Repolode
제출하기
ArkGravity

ArkGravity/burrow

A lightweight, self-hosted OpenID Connect identity provider for small teams, with password login, mandatory TOTP and RBAC.

대체할 수 있는 제품:OktaAuth0

GitHub에서 보기
스타
68
포크
4
열린 이슈
0
마지막 커밋
8일 전

어떤 프로젝트인가요?

Burrow is a self-hosted OpenID Connect identity provider aimed at small teams and internal services. It centralizes user accounts, shared single sign-on and application access in one single-organization, single-instance service. The Go backend and React UI ship as one binary, or can run alongside PostgreSQL through Docker Compose.

Applications connect through the OIDC Authorization Code flow with PKCE S256 required by default. Administrators manage users, groups, custom roles and permissions, and each application appears in a portal showing only the services a user is authorized to open. Password login is supported, with optional TOTP MFA that applies to all accounts when enabled. The UI is available in English and Simplified Chinese.

Burrow does not provide upstream identity federation, refresh tokens or cross-application logout. Applications manage their own sessions and business permissions.

핵심 기능

  • 01Shared SSO for Web and SPA applications via OIDC Authorization Code with PKCE S256.
  • 02Password login with optional TOTP MFA applied to all accounts.
  • 03Users, groups, custom roles and permissions with audited changes.
  • 04Application portal that shows only the services a user may access.
  • 05Single binary with embedded UI; PostgreSQL in production, SQLite for development.
  • 06English and Simplified Chinese interface with light, dark and system themes.

활용 사례

  • Giving a small team one login for Grafana, Harbor and other self-hosted internal tools.
  • Adding OIDC-based SSO to self-hosted services without running Redis or a message queue.
  • Enforcing TOTP two-factor login for all accounts on an internal network.

토픽

#oidc#sso#authentication#identity-provider#totp#rbac#self-hosted#golang#mfa#mit-license

자주 묻는 질문

burrow은(는) 무엇인가요?
A lightweight, self-hosted OpenID Connect identity provider for small teams, with password login, mandatory TOTP and RBAC. Burrow is a self-hosted OpenID Connect identity provider aimed at small teams and internal services. It centralizes user accounts, shared single sign-on and application access in one single-organization, single-instance service. The Go backend and React UI ship as one binary, or can run alongside PostgreSQL through Docker Compose.
burrow은(는) 무료로 사용할 수 있나요? 라이선스는 무엇인가요?
burrow은(는) MIT 라이선스의 오픈소스입니다. 상업용 제품에 사용하기 전에 라이선스 조건을 확인하세요.
burrow은(는) 아직 유지보수되고 있나요?
활발히 유지보수 중. burrow의 마지막 커밋은 2026년 10월 11일입니다.
burrow은(는) 어디에 사용할 수 있나요?
Giving a small team one login for Grafana, Harbor and other self-hosted internal tools. Adding OIDC-based SSO to self-hosted services without running Redis or a message queue. Enforcing TOTP two-factor login for all accounts on an internal network.
burrow은(는) 어디서 받을 수 있나요?
소스 코드와 설치 방법은 GitHub에 있습니다: https://github.com/ArkGravity/burrow

요약은 프로젝트 README를 바탕으로 AI가 작성했습니다. GitHub 통계는 매일 갱신됩니다.

관련 프로젝트