache-2.0
huskarlA modern OAuth2 client library.883MIT OR Apache-2.0
crabka-authzShared Kafka-ACL authorization evaluator for the Crabka broker and gateway881Apache-2.0
huskarl-resource-serverOAuth2 resource server (JWT validation) support for the huskarl ecosystem.881MIT OR Apache-2.0
arbiter-sessionTask session management with budget and tool whitelisting for Arbiter880Apache-2.0
vc-issuerOpenID for Verifiable Credential Issuance879MIT OR Apache-2.0
core-policyPure RBAC/ABAC policy engine core (zero crypto/network dependencies)879Apache-2.0
openadp-ocryptRust SDK for OpenADP - Distributed secret sharing and advanced data protection877MIT OR Apache-2.0
credibil-holderVerifiable Credential and other data holder agent SDK874MIT OR Apache-2.0
jwks-cacheHigh-performance async JWKS cache with ETag revalidation, early refresh, and multi-tenant support — built for modern Rust…872GPL-3.0
domino_cliClient to interact with a domino application running on holochain871GPL-3.0
vc-verifierOpenID for Verifiable Presentations869MIT OR Apache-2.0
rust-keyvaultA secure, modern cryptographic key management library for Rust866MIT OR Apache-2.0
nacm-validatorNACM (Network Access Control Model) validator with Tail-f ACM extensions and multiple configuration files support861MPL-2.0
axum-jwt-sessionsJWT authentication library for Axum with refresh token support855MIT
reliakit-secretSecret-safe wrappers for Rust values that should not leak through formatting or diagnostics.849MIT
openauth-samlSAML 2.0 service-provider support for OpenAuth.844MIT
open-pgpImplementation of the IETF OpenPGP standard for secure communication and data encryption.843LGPL-2.0-or-later
arbiter-policyDeny-by-default policy engine for Arbiter authorization834Apache-2.0
openapi-sdkA fully-featured and blazing-fast Rust API client to interact with Openapi®828MIT
glyph-sandboxCapability-based security sandbox for Glyph runtime828MIT OR Apache-2.0
cf-static-authn-pluginAuthN resolver plugin with static token-to-identity mapping for development and testing820Apache-2.0
sa-token-rustA powerful Rust authentication and authorization framework819MIT OR Apache-2.0
keycloak-reqwestReqwest middleware to obtain access token from keycloak812MIT OR Apache-2.0
axum-firebase-middlewareAxum middleware for authenticating Firebase ID tokens803MIT OR Apache-2.0
email-authEmail authentication library: SPF, DKIM, DMARC, ARC, BIMI800MIT OR Apache-2.0
secretx-coreCore traits and types for the secretx secrets retrieval library.790MIT
dwn-rsDecentralized Web Node787MIT OR Apache-2.0
actix-ez-oauthActix easy auth library783MIT OR Apache-2.0
dwn-typesDecentralized Web Node types781MIT OR Apache-2.0
treeship-corePortable trust receipts for agent workflows - core library779Apache-2.0
hush-coreCore cryptographic primitives for clawdstrike776Apache-2.0
onion_vault_cliOnionVault CLI774Apache-2.0
xjp-oidc-axumAxum integration for xjp-oidc - OIDC/OAuth2 middleware and extractors773MIT OR Apache-2.0
openid4vci-rsOpenID for Verifiable Credential Issuance771MIT OR Apache-2.0
auths-sdkApplication services layer for Auths identity operations767Apache-2.0
oid4vp-rsOpenID for Verifiable Presentations765MIT OR Apache-2.0
openid4vp-rsOpenID for Verifiable Presentations762MIT OR Apache-2.0
oid4vci-rsOpenID for Verifiable Credential Issuance761MIT OR Apache-2.0
dwn-msgDecentralized Web Node messages758MIT OR Apache-2.0
facebook_api_rsA Rust client library for the Facebook Graph API v23.0, with full support for both native and WebAssembly (WASM) environments758MIT
mocopr-rbacRole-based access control integration for MoCoPr MCP servers756MIT OR Apache-2.0
threatflux-auth-sdkReusable authentication SDK for ThreatFlux services756MIT
aucpace-confluxAuCPace protocol implementation753MIT OR Apache-2.0
nexo-llm-authReusable OAuth + PKCE primitives for Nexo LLM providers (Anthropic Claude.ai auth-code, MiniMax device-code). Pure functions…749MIT OR Apache-2.0
powdb-authArgon2 password hashing and a persisted user/role store for PowDB RBAC746MIT
password_managerUltra-secure password manager with quantum-resistant encryption741non-standard
arbiter-proxyAsync HTTP reverse proxy with middleware chain architecture735Apache-2.0
neuron-secretSecret resolution traits and types for neuron729MIT OR Apache-2.0
licenz-coreOffline software license verification with RSA signatures, hardware binding, and anti-tamper detection726MIT
mkit-keystoreSigning-key keystore abstraction for mkit725MIT OR Apache-2.0
srp-confluxSecure Remote Password (SRP) protocol implementation718MIT OR Apache-2.0
permission-translationA library for translating hexadecimal permission values into human-readable capability sets717MIT OR Apache-2.0
better-auth-diesel-sqliteSQLite database adapter for better-auth-rs using Diesel ORM — compile-time verified queries, 65 methods across 10 traits716MIT
appleA Rust library for Apple Sign-In authentication, CloudKit Web Services, and App Store Server API706MIT
ziti-sdkZiti Rust SDK - High-performance, async-first implementation for secure, zero-trust networking692MIT
summer-sa-tokenSa-Token authentication and authorization plugin for summer-rs688MIT
steam-totp-rsSteam TOTP and confirmation key generation - pure Rust implementation685MIT
bsv-middleware-cloudflareBSV BRC-103/104 authentication and BRC-29 payment middleware for Cloudflare Workers685MIT OR Apache-2.0
firebase-rs-sdkRust port of the Firebase JS SDK677Apache-2.0
pakery-coreShared utilities for PAKE protocol implementations673MIT OR Apache-2.0
hush-proxyNetwork proxy utilities for clawdstrike671Apache-2.0
nacm-validator-cliCLI for NACM (Network Access Control Model) validator with Tail-f ACM extensions and multiple configuration files support670MPL-2.0
hush-spineAegis Spine protocol for ClawdStrike — envelope signing, checkpoints, trust bundles, and NATS transport668Apache-2.0
axum-turnstileCloudflare Turnstile verification middleware for Axum663MIT OR Apache-2.0
openid-connectA OpenID Connect implementation based on the `jose` crate661MIT OR Apache-2.0
roughenough-keysRoughenough key material handling with multiple secure storage backends651Apache-2.0 OR MIT
smooai-smooth-policySmooth policy types — TOML-based access control for Microsandbox operators648MIT
alvan-licA Rust crate for generating and validating time-based license keys with offline validation647MIT OR Apache-2.0
arbiter-behaviorOperation-type drift detection for Arbiter task sessions647Apache-2.0
arbiter-lifecycleAgent lifecycle HTTP API for Arbiter639Apache-2.0
sa-token-plugin-salvoSalvo framework integration for sa-token-rust (facade over versioned bindings)638MIT OR Apache-2.0
redshift-iamSAML/IAM authentication for Amazon Redshift via PingFederate or AWS STS638GPL-3.0
armature-jwtJWT token handling for Armature authentication636Apache-2.0
redisctl-configConfiguration and profile management for Redis CLI tools632MIT OR Apache-2.0
otp-authA Rust Implementation of HMAC and Time-based One-Time Passwords.631MIT
freebird-cryptoCryptographic primitives for the Freebird privacy-preserving authentication system, including VOPRF implementation629MIT OR Apache-2.0
otplus-coreCore cryptographic library for OTPlus - A secure one-time password and key derivation system629MIT
tenuoAgent Capability Flow Control - Rust core library628Apache-2.0
crabgraphA safe, ergonomic, high-performance cryptographic library for Rust built on audited primitives627MIT OR Apache-2.0
quorum-crypto-coreCryptographic primitives and traits for agent signing and verification (ed25519, secp256k1, SHA3)627Apache-2.0 OR MIT
southeast-nacosA Rust library for retrieving configuration from Nacos with AWS KMS integration617MIT OR Apache-2.0
mailrs-webhook-signatureHMAC-SHA256 webhook payload signing + verification. Header-format helpers (sha256=hash). Constant-time HMAC compare. Optional…617Apache-2.0 OR MIT
samlStateless, async-native SAML 2.0 toolkit with no libxml2/xmlsec C build chain605MIT OR Apache-2.0
jwt-labJWT crate for Rust: decode, verify, sign, mutate, JWK/JWKS, algorithm selection, time validation, and secure APIs.595MIT
arbiter-credentialCredential resolution and injection middleware for the Arbiter proxy594Apache-2.0
systemprompt-slackSlack integration for systemprompt.io. Verifies Slack Events API, slash-command, and Block Kit interaction requests, maps Slack…587BUSL-1.1
libtumpaShared tumpa library: high-level OpenPGP key, card, and keystore operations on top of wecanencrypt.586GPL-3.0-or-later
jwtinyMinimal JWT validation library for build web services586MIT
systemprompt-teamsMicrosoft Teams integration for systemprompt.io. Validates Azure Bot Service activity tokens, maps Teams users to governed…586BUSL-1.1
crabkey-typesCore traits and types for the crabkey API framework580MIT
arbiter-oauthOAuth 2.1 JWT validation middleware for Arbiter proxy576Apache-2.0
jwk-boxA simple JWK client.575MIT
sa-token-plugin-gothamGotham framework integration for sa-token-rust (facade over versioned bindings)568MIT OR Apache-2.0
sa-token-plugin-ntexNtex framework integration for sa-token-rust (facade over versioned bindings)567MIT OR Apache-2.0
sa-token-plugin-tideTide framework integration for sa-token-rust - All-in-one package567MIT OR Apache-2.0
rocket-webhookWebhook validation for Rocket applications565MIT
oxidite-authAuthentication and authorization for Oxidite (RBAC, JWT, OAuth2, 2FA, API keys)565MIT
cleakerCleaker identity and signature daemon written in Rust.561MIT
atomr-agents-securityTyped security context: clearance/compartment walls, mandate checks, a capability/secrets broker, and reusable WalledTool…559Apache-2.0
rtb-credentialsOS keychain credential storage. Part of the phpboyscout Rust toolkit.558MIT
pas-externalPpoppo Accounts System (PAS) external SDK — OAuth2 PKCE, JWT verification port, Axum middleware, session liveness555MIT OR Apache-2.0
securitydept-utilsUtils of SecurityDept, a layered authentication and authorization toolkit built as reusable Rust crates.548MIT
armature-authAuthentication and authorization for Armature framework546Apache-2.0
armature-securitySecurity utilities and middleware for Armature545Apache-2.0
clawdstrikeSecurity guards and policy engine for AI agent execution543Apache-2.0
all-thisShared primitives, identity structures, and session logic for decentralized apps within the Neurons ecosystem.541MIT OR Apache-2.0
jose-rsPure-Rust JOSE library (JWS, JWE, JWK, JWT) with software and HSM key support540BSD-2-Clause
gcloud-identity-tokenA secure OAuth token client for Google Cloud538MIT
ssh-auth-cmdSSH AuthorizedKeysCommand multiplexer - chain multiple SSH authentication sources536MIT
openlark-security飞书开放平台安全认证服务模块 - 身份认证、权限管理、安全审计 (44 APIs)535Apache-2.0
rustywallet-hdBIP32/BIP44/BIP85 Hierarchical Deterministic wallet for cryptocurrency key derivation534MIT
pkuinfo-commonPKU IAAA 统一身份认证及公共工具库534MIT
ssh-auth-configSSH AuthorizedKeysCommand multiplexer - configuration management utilities533MIT
anvil-sshPure-Rust SSH stack for Git tooling: transport, keys, signing, agent. Foundation library extracted from…526GPL-3.0-or-later