] scopes
#
# @return [Boolean] true if record is accessible and includes scopes or
# false in other cases
#
def acceptable?(scopes)
accessible? && includes_scope?(*scopes)
end
private
# Generates refresh token with UniqueToken generator.
#
# @return [String] refresh token value
#
def generate_refresh_token
self.refresh_token = UniqueToken.generate
end
# Generates and sets the token value with the
# configured Generator class (see Doorkeeper.configuration).
#
# @return [String] generated token value
#
# @raise [Doorkeeper::Errors::UnableToGenerateToken]
# custom class doesn't implement .generate method
# @raise [Doorkeeper::Errors::TokenGeneratorNotFound]
# custom class doesn't exist
#
def generate_token
self.created_at ||= Time.now.utc
self.token = token_generator.generate(
resource_owner_id: resource_owner_id,
scopes: scopes,
application: application,
expires_in: expires_in,
created_at: created_at
)
end
def token_generator
generator_name = Doorkeeper.configuration.access_token_generator
generator = generator_name.constantize
return generator if generator.respond_to?(:generate)
raise Errors::UnableToGenerateToken, "#{generator} does not respond to `.generate`."
rescue NameError
raise Errors::TokenGeneratorNotFound, "#{generator_name} not found"
end
end
end
doorkeeper-4.3.1/lib/doorkeeper/helpers/ 0000755 0000041 0000041 00000000000 13253470511 020256 5 ustar www-data www-data doorkeeper-4.3.1/lib/doorkeeper/helpers/controller.rb 0000644 0000041 0000041 00000003035 13253470511 022767 0 ustar www-data www-data # Define methods that can be called in any controller that inherits from
# Doorkeeper::ApplicationMetalController or Doorkeeper::ApplicationController
module Doorkeeper
module Helpers
module Controller
private
# :doc:
def authenticate_resource_owner!
current_resource_owner
end
# :doc:
def current_resource_owner
instance_eval(&Doorkeeper.configuration.authenticate_resource_owner)
end
def resource_owner_from_credentials
instance_eval(&Doorkeeper.configuration.resource_owner_from_credentials)
end
# :doc:
def authenticate_admin!
instance_eval(&Doorkeeper.configuration.authenticate_admin)
end
def server
@server ||= Server.new(self)
end
# :doc:
def doorkeeper_token
@token ||= OAuth::Token.authenticate request, *config_methods
end
def config_methods
@methods ||= Doorkeeper.configuration.access_token_methods
end
def get_error_response_from_exception(exception)
OAuth::ErrorResponse.new name: exception.type, state: params[:state]
end
def handle_token_exception(exception)
error = get_error_response_from_exception exception
headers.merge! error.headers
self.response_body = error.body.to_json
self.status = error.status
end
def skip_authorization?
!!instance_exec([@server.current_resource_owner, @pre_auth.client], &Doorkeeper.configuration.skip_authorization)
end
end
end
end
doorkeeper-4.3.1/lib/doorkeeper/server.rb 0000644 0000041 0000041 00000002065 13253470511 020452 0 ustar www-data www-data module Doorkeeper
class Server
attr_accessor :context
def initialize(context = nil)
@context = context
end
def authorization_request(strategy)
klass = Request.authorization_strategy strategy
klass.new self
end
def token_request(strategy)
klass = Request.token_strategy strategy
klass.new self
end
# TODO: context should be the request
def parameters
context.request.parameters
end
def client
@client ||= OAuth::Client.authenticate(credentials)
end
def client_via_uid
@client_via_uid ||= OAuth::Client.find(parameters[:client_id])
end
def current_resource_owner
context.send :current_resource_owner
end
# TODO: Use configuration and evaluate proper context on block
def resource_owner
context.send :resource_owner_from_credentials
end
def credentials
methods = Doorkeeper.configuration.client_credentials_methods
@credentials ||= OAuth::Client::Credentials.from_request(context.request, *methods)
end
end
end
doorkeeper-4.3.1/lib/doorkeeper.rb 0000644 0000041 0000041 00000005074 13253470511 017147 0 ustar www-data www-data require 'doorkeeper/version'
