A small Rails engine that stores immutable external agreement-version metadata and append-only localized acceptance evidence. It distinguishes the subject bound by an agreement from the actor accepting under recorded authority, rejects stale rendered versions, and leaves documents, authentication...

A Ruby client for KSeF 2.0, Poland's mandatory national e-invoicing system. Covers the REST transport layer (KSeF-token authentication, payload encryption, interactive sessions, invoice submission, status polling and UPO retrieval) and ships a standalone FA(3) invoice builder with XSD-backed vali...

Hitch lets MCP clients -- Claude, ChatGPT, Cursor -- call your Rails app's tools as a specific signed-in user, with access you can revoke. You do not stand up a separate auth server, add Redis, or adopt a new sign-in system. Hitch uses the authentication your app already has (current_user or Cur...

Let an administrator view an account as its owner. Read-only by default (two layers: no non-GET requests, and ActiveRecord writes refused), re-validated from the database on every request so revoked consent bites on the next click, time-boxed server-side, and logged in words the account owner can...

Twitch authentication with OAuth 2. Result tokens can be used for API libraries, chat libraries or something else.

A full featured wrapper for interacting with the base Google Data API, including authentication and basic object handling

Adds a grid card (a printed table of random characters) as a second factor to Rails 8+ apps using `bin/rails generate authentication`: per-user cards, card rotation, and a challenge step after the password sign-in.

Rack middleware that provides authentication based on CloudFlare JSON Web Tokens.

The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints). **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. ...

Olm and Megolm for Ruby, over the vodozemac crate by magnus. Accounts, sessions, group sessions, short authentication strings, the ed25519 and curve25519 key types and PkEncryption, with every key and ciphertext crossing the boundary as base64.

Adds backchannel authentication, Ruby completion APIs, transactional hooks and observation events to rodauth-oauth.

Pure-Ruby client for KSeF API 2.0 (Krajowy System e-Faktur). Provides low-level 1:1 endpoint access plus high-level coordinators for authentication (XAdES), interactive and batch invoice sessions, invoice download/export, incremental sync, KSeF certificates, tokens, permissions and offline QR cod...

Rails generators that write standalone code into your app: passwordless (clave) and password (registration) authentication, passkeys, Rack::Attack rules with a Security dashboard, Content Security Policy reports, Solid Errors, Mission Control Jobs, Solid Queue, and a full app setup.

WebAuthn ruby server library ― Make your application a W3C Web Authentication conformant

Render model-generated, streaming, interactive OpenUI Lang UI inside an existing Rails application without migrating the whole frontend to a React/Next.js SPA. Reuses the official, version-pinned OpenUI JavaScript runtime, keeps Rails authoritative for authentication, authorization and persistenc...

Drop-in JWT signup/login for Rails API apps. Configurable user model, token expiry, password validation, and a ready-made controller concern. See https://github.com/Adarsh-07-Mishra/api_authentication_gem for full docs.

kiosk-user-idp-devise is the opt-in user-IdP adapter for Rails providers that authenticate principals through Devise. Add it to your Gemfile explicitly — the kiosk-all meta-gem pulls in only kiosk-core and kiosk-server, so IdP adapters are chosen per provider. It reads the signed-in user from th...

Provides mandatory login-gated checkout, passwordless customer authentication over WhatsApp, SMS or email with an automatic email backup, and store-scoped admin configuration. Codes are delivered through spree_notification_providers, so any provider and priority order works.

A complete implementation of Steve Gibson's SQRL authentication protocol: EnScrypt, EnHash, the identity lock, S4 identity storage, the textual identity format, the client transaction state machine and a server-side protocol handler.

SQRL login for Rails: engine, generator, ActiveRecord stores and Rails 8 Authentication support