doorkeeper
https://github.com/doorkeeper-gem/doorkeeper
Ruby
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
3 Subscribers
Add a CodeTriage badge to doorkeeper
Help out
- Issues
- Revoke what a compromised secret could still be exchanged for
- Support for OAuth 2.0 Refresh Token and Authorization Expiration
- Issue stateless JWT tokens from the client credentials grant
- Allow issuer to be resolved per request, and iss (RFC 9207) to be enabled per application
- Report the granted resources as `aud` when introspecting a refresh token
- Keep refresh tokens bound to every resource of the original grant (RFC 8707 §2.2)
- Refreshing with a narrowed `resource` also narrows the refresh token (RFC 8707)
- Support for Pushed Authorization Requests?
- Persist per-client token endpoint authentication methods on `oauth_applications`
- Add refresh token chain tracking to support grant-level revocation (RFC 7009 §2.1)
- Docs
- Doorkeeper::OAuth::ClientIdMetadataDocument.credentials_allowed?
- Doorkeeper::OAuth::ClientIdMetadataDocument.refusal
- Doorkeeper::OAuth::ClientIdMetadataDocument.warn_without_issuer
- Doorkeeper::OAuth::ClientIdMetadataDocument.storable?
- Doorkeeper::OAuth::ClientIdMetadataDocument.keyless_private_key_jwt?
- Doorkeeper::OAuth::ClientIdMetadataDocument.code_flow_declared?
- Doorkeeper::HttpFetcher::BoundedExchange#on_connect
- Doorkeeper::HttpFetcher::BoundedExchange#byte_budget=
- Doorkeeper::HttpFetcher::BoundedExchange#byte_budget
- Doorkeeper::HttpFetcher::BoundedBufferedIO#unread_bytes