doorkeeper
https://github.com/doorkeeper-gem/doorkeeper
Ruby
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
3 Subscribers
Add a CodeTriage badge to doorkeeper
Help out
- Issues
- add dpop (rfc 9449) support
- Refresh Token Rotation + Expiry questions
- Refresh tokens cannot reduce scopes correctly
- Support OAuth RFC - JWT for Client Authentication and Authorization Grants
- Issue: Configuring Active Record to Use Different Base Classes for Sharded and Non-Sharded Models
- Introspecting a token should behave the same wrt "revoke on use"
- How to implement using multi-database like Makara
- There is no way to refresh an access token without revoking the previous access token
- Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks
- Doorkeeper appears to be missing a way to validate client configuration before redirecting to the authentication page
- Docs
- Doorkeeper::AccessGrantMixin::ClassMethods#access_token_revoked_on_reuse?
- Doorkeeper::OAuth::AuthorizationCodeRequest#revoke_token_issued_for_grant
- Doorkeeper::OAuth::AuthorizationCodeRequest#link_access_token_to_grant
- Doorkeeper::OAuth::AuthorizationCodeRequest#validate_grant_accessible
- Doorkeeper::GrantReuseRevocationGenerator#no_access_token_id_column?
- Doorkeeper::GrantReuseRevocationGenerator#migration_version
- Doorkeeper::GrantReuseRevocationGenerator#grant_reuse_revocation
- Doorkeeper::GrantReuseRevocationGenerator.next_migration_number
- Doorkeeper::OAuth::TokenIntrospection#refresh_token_presented?
- Doorkeeper::TokensController#presented_token_type