doorkeeper
https://github.com/doorkeeper-gem/doorkeeper
Ruby
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
3 Subscribers
Add a CodeTriage badge to doorkeeper
Help out
- Issues
- Document Client ID Metadata Documents in the README
- Clear the CodeQL alerts on the client ID metadata document specs
- Enforce a wall-clock timeout and a byte budget on HttpFetcher
- Issue stateless JWT tokens from the client credentials grant
- Allow issuer to be resolved per request, and iss (RFC 9207) to be enabled per application
- Report the granted resources as `aud` when introspecting a refresh token
- Keep refresh tokens bound to every resource of the original grant (RFC 8707 §2.2)
- Accept client ID metadata documents that list none among supported methods
- Refreshing with a narrowed `resource` also narrows the refresh token (RFC 8707)
- Support for Pushed Authorization Requests?
- Docs
- Doorkeeper::AuthorizedApplicationsController#validate_resource_owner
- Doorkeeper::Config::Validations#validate_secret_fallback_strategies
- Doorkeeper::OAuth::Authorization::Token.cap_for_public_client
- Doorkeeper::HttpFetcher#remaining_until
- Doorkeeper::HttpFetcher#connection_for
- Doorkeeper::HttpFetcher#vetted_addresses_for
- Doorkeeper::AccessTokenMixin#refresh_token_scopes_string
- Doorkeeper::AccessTokenMixin#refresh_token_scopes=
- Doorkeeper::AccessTokenMixin#refresh_token_scopes
- Doorkeeper::AccessTokenMixin::ClassMethods#refresh_token_scopes_supported?