Skip to content

Issues: doorkeeper-gem/doorkeeper

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

39 Open 845 Closed
39 Open 845 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

The error message for invalid pkce method is not affected by pkce_code_challenge_methods configuration
#1746 opened Oct 31, 2024 by ransombriggs
Refresh tokens that are paired with expired access tokens cannot be revoked
#1743 opened Oct 30, 2024 by ransombriggs
Dependabot ruby experience
#1740 opened Oct 13, 2024 by Myahr208
1
Doorkeeper.config.calculate_grant_flows does not list refresh_token if refresh tokens are enabled
#1734 opened Oct 2, 2024 by ThisIsMissEm
3
Refresh token not issued when multiple scopes are requested
#1731 opened Sep 20, 2024 by dstuckey-uoe
There is no way to refresh an access token without revoking the previous access token
#1730 opened Sep 10, 2024 by ransombriggs
Issues getting tests running
#1721 opened Jul 27, 2024 by ThisIsMissEm
4
Support for RFC 9207 - OAuth 2.0 Authorization Server Issuer Identification
#1720 opened Jul 26, 2024 by ThisIsMissEm
Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks
#1719 opened Jul 25, 2024 by ThisIsMissEm
2
Doorkeeper's redirect_uri validation is not implemented according to specification RFC
#1718 opened Jul 25, 2024 by ThisIsMissEm
Access tokens should be revoked when multiple attempts are made to exchange the same authorization code
#1713 opened Jul 10, 2024 by ransombriggs
Doorkeeper appears to be missing a way to validate client configuration before redirecting to the authentication page
#1711 opened Jun 25, 2024 by ransombriggs
1
Doorkeeper is loading ActiveRecord too early
#1703 opened Apr 1, 2024 by ngan
1
1
Different access grants return the same access token with reuse_access_token enabled
#1693 opened Feb 20, 2024 by pyromaniac
Cleanup job removes not expired tokens
#1688 opened Jan 25, 2024 by jensljungblad
1
1
Refreshing a token sending scopes separated by + does not work
#1686 opened Jan 24, 2024 by danilokleber
5
Doorkeeper::Errors::InvalidRedirectUri Raised When No Redirect URI Set
#1682 opened Dec 4, 2023 by brent-cybrid
1
4
Always requiring redirect_uri is not compliant to RFC 6749
#1678 opened Nov 22, 2023 by westnordost
3
Better support for credential rotation
#1675 opened Oct 25, 2023 by sgallag-insta
Enhancement: expose current_resource_owner to views
#1674 opened Oct 24, 2023 by vlad-pisanov
It is not possible to revoke refresh token bound to the expired access token
#1671 opened Sep 18, 2023 by syakovyn
3
App is not generating the Oauth2 token using doorkeeper gem
#1664 opened Jul 19, 2023 by bhardwajrahul919
2
reuse_access_token config should be used when refreshing a token
#1663 opened Jul 10, 2023 by PhilippeChab
4
Support OAuth DPoP feature request
#1655 opened Apr 25, 2023 by hickford
1
Option to enforce that clients use PKCE enhancement
#1654 opened Apr 15, 2023 by hickford
12
ProTip! Updated in the last three days: updated:>2024-11-18.