doorkeeper
https://github.com/doorkeeper-gem/doorkeeper
Ruby
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
3 Subscribers
Add a CodeTriage badge to doorkeeper
Help out
- Issues
- Report the granted resources as `aud` when introspecting a refresh token
- Keep refresh tokens bound to every resource of the original grant (RFC 8707 §2.2)
- Refreshing with a narrowed `resource` also narrows the refresh token (RFC 8707)
- Support for Pushed Authorization Requests?
- Persist per-client token endpoint authentication methods on `oauth_applications`
- Add refresh token chain tracking to support grant-level revocation (RFC 7009 §2.1)
- Track refresh token families to revoke a whole refresh chain at once
- Client ID Metadata Documents (CIMDs)
- add dpop (rfc 9449) support
- Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks
- Docs
- Doorkeeper::HttpFetcher::BoundedExchange#on_connect
- Doorkeeper::HttpFetcher::BoundedExchange#byte_budget=
- Doorkeeper::HttpFetcher::BoundedExchange#byte_budget
- Doorkeeper::HttpFetcher::BoundedBufferedIO#unread_bytes
- Doorkeeper::HttpFetcher::BoundedBufferedIO#rbuf_fill
- Doorkeeper::HttpFetcher::BoundedBufferedIO#host=
- Doorkeeper::HttpFetcher::BoundedBufferedIO#host
- Doorkeeper::HttpFetcher::BoundedBufferedIO#byte_budget=
- Doorkeeper::HttpFetcher::BoundedBufferedIO#byte_budget
- Doorkeeper::Rails::Routes#allow_oob_redirect_uris?