HN Showcase
Back to browse
Limen – modern, composable auth for Go

Limen – modern, composable auth for Go

by brianiyoha·Apr 25, 2026·7 points·1 comment
Visit ProjectView on HN

AI Analysis

●●SolidSolve My ProblemShip It

Brings better-auth's plugin DX to Go without framework lock-in.

Strengths
  • •Plugin architecture allows composing only needed auth methods like OAuth or 2FA.
  • •Exposes standard http.Handler for compatibility with Gin, Echo, or net/http.
  • •Secure defaults handle cookies, CSRF, and session rotation automatically.
Weaknesses
  • •v0.1 maturity raises concerns for production auth infrastructure stability.
  • •Crowded category with established players like Ory, Casbin, and Goth.
Target Audience

Go developers building web applications

Similar To

better-auth · Goth · Ory Kratos

Post Description

I built and released Limen v0.1.0:

https://github.com/thecodearcher/limen

Writeup/docs: https://limenauth.dev/blog/introducing-limen

It’s inspired by better-auth’s plugin-first DX, but designed for idiomatic Go. The core handles sessions/cookies/security primitives, and auth methods are composed as plugins (credential auth, OAuth providers, and 2FA today).

It exposes an http.Handler, so it works with plain net/http and frameworks like Gin/Echo/Chi/Fiber without framework lock-in.

This is the first public release. I’d really appreciate feedback.

Similar Projects

Security●●●Banger

Vestauth – Auth for Agents

Agent auth via key-signing beats API keys and OAuth for autonomous systems.

Big BrainSolve My ProblemZero to One
scottmotte
1113mo ago
Security●●Solid

Seamless Auth – open-source passwordless authentication

Implements real WebAuthn/passkey support plus OTP and HTTP-only cookie session validation, and exposes JWKS and token endpoints — plus an npx create-seamless scaffold and Docker Compose so you can stand up the stack in minutes. The repo deliberately focuses on the auth engine (no admin UI or hosted control plane), which makes it easy to audit and integrate; still, the space is crowded with Ory/Keycloak/Supabase, so this is best if you specifically want a lean, self-hostable passwordless core.

Niche GemShip It
bccorb1000
303mo ago