require 'doorkeeper/engine'
require 'doorkeeper/config'
require 'doorkeeper/errors'
require 'doorkeeper/server'
require 'doorkeeper/request'
require 'doorkeeper/validations'
require 'doorkeeper/oauth/authorization/code'
require 'doorkeeper/oauth/authorization/token'
require 'doorkeeper/oauth/authorization/uri_builder'
require 'doorkeeper/oauth/helpers/scope_checker'
require 'doorkeeper/oauth/helpers/uri_checker'
require 'doorkeeper/oauth/helpers/unique_token'
require 'doorkeeper/oauth/scopes'
require 'doorkeeper/oauth/error'
require 'doorkeeper/oauth/base_response'
require 'doorkeeper/oauth/code_response'
require 'doorkeeper/oauth/token_response'
require 'doorkeeper/oauth/error_response'
require 'doorkeeper/oauth/pre_authorization'
require 'doorkeeper/oauth/base_request'
require 'doorkeeper/oauth/authorization_code_request'
require 'doorkeeper/oauth/refresh_token_request'
require 'doorkeeper/oauth/password_access_token_request'
require 'doorkeeper/oauth/client_credentials_request'
require 'doorkeeper/oauth/code_request'
require 'doorkeeper/oauth/token_request'
require 'doorkeeper/oauth/client'
require 'doorkeeper/oauth/token'
require 'doorkeeper/oauth/token_introspection'
require 'doorkeeper/oauth/invalid_token_response'
require 'doorkeeper/oauth/forbidden_token_response'
require 'doorkeeper/models/concerns/orderable'
require 'doorkeeper/models/concerns/scopes'
require 'doorkeeper/models/concerns/expirable'
require 'doorkeeper/models/concerns/revocable'
require 'doorkeeper/models/concerns/accessible'
require 'doorkeeper/models/access_grant_mixin'
require 'doorkeeper/models/access_token_mixin'
require 'doorkeeper/models/application_mixin'
require 'doorkeeper/helpers/controller'
require 'doorkeeper/rails/routes'
require 'doorkeeper/rails/helpers'
require 'doorkeeper/orm/active_record'
require 'active_support/deprecation'
module Doorkeeper
def self.configured?
ActiveSupport::Deprecation.warn "Method `Doorkeeper#configured?` has been deprecated without replacement."
@config.present?
end
def self.database_installed?
ActiveSupport::Deprecation.warn "Method `Doorkeeper#database_installed?` has been deprecated without replacement."
[AccessToken, AccessGrant, Application].all?(&:table_exists?)
end
def self.installed?
ActiveSupport::Deprecation.warn "Method `Doorkeeper#installed?` has been deprecated without replacement."
configured? && database_installed?
end
def self.authenticate(request, methods = Doorkeeper.configuration.access_token_methods)
OAuth::Token.authenticate(request, *methods)
end
end
doorkeeper-4.3.1/lib/generators/ 0000755 0000041 0000041 00000000000 13253470511 016626 5 ustar www-data www-data doorkeeper-4.3.1/lib/generators/doorkeeper/ 0000755 0000041 0000041 00000000000 13253470511 020765 5 ustar www-data www-data doorkeeper-4.3.1/lib/generators/doorkeeper/templates/ 0000755 0000041 0000041 00000000000 13253470511 022763 5 ustar www-data www-data doorkeeper-4.3.1/lib/generators/doorkeeper/templates/add_owner_to_application_migration.rb.erb 0000644 0000041 0000041 00000000452 13253470511 033160 0 ustar www-data www-data class AddOwnerToApplication < ActiveRecord::Migration<%= migration_version %>
def change
add_column :oauth_applications, :owner_id, :integer, null: true
add_column :oauth_applications, :owner_type, :string, null: true
add_index :oauth_applications, [:owner_id, :owner_type]
end
end
doorkeeper-4.3.1/lib/generators/doorkeeper/templates/README 0000644 0000041 0000041 00000000763 13253470511 023651 0 ustar www-data www-data ===============================================================================
There is a setup that you need to do before you can use doorkeeper.
Step 1.
Go to config/initializers/doorkeeper.rb and configure
resource_owner_authenticator block.
Step 2.
Choose the ORM:
If you want to use ActiveRecord run:
rails generate doorkeeper:migration
And run
rake db:migrate
Step 3.
That's it, that's all. Enjoy!
