doorkeeper
https://github.com/doorkeeper-gem/doorkeeper
Ruby
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
3 Subscribers
Add a CodeTriage badge to doorkeeper
Help out
- Issues
- Doorkeeper.config.calculate_grant_flows does not list refresh_token if refresh tokens are enabled
- Refresh token not issued when multiple scopes are requested
- There is no way to refresh an access token without revoking the previous access token
- Issues getting tests running
- Support for RFC 9207 - OAuth 2.0 Authorization Server Issuer Identification
- Doorkeeper's redirect_uri validation is not implemented according to specification
- Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks
- Access tokens should be revoked when multiple attempts are made to exchange the same authorization code
- Doorkeeper appears to be missing a way to validate client configuration before redirecting to the authentication page
- Do not instantiate ActiveRecord model early
- Docs
- Doorkeeper::Errors::InvalidCodeChallengeMethod.translate_options
- Doorkeeper::Errors::DoorkeeperError.translate_options
- Doorkeeper::OAuth::Error#translate_options
- Doorkeeper::OAuth::Error#translate_options=
- Doorkeeper::Config::Builder#enable_dynamic_scopes
- Doorkeeper::Config#dynamic_scopes_delimiter
- Doorkeeper::Config#enable_dynamic_scopes?
- Doorkeeper::OAuth::Scopes#dynamic_scope_match?
- Doorkeeper::OAuth::Scopes#dynamic_scopes_present?
- Doorkeeper::OAuth::Scopes#dynamic_scope_delimiter