oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
💡 Why It Matters
Oathkeeper addresses the critical need for secure identity and access management in cloud-native applications. It provides a robust solution for engineering teams focused on implementing Zero Trust principles, enabling them to authenticate and authorise incoming HTTP(s) requests effectively. With a steady growth of 60 stars over 96 days, it demonstrates a stable community interest, indicating its maturity as a production-ready solution. However, it may not be the best choice for teams requiring a lightweight proxy or those who prefer simpler authentication mechanisms without the complexity of OAuth2 or OpenID Connect.
🎯 When to Use
Oathkeeper is a strong choice for engineering teams looking for a comprehensive identity and access proxy that integrates seamlessly into microservices architectures. Teams should consider alternatives if they need a simpler solution or are working with legacy systems that do not require advanced access control features.
👥 Team Fit & Use Cases
This open source tool for engineering teams is particularly beneficial for backend developers and DevOps engineers who are tasked with securing APIs and managing access control. It is commonly used in products and systems that require robust authentication and authorisation, such as cloud-native applications and microservices platforms.
🏷️ Topics & Ecosystem
📊 Activity
Latest commit: 2026-02-13. Over the past 96 days, this repository gained 60 stars (+1.7% growth). Activity data is based on daily RepoPi snapshots of the GitHub repository.