Life & fun · alternatives · 2026

24 alternatives to Persona authenticated, wwwhisper authorized web server on OpenShift.

Any comments are very welcome! The readme file includes links to a demo site that anyone can access (sign-in with @mockmyid.com email if you don't want to create a real Persona account). Do you have any use cases for which an authorization layer like this would be handy? What additional features would you need?

This project deploys wwwhisper, an authorization layer for web servers, on OpenShift using Persona authentication. It sits between users and web applications to control access based on identity. The solution is… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Persona authenticated, wwwhisper authorized web server on OpenShift. launched in 2012; newer entries below may have overtaken it.

1
Persona.js▲295
Add WebMCP-native AI chat to any Frontend
Jun 2026 · persona-chat.dev · its alternatives →
2
Persona▲514
Identity verification for any use case, starting at $0
2021 · withpersona.com · its alternatives →
3
Obligator – An OpenID Connect server for self-hosters▲273
Simple and opinionated OpenID Connect server designed for self-hosters - lastlogin-net/obligator
2023 · github.com · its alternatives →
4
A virtual Yubikey device for 2FA/WebAuthN▲166
A Virtual FIDO2 USB Device. Contribute to bulwarkid/virtual-fido development by creating an account on GitHub.
2022 · github.com · its alternatives →
5
Authorizer▲296
Open source authentication and authorization solution
2021 · authorizer.dev · its alternatives →
6
An old school forum on an open protocol – your identity is a keypair▲17
This is a community forum for people who use, build, and run things on Nostr. Whether you are taking your first steps with keys and zaps, ship relays and clien…
23d ago · nostr-proto.org · its alternatives →
7
Stack, an open-source Clerk/Firebase Auth alternative▲144
Hey HN! Happy to finally launch Stack. We made it because we like to put apps into production quickly, and authentication & user management was taking up way too much time. We have components like and that automatically adapt to whatever theme & design system you're using. Check the blog post to see the example with Radix UI and Joy UI. Also, there's an admin dashboard for monitoring and editing accounts. Stack is 100% AGPL/MIT-licensed, so you can self-host it. Cheers!
2024 · stack-auth.com · its alternatives →
8OS
Open Source Authentication and Authorization▲128
I’m Rishabh and the co-founder and CTO at https://supertokens.com (YC S20). We offer open-source user authentication and we just released our user roles product for companies implementing authorization. Our users are web developers, and a prominent and adjacent pain point for our users is authorization. Developers typically implement two independent solutions for authentication and authorization. Offering AuthN and AuthZ in a single solution is something we’ve been thinking about for the last few years. Quick primer, authentication is knowing who the user is, and authorization is…
2022 · its alternatives →
9
Persona.js – a vanilla-JS agent UI library with native WebMCP (MIT)▲27
Hey everyone. My cofounder and I are open sourcing Persona.js (https://www.persona-chat.dev/). It's a VanillaJS library that helps anyone build agentic experiences on the web, without a framework dependency, and full WebMCP support So, why'd we do this? 1) We're super fans of the web and the browser can do a ton today 2) We've seen AI builds be way overly complex because the FE requires a large project within an existing app OR the site wasn't using a framework to begin with If you've been a part of huge apps with multiple frameworks inside them, or work inside CMS /…
Jun 2026 · github.com · its alternatives →
10
Permify – Open-source authorization service based on Google Zanzibar▲122
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉 - Permify/permify
2022 · github.com · its alternatives →
11
Example implementation of Mozilla's persona and Go server▲38
A package to use Mozilla's Persona identification system in Go. - sauerbraten/persona
2013 · github.com · its alternatives →
12
OpenBotAuth – Open-Source Web Bot Auth with Social Registry▲6
We're building an open source implementation for Web Bot Auth, which is an IETF draft for signed agent authentication over HTTP, without CDN lock-in. We've built a social registry, using Github login, where you can host your Signature Agent card/JWKS over a dedicated link. This saves you buying a domain and self-hosting your card. Please try it out : https://openbotauth.org/login We've also built a Wordpress plugin, which works in signed and unsigned mode. Unsigned mode gives you a preview and Signed mode gives you all access. Websites can point their origin server to our…
Nov 2025 · github.com · its alternatives →
13
Run your own OAuth2 and OpenID Connect Provider▲88
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. -
2016 · github.com · its alternatives →
14
Minimal NIST/OWASP-compliant auth implementation for Cloudflare Workers▲33