===============================================================================
././@LongLink 0000000 0000000 0000000 00000000150 00000000000 011561 L ustar root root doorkeeper-4.3.1/lib/generators/doorkeeper/templates/add_previous_refresh_token_to_access_tokens.rb.erb doorkeeper-4.3.1/lib/generators/doorkeeper/templates/add_previous_refresh_token_to_access_tokens.rb.0000644 0000041 0000041 00000000372 13253470511 034400 0 ustar www-data www-data class AddPreviousRefreshTokenToAccessTokens < ActiveRecord::Migration<%= migration_version %>
def change
add_column(
:oauth_access_tokens,
:previous_refresh_token,
:string,
default: "",
null: false
)
end
end
doorkeeper-4.3.1/lib/generators/doorkeeper/templates/migration.rb.erb 0000644 0000041 0000041 00000004661 13253470511 026057 0 ustar www-data www-data class CreateDoorkeeperTables < ActiveRecord::Migration<%= migration_version %>
def change
create_table :oauth_applications do |t|
t.string :name, null: false
t.string :uid, null: false
t.string :secret, null: false
t.text :redirect_uri, null: false
t.string :scopes, null: false, default: ''
t.timestamps null: false
end
add_index :oauth_applications, :uid, unique: true
create_table :oauth_access_grants do |t|
t.integer :resource_owner_id, null: false
t.references :application, null: false
t.string :token, null: false
t.integer :expires_in, null: false
t.text :redirect_uri, null: false
t.datetime :created_at, null: false
t.datetime :revoked_at
t.string :scopes
end
add_index :oauth_access_grants, :token, unique: true
add_foreign_key(
:oauth_access_grants,
:oauth_applications,
column: :application_id
)
create_table :oauth_access_tokens do |t|
t.integer :resource_owner_id
t.references :application
# If you use a custom token generator you may need to change this column
# from string to text, so that it accepts tokens larger than 255
# characters. More info on custom token generators in:
# https://github.com/doorkeeper-gem/doorkeeper/tree/v3.0.0.rc1#custom-access-token-generator
#
# t.text :token, null: false
t.string :token, null: false
t.string :refresh_token
t.integer :expires_in
t.datetime :revoked_at
t.datetime :created_at, null: false
t.string :scopes
# If there is a previous_refresh_token column,
# refresh tokens will be revoked after a related access token is used.
# If there is no previous_refresh_token column,
# previous tokens are revoked as soon as a new access token is created.
# Comment out this line if you'd rather have refresh tokens
# instantly revoked.
t.string :previous_refresh_token, null: false, default: ""
end
add_index :oauth_access_tokens, :token, unique: true
add_index :oauth_access_tokens, :resource_owner_id
add_index :oauth_access_tokens, :refresh_token, unique: true
add_foreign_key(
:oauth_access_tokens,
:oauth_applications,
column: :application_id
)
end
end
doorkeeper-4.3.1/lib/generators/doorkeeper/templates/initializer.rb 0000644 0000041 0000041 00000014225 13253470511 025637 0 ustar www-data www-data Doorkeeper.configure do
# Change the ORM that doorkeeper will use (needs plugins)
orm :active_record
# This block will be called to check whether the resource owner is authenticated or not.
resource_owner_authenticator do
fail "Please configure doorkeeper resource_owner_authenticator block located in #{__FILE__}"
# Put your resource owner authentication logic here.
# Example implementation:
# User.find_by_id(session[:user_id]) || redirect_to(new_user_session_url)
end
# If you want to restrict access to the web interface for adding oauth authorized applications, you need to declare the block below.
