← Back to home
Comparison · Infra & APIs

Casdoor vs Harbor

A side-by-side editorial comparison of Casdoor and Harbor — release velocity, themes, recent moves, and the top alternatives to consider.

Casdoor vs Harbor: at a glance

FeatureCasdoorHarbor
SectorInfra & APIsInfra & APIs
Velocity score5.05.0
Sparks · 30d00
Top themesidentity, sso, frontend-rewrite, shadcn-uicontainer registry, rbac, proxy cache, multi-arch
Last editorial update1mo ago1h ago
WebsiteVisit →Visit →

What is Casdoor?

Casdoor is rebuilding its console on shadcn/ui, porting auth features into web2 release by release.

Casdoor tags multiple releases a day, each carrying a single commit, so the version stream reads as a commit log rather than a milestone list. The visible work splits in two: a frontend rewrite called web2 that is absorbing the old antd console into shadcn/ui and re-acquiring features as it goes, and a steady trickle of repairs on the live auth surface covering signup validation, theme handling, and translations. SAML IdP-initiated SSO in v3.161.0 is the only protocol-level addition anywhere in this window.

Read the full Casdoor trajectory →

What is Harbor?

Harbor 2.16 RC1 brings official arm64 builds, custom project roles and smarter proxy caching.

Harbor spent September and October on security patch candidates and rolling back defaults that broke webhooks and legacy signer pulls. The first 2.16.0 candidate is the first feature release in that window. It adds full amd64 and arm64 builds, custom project roles in the UI, proxy-cache repository filters and referrer API proxying, and member audit events.

Read the full Harbor trajectory →

Casdoor vs Harbor: editorial side-by-side

C
Casdoor
INFRA · APIS
5.0

Casdoor is rebuilding its console on shadcn/ui, porting auth features into web2 release by release.

◆ Current state

Casdoor tags multiple releases a day, each carrying a single commit, so the version stream reads as a commit log rather than a milestone list. The visible work splits in two: a frontend rewrite called web2 that is absorbing the old antd console into shadcn/ui and re-acquiring features as it goes, and a steady trickle of repairs on the live auth surface covering signup validation, theme handling, and translations. SAML IdP-initiated SSO in v3.161.0 is the only protocol-level addition anywhere in this window.

◆ Where it's heading

The web2 migration is the spine of this release train, and it is advancing by increments rather than by cutover: code moves across, then the features that code backed get rebuilt on the other side. Everything else in the window is maintenance on the shipping product, sized to single commits. Expect the migration to keep consuming minor versions until web2 reaches parity with the console it replaces.

◆ Prediction

The next releases most likely continue porting console screens into web2 and cleaning up the login theme path that v3.160.0 and v3.163.3 have both touched. The entries give no signal on when web2 becomes the default, so the cutover timing is unclear.

H
Harbor
INFRA · APIS
5.0

Harbor 2.16 RC1 brings official arm64 builds, custom project roles and smarter proxy caching.

◆ Current state

Harbor spent September and October on security patch candidates and rolling back defaults that broke webhooks and legacy signer pulls. The first 2.16.0 candidate is the first feature release in that window. It adds full amd64 and arm64 builds, custom project roles in the UI, proxy-cache repository filters and referrer API proxying, and member audit events.

◆ Where it's heading

The 2.16 line shifts Harbor from patching toward enterprise registry features: finer RBAC, deeper audit trails, and a proxy cache that handles OCI referrers such as signatures and SBOMs. Multi-arch builds make Harbor a straightforward fit for arm64 clusters. Security fixes keep landing alongside, so the 2.14 and 2.15 patch lines will likely continue.

◆ Prediction

Expect further 2.16.0 release candidates before GA, plus more 2.14.x and 2.15.x patch tags. Whether custom roles get a matching API-level story is not yet clear from these notes.

Alternatives to Casdoor and Harbor

Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Casdoor or Harbor.

See all Casdoor alternatives → · See all Harbor alternatives →

Recent activity from Casdoor and Harbor

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 14h agoHarbor2.16.0 RC1: arm64 builds, custom project roles, proxy-cache filters
  2. 5d agoHarbor2.14.6 RC2: Go CVE fixes and decompression limit
  3. 14d agoHarbor2.14.6 RC1: private-network webhooks and legacy signer pulls restored
  4. 19d agoHarbor2.15.4 RC1: rolls back webhook and signer-pull restrictions
  5. 1mo agoHarbor2.15.3 RC2: security fixes for proxy cache, uploads and exports
  6. 1mo agoHarbor2.15.3 RC1: security fix batch
  7. 1mo agoCasdoorSyncer add URL gains the missing organization segment
  8. 1mo agoCasdoorLogin theme no longer re-initializes from localStorage
  9. 1mo agoCasdoorDuplicate email or phone rejected before the signup code is sent
  10. 1mo agoCasdoorUkrainian translation corrections
  11. 2mo agoCasdoorMore code migrated to the web2 frontend
  12. 2mo agoCasdoorMFA setup and captcha land in the web2 frontend

Frequently asked questions

What is the difference between Casdoor and Harbor?

They serve adjacent needs but don't currently overlap on shipped themes. Casdoor and Harbor are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Casdoor better than Harbor?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Casdoor and Harbor are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.

What are the best alternatives to Casdoor?

Top Casdoor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Casdoor alternatives" section above for the current picks, or visit /alternatives/casdoor for the full list with editorial commentary on each.

What are the best alternatives to Harbor?

Top Harbor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Harbor alternatives" section above for the current picks, or visit /alternatives/harbor for the full list with editorial commentary on each.