Rodauth is Ruby's most advanced authentication framework, designed to work in all rack applications. It's built using Roda and Sequel, but it can be used as middleware in front of web applications that use other web frameworks and database libraries. Rodauth aims to provide strong security for ...

WebAuthn ruby server library ― Make your application a W3C Web Authentication conformant Relying Party and allow your users to authenticate with FIDO2/U2F authenticators as passkeys or security keys.

Simple (but safe) token authentication for Rails apps or API with Devise.

Ruby/NTLM HTTP provides NTLM authentication over http.

An implementation of RFC 2617 - Digest Access Authentication. At this time the gem does not drop in to Net::HTTP and can be used for with other HTTP clients. In order to use net-http-digest_auth you'll need to perform some request wrangling on your own. See the class documentation at Net::HTTP...

This module provides common interface to HMAC functionality. HMAC is a kind of "Message Authentication Code" (MAC) algorithm whose standard is documented in RFC2104. Namely, a MAC provides a way to check the integrity of information transmitted over or stored in an unreliable medium, based on a s...

Mixes in simple per-request authentication

OAuth 2 authentication with the Azure ActiveDirectory V2 API.

Authentication solution for Rails based on JWT

A collection of useful Rails generator scripts for scaffolding, layout files, authentication, and more.

Simple key/secret based authentication for apis

Provide a Rails authentication active model.

Generates a pre-built, security-conscious authentication system into a Rails app: DB-backed sessions with idle/absolute timeouts, paranoid flows, magic links, TOTP MFA, an admin area, and more, all opt-in via flags. Inspired by authentication-zero.

Provides authentication related stuff.

A thin wrapper around the Rails `flash' object to assist in redirecting the user `back' after authentication.

Simple Authentication and Security Layer (RFC 4422)

Provides common authentication needs such as signing in/out, activating by email and resetting password.

JWT authentication for devise with configurable token revocation strategies

### Features ### * control sms code pattern * configure max login attempts * per user level control if he really need two factor authentication * your own sms logic

Authsignal is a passwordless authentication/multifactor authentication with modern factors like passkeys