# admin_authenticator do
# # Put your admin authentication logic here.
# # Example implementation:
# Admin.find_by_id(session[:admin_id]) || redirect_to(new_admin_session_url)
# end
# Authorization Code expiration time (default 10 minutes).
# authorization_code_expires_in 10.minutes
# Access token expiration time (default 2 hours).
# If you want to disable expiration, set this to nil.
# access_token_expires_in 2.hours
# Assign a custom TTL for implicit grants.
# custom_access_token_expires_in do |oauth_client|
# oauth_client.application.additional_settings.implicit_oauth_expiration
# end
# Use a custom class for generating the access token.
# https://github.com/doorkeeper-gem/doorkeeper#custom-access-token-generator
# access_token_generator '::Doorkeeper::JWT'
# The controller Doorkeeper::ApplicationController inherits from.
# Defaults to ActionController::Base.
# https://github.com/doorkeeper-gem/doorkeeper#custom-base-controller
# base_controller 'ApplicationController'
# Reuse access token for the same resource owner within an application (disabled by default)
# Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/383
# reuse_access_token
# Issue access tokens with refresh token (disabled by default)
# use_refresh_token
# Provide support for an owner to be assigned to each registered application (disabled by default)
# Optional parameter confirmation: true (default false) if you want to enforce ownership of
# a registered application
# Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support
# enable_application_owner confirmation: false
# Define access token scopes for your provider
# For more information go to
# https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
# default_scopes :public
# optional_scopes :write, :update
# Change the way client credentials are retrieved from the request object.
# By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
# falls back to the `:client_id` and `:client_secret` params from the `params` object.
# Check out https://github.com/doorkeeper-gem/doorkeeper/wiki/Changing-how-clients-are-authenticated
# for more information on customization
# client_credentials :from_basic, :from_params
# Change the way access token is authenticated from the request object.
# By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
# falls back to the `:access_token` or `:bearer_token` params from the `params` object.
# Check out https://github.com/doorkeeper-gem/doorkeeper/wiki/Changing-how-clients-are-authenticated
# for more information on customization
# access_token_methods :from_bearer_authorization, :from_access_token_param, :from_bearer_param
# Change the native redirect uri for client apps
# When clients register with the following redirect uri, they won't be redirected to any server and the authorization code will be displayed within the provider
# The value can be any string. Use nil to disable this feature. When disabled, clients must provide a valid URL
# (Similar behaviour: https://developers.google.com/accounts/docs/OAuth2InstalledApp#choosingredirecturi)
#
# native_redirect_uri 'urn:ietf:wg:oauth:2.0:oob'
# Forces the usage of the HTTPS protocol in non-native redirect uris (enabled
# by default in non-development environments). OAuth2 delegates security in
# communication to the HTTPS protocol so it is wise to keep this enabled.
#
# Callable objects such as proc, lambda, block or any object that responds to
# #call can be used in order to allow conditional checks (to allow non-SSL
# redirects to localhost for example).
#
# force_ssl_in_redirect_uri !Rails.env.development?
#
# force_ssl_in_redirect_uri { |uri| uri.host != 'localhost' }
# Specify what redirect URI's you want to block during creation. Any redirect
# URI is whitelisted by default.
#
# You can use this option in order to forbid URI's with 'javascript' scheme
# for example.
#
# forbid_redirect_uri { |uri| uri.scheme.to_s.downcase == 'javascript' }
# Specify what grant flows are enabled in array of Strings. The valid
# strings and the flows they enable are:
#
# "authorization_code" => Authorization Code Grant Flow
# "implicit" => Implicit Grant Flow
# "password" => Resource Owner Password Credentials Grant Flow
# "client_credentials" => Client Credentials Grant Flow
#
# If not specified, Doorkeeper enables authorization_code and
# client_credentials.
#
# implicit and password grant flows have risks that you should understand
# before enabling:
# http://tools.ietf.org/html/rfc6819#section-4.4.2
# http://tools.ietf.org/html/rfc6819#section-4.4.3
#
# grant_flows %w[authorization_code client_credentials]
# Hook into the strategies' request & response life-cycle in case your
# application needs advanced customization or logging:
#
# before_successful_strategy_response do |request|
# puts "BEFORE HOOK FIRED! #{request}"
# end
#
# after_successful_strategy_response do |request, response|
# puts "AFTER HOOK FIRED! #{request}, #{response}"
# end
# Under some circumstances you might want to have applications auto-approved,
# so that the user skips the authorization step.
# For example if dealing with a trusted application.
# skip_authorization do |resource_owner, client|
# client.superapp? or resource_owner.admin?
# end
# WWW-Authenticate Realm (default "Doorkeeper").
# realm "Doorkeeper"
end
doorkeeper-4.3.1/lib/generators/doorkeeper/migration_generator.rb 0000644 0000041 0000041 00000001274 13253470511 025355 0 ustar www-data www-data require 'rails/generators/active_record'
class Doorkeeper::MigrationGenerator < ::Rails::Generators::Base
include Rails::Generators::Migration
source_root File.expand_path('../templates', __FILE__)
desc 'Installs Doorkeeper migration file.'
def install
migration_template(
'migration.rb.erb',
'db/migrate/create_doorkeeper_tables.rb',
migration_version: migration_version
)
end
def self.next_migration_number(dirname)
ActiveRecord::Generators::Base.next_migration_number(dirname)
end
private
def migration_version
if ActiveRecord::VERSION::MAJOR >= 5
"[#{ActiveRecord::VERSION::MAJOR}.#{ActiveRecord::VERSION::MