authelia

Secrets & Credentials

Authelia is an open‑source authentication and authorization server for securing applications with two‑factor login, single sign‑on, and access policies.

Track releases GitHub Website

Go Latest v4.39.20 · 2mo ago Security brief →

Features

Two‑Factor Authentication (2FA) support via TOTP, OTP, U2F, WebAuthn
Centralized Single Sign‑On (SSO) for multiple services
Fine‑grained access control with policy rules and LDAP/AD integration

Recent releases

View all 5 releases →

Upgrade now

v4.39.20 Security relevant 2mo

Auth RBAC

Security fixes + contributors + Docker update

Open

v4.39.19 Bug fix 3mo

Minor fixes and improvements.

View release on GitHub

v4.39.18 Bug fix 3mo

Bug fix removing incorrect response code check for successful Duo API calls.

View release on GitHub

v4.39.17 Bug fix 3mo

Fixed authentication cache miss in edge cases, resolved LDAP v3 version checks, improved authorization consistency, fixed handler panics, tightened domain matching, optimized NTP latency calculations, and made OIDC rate limits configurable.

View release on GitHub

v4.39.16 Bug fix patches GO-2026-4818 4mo

Bug fixes for authentication discovery checks, LDAP filter escaping, configuration defaults, OIDC JWT claims, middleware path matching, language cookie sanitization, and 2FA enrollment UI state.

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.