Tinyauth
A small, OpenID-certified authentication and authorization server that can run as a standalone service or as middleware in front of other apps, with support for OAuth, LDAP, and access control.
Tinyauth is an authentication and authorization server designed to be as simple and small as possible while still supporting OAuth, LDAP, and access-control rules. It can run either as a standalone authentication server or as a middleware layer in front of other web applications, and works with common reverse proxies such as Traefik, Nginx, and Caddy.
As of its 5.1.0 release it is OpenID Certified for the Basic OP profile, with a public docker-compose example that demonstrates it alongside Traefik and a demo application. It supports two-factor authentication and single sign-on, and its interface can be translated into additional languages by contributors.
It is written in Go and released under the AGPL-3.0 license.