A comprehensive set of four self-contained example applications demonstrating the Sphere Connect protocol for integrating dApps with the Sphere wallet. The examples cover a browser dApp (React/Vite), a Node.js CLI dApp over WebSocket, an autonomous bot that runs its own wallet (direct SDK, no Connect), and a backend-auth flow where a frontend brokers a wallet signature and a backend verifies it cryptographically to issue a JWT. The codebase is a multi-package monorepo, each package pinned to the same SDK version (0.14.2), with extensive test coverage, CI/CD, and detailed documentation. The overall architecture is clean and well-structured, exhibiting high engineering craftsmanship in areas like money-safety (duck-typed detection of possibly-committed sends), exact string-based unit conversion, and byte-exact challenge reconstruction for signature verification.
Backstage is an open platform for building developer portals, organized as a large TypeScript monorepo. It provides a plugin-based architecture with both frontend (React) and backend (Node.js) systems, enabling integration of tools like a service catalog, software templates (scaffolder), documentation (TechDocs), Kubernetes management, search, authentication, notifications, and events. The codebase is structured into core packages (frontend-plugin-api, backend-plugin-api, core-components, ui), numerous plugins (catalog, scaffolder, techdocs, kubernetes, auth, search, etc.), CLI tooling, and a design system (Backstage UI). Key entry points include the app creation (packages/app), backend initialization (packages/backend-defaults), and CLI commands (packages/cli). Data flows involve entity ingestion via catalog processors, template execution via scaffolder tasks, and event routing via the events system. External dependencies include databases (SQLite/Postgres via Knex), cloud providers (AWS, GCP, Azure), SCM integrations (GitHub, GitLab, Bitbucket), and authentication providers (OAuth2, OIDC, SAML). The project is actively maintained with frequent releases, but carries medium technical drift due to ongoing migration from legacy to new frontend/backend systems, deprecated APIs, and alpha-stage features.
This is the official Go implementation of JSON Web Tokens (JWT), currently at v5. It provides a comprehensive library for creating, signing, parsing, and validating JWTs. The core package implements all standard JWT claims (RegisteredClaims and MapClaims), multiple signing algorithms (HMAC-SHA, RSA, RSA-PSS, ECDSA, Ed25519), and a flexible parser with functional options for configuration (e.g., allowed algorithms, leeway, audience/issuer/subject validation). The library also includes a `request` subpackage for extracting tokens from HTTP requests via headers or form/query parameters, and a `cmd/jwt` CLI tool for debugging and batch operations. Architecturally, it follows a clean separation of concerns: signing methods implement a common `SigningMethod` interface, claims implement a getter-based `Claims` interface, and validation is handled by a stand-alone `Validator` struct that can be used independently of parsing. The code is well-tested, uses only the Go standard library (no third-party dependencies), and follows modern Go idioms like functional options and error wrapping (Go 1.20+). It is actively maintained with CI, linting, CodeQL, and spell-check workflows.
Authorizer is a self-hosted, production-grade authentication and authorization server written in Go. It implements OAuth 2.0 / OIDC, SAML IdP/SP, SCIM 2.0, WebAuthn/passkeys, TOTP, email/SMS OTP, and fine-grained authorization via an embedded OpenFGA engine. The architecture is transport-agnostic: a shared service layer (internal/service) is called by GraphQL resolvers, gRPC handlers, and HTTP handlers (Gin). It supports multiple storage backends (SQL, MongoDB, Cassandra, DynamoDB, Couchbase, ArangoDB) via a unified storage.Provider interface, plus Redis and in-memory stores for sessions and caching. The system includes a React admin dashboard, an end-user login SPA, and an MCP (Model Context Protocol) server for AI tool exposure. Security is a primary focus, with extensive regression tests for CVEs, SSRF protection, constant-time comparisons, and audit logging.
This is a Nuxt.js 2 authentication module that provides zero-boilerplate authentication support. It implements various authentication schemes (local, OAuth2, OpenID Connect, refresh tokens) and integrates with popular providers like Auth0, Google, Facebook, and Laravel-based systems. The module handles token storage, automatic refresh, user management, and provides middleware for route protection. It uses a modular architecture with core auth logic, scheme implementations, provider configurations, and utility functions.
Ask Molty is a Cloudflare Worker that serves as a documentation agent for OpenClaw. It accepts user questions via a chat API, builds a read-only workspace from pre-indexed documentation, source code, and GitHub issues/PRs, then uses OpenAI's chat models with tool calls (search_workspace, read_workspace, list_workspace, run_shell) to answer grounded in the workspace. The worker handles authentication via OpenClaw ID or GitHub session cookies, serves artifact files (e.g., github-search.jsonl) via a proxy, and includes robust error handling for timeouts, malformed data, and streaming. The codebase is well-structured with separate modules for auth, prompt, retrieval, and types, and includes a comprehensive smoke test suite that mocks network interactions to verify behavior.
This is the monorepo for Supabase, the open-source Firebase alternative built on PostgreSQL. The repository contains the complete Supabase platform including: (1) Studio - a Next.js-based management dashboard for database, auth, storage, and edge functions, (2) Docs - a Next.js documentation site with MDX content and search, (3) WWW - the main marketing website, (4) UI packages - shared React component libraries built on Radix UI and Tailwind CSS, (5) pg-meta - a TypeScript library for PostgreSQL metadata introspection, (6) ai-commands - AI/LLM integration tools, (7) Docker configurations for self-hosted deployments, and (8) numerous example applications demonstrating Supabase integrations. The architecture is a pnpm monorepo using Turbo for build orchestration. The codebase demonstrates sophisticated engineering patterns including: a custom SQL query builder with branded types for safe SQL composition (pg-meta), a comprehensive component library with design system tokens, real-time features via WebSockets, row-level security policy management, and a multi-tenant organization/project structure. The repository is actively maintained with recent commits and has strong community engagement (105k+ stars).
This is a monorepo for Auth.js (formerly NextAuth.js), a framework-agnostic authentication library for web applications. The core engine (`@auth/core`) handles OAuth/OIDC, email/passwordless, credentials, and WebAuthn/Passkey authentication flows. It provides a unified API for session management (JWT or database-backed), CSRF protection, and cookie handling. The library is designed to be integrated into multiple frameworks via separate packages: `@auth/nextjs`, `@auth/sveltekit`, `@auth/express`, `@auth/qwik`, and `@auth/solid-start`. Each framework package adapts the core `Auth` function to the framework's request/response model, offering server-side handlers, middleware, and client-side hooks. The repository also includes over 80 built-in OAuth/OIDC provider definitions (e.g., Google, GitHub, Discord, Auth0) and 20+ database adapters (e.g., Prisma, Drizzle, MongoDB, PostgreSQL, DynamoDB) that implement a standard `Adapter` interface for user persistence. The project is now part of Better Auth, and the README recommends new projects use Better Auth unless specific feature gaps exist. The monorepo contains development apps, example applications, and a comprehensive documentation site built with Nextra.
ember-simple-auth is a lightweight Ember.js addon for implementing authentication and authorization in Ember applications. It provides a session service, pluggable authenticators (OAuth2 password grant, implicit grant, Devise, Torii, and custom), and session stores (localStorage, sessionStorage, cookie, adaptive, ephemeral) that persist the session across page reloads and synchronize across browser tabs. The library supports FastBoot, Engines, and Embroider, and includes built-in test helpers. Architecture follows a service-based pattern where the session service delegates to an internal session module that manages state transitions (unauthenticated, authenticated, loading) and communicates with authenticators and stores via events. The codebase is partially migrated to TypeScript, uses modern tooling (pnpm workspaces, Rollup, eslint flat config), and maintains broad compatibility with Ember versions from 3.28 onward.
FoalTS is a full-featured Node.js/TypeScript web framework structured as a monorepo with modular packages (core, CLI, JWT, TypeORM, GraphQL, storage, social auth, etc.). The framework provides declarative routing via decorators, a hook system for middleware/validation/authorization, dependency injection, and built-in support for OpenAPI, GraphQL, WebSockets, and file storage. Under the hood it uses Express, AJV, and TypeORM, with session stores for Redis, MongoDB, and SQL databases. The CLI generates projects, controllers, entities, and REST APIs, and includes upgrade commands across major versions. The codebase demonstrates solid engineering: thorough unit/e2e tests (over 2100 tests), documentation-as-tests, and a consistent pattern of abstract services (Store, Disk, Logger) resolved via configuration. Key reusable patterns include the hook/decorator system for validation and authentication, the abstract OAuth2 provider base class, and the CLI generator template engine. However, some deprecations (e.g., hashPassword→PasswordService) and outdated Docker images in development config indicate moderate technical drift. The project is actively maintained with frequent releases, daily CI on Node 22/24, and a well-documented upgrade path.