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com · its alternatives →
15
An Admin-Friendly, User Management Server (With Passkeys and JWTs)▲17
An admin-friendly, User Management Server (with Passkeys & JWTs) - for seamless and secure integration of user authentication - authcompanion/authcompanion2
2023 · github.com · its alternatives →
16
I built an open source computer-use SDK enabling agents to authenticate▲19
over this weekend myself and two of my friends took part in a hackathon and built this side-project. we have been diving into computer-use recently and developed an sdk to make it easy to implement for devs like us. one feature we were missing though, was the agent being able to log into services. anthropic understandably blocks this capability with their guardrails, and you wouldn't want your credentials to end up in any model context anyways. so we added a keychain service to the vm that the agent is using. it was built using the pass cli (https://www.passwordstore.org/).…
2025 · github.com · its alternatives →
17AO
AuthWeb – open-source TOTP and Password Generator▲6
AuthWeb is a minimalist web-based tool for generating secure TOTP tokens and passwords. Built with privacy and security in mind, all computations are performed client-side with no data storage. Key features: - Generate TOTP tokens with QR code support - Configurable password generator (single/batch mode) - Zero data collection or storage - Clean, responsive UI built with Tailwind CSS - Self-hostable and open source under MIT license The project aims to provide a reliable alternative to proprietary authenticator apps while maintaining simplicity and user privacy. QR codes are generated…
2024 · auth.web.id · its alternatives →
18EA
Effortless Authentication for Your Web Application▲6
Hey folks, Michael here. I have been working in this project on and of for about a year and a half and I finally got it into a state where I can share it. I initially started this project to learn Rust and afterwards decided to make it useful for others. Vulpo Auth is an authentication server that you can host yourself. The goal was to make it as easy as possible for you to get started and have a complete authentication solution without you having to configure anything. Project Website: https://auth.vulpo.dev The Project contains: - Auth Server (Rust) - Admin Dashboard - JS and…
2022 · its alternatives →
19
Permify Now Supports Attribute-Based Access Control▲19
Hey Everyone, Almost year ago we launched Permify an open-source authorization service to build fine-grained and scalable user permissions and access control systems over here(https://news.ycombinator.com/item?id=32096610) My co-founders and I had a enterprise solution agency where we worked with a bunch of fortune 500 companies. Each projects we made we have to re-invent the wheel for access control and authorization. Not having a easy to integrate, scalable and a granular system that can fulfill the requirements of these enterprise companies was a pain in the ass for us. As…
2023 · permify.co · its alternatives →
20
wsgrok▲7
I built it for myself because ngrok didn't let me add one more domain unless I paid $12 more. I probably should've looked for alternatives before building my own, but my grudge got in the way . Once I started, I wanted to make it better than the other options. Silly, I know. No one probably cares. I plan to open source it sometime next year because I’ve got other projects to finish first. It's free until I deplete my cloud credits, then it will switch to a tier-based model with a free option.
Jan 2026 · wsgrok.com · its alternatives →
21
MCP Server with HTTP support instead of stdio/sse▲11
Admittedly I work on this, but I anthropic's decision to finally embrace http, auth (at least a little), and other RFCs that are coming out is just great. With OpenAI behind it too, this ecosystem will be built around projects like this. Not saying it's MCP or not, but it'll be one of them
2025 · twitter.com · its alternatives →
22
Prism – Let browser agents access any app▲21
Hey HN, We’re Alex, Land, and Rajit. We’re building Prism (prismai.sh), a tool that helps browser agents authenticate onto websites with user credentials. Developers pass in credentials, Prism logs into a website on their behalf, and hands them back the cookies so they have an authenticated session. Here’s an example of how developers can use Prism to complete username/password flows (https://youtu.be/SEtVUnWnxuE), and here’s an example of how developers can use Prism to complete login flows that require an OTP code (https://youtu.be/fe9w9PvrwH0). We spoke…
2025 · prismai.sh · its alternatives →
23
Authorizer▲21
Open-source auth for enterprise applications, and AI agents
Sep 2026 · authorizer.dev · its alternatives →
24
An open source OAuth/auth system▲9
Can be deployed to Cloudflare or fully selfhosting. A simple demo site available with only Password Sign-in/Sign-up, OTP MFA, Passkey enrollment features enabled, no real email needed: https://auth-demo.valuemelody.com/
2025 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →