Owner

doorkeeper-gem

4 indexed repositories · View on GitHub

doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

Ruby · 5522 stars
doorkeeper-jwt
JWT Token support for Doorkeeper

Ruby · 236 stars
doorkeeper-openid_connect
OpenID Connect extension for Doorkeeper

Ruby · 217 stars
doorkeeper-provider-app
An example OAuth 2 provider application using the Doorkeeper gem, Rails and Devise

Ruby · 193 stars

Beginner friendly Everything

Open All

Support for Pushed Authorization Requests? Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

doorkeeper-gem/doorkeeper#1949 · Opened Sep 21, 2026
Persist per-client token endpoint authentication methods on `oauth_applications` Open

feature request security

doorkeeper-gem/doorkeeper#1948 · 3 comments · 1 assignee · Opened Sep 20, 2026
Add refresh token chain tracking to support grant-level revocation (RFC 7009 §2.1) Open

doorkeeper-gem/doorkeeper#1945 · 1 assignee · Opened Sep 19, 2026
Improving publishing security? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

doorkeeper-gem/doorkeeper#1911 · 5 comments · 2 reactions · Opened Aug 13, 2026
Client ID Metadata Documents (CIMDs) Open

feature request

doorkeeper-gem/doorkeeper#1875 · 6 comments · 8 reactions · 1 assignee · Opened Jul 23, 2026
Support OAuth RFC - JWT for Client Authentication and Authorization Grants Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

doorkeeper-gem/doorkeeper#1768 · 11 comments · Opened Apr 9, 2025
There is no way to refresh an access token without revoking the previous access token Open

doorkeeper-gem/doorkeeper#1730 · 4 comments · 3 reactions · 1 assignee · Opened Sep 10, 2024
Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

doorkeeper-gem/doorkeeper#1719 · 3 comments · 2 reactions · Opened Jul 25, 2024
Always requiring `redirect_uri` is not compliant to RFC 6749 Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

doorkeeper-gem/doorkeeper#1678 · 6 comments · Opened Nov 22, 2023
Better support for credential rotation Open

feature request

doorkeeper-gem/doorkeeper#1675 · 2 comments · 4 reactions · 1 assignee · Opened Oct 25, 2023
Support OAuth DPoP Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 20/100

doorkeeper-gem/doorkeeper#1655 · 1 comment · 2 reactions · Opened Apr 25, 2023
Support for sessions and session_state Open

doorkeeper-gem/doorkeeper-openid_connect#191 · 3 comments · 1 assignee · Opened Feb 17, 2023
Demo app in heroku is broken Open

doorkeeper-gem/doorkeeper-provider-app#384 · 2 comments · 1 assignee · Opened Nov 28, 2022
Is there a way to store Doorkeeper::AccessToken data inside Doorkeeper::JWT (and not use db-backed tokens)? Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 35/100

doorkeeper-gem/doorkeeper#1600 · 8 comments · Opened Nov 8, 2022
World writable executable files (console, setup) Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

doorkeeper-gem/doorkeeper-jwt#51 · 2 comments · Opened Jun 12, 2022
The nonce is not returned Open

doorkeeper-gem/doorkeeper-openid_connect#154 · 2 comments · 2 reactions · 3 assignees · Opened Jun 15, 2021
Implement #valid_doorkeeper_token? to support #doorkeeper_authorize! Open

doorkeeper-gem/doorkeeper-jwt#37 · 3 comments · 1 reaction · 2 assignees · Opened Jan 3, 2020

doorkeeper-gem

Get new issues in your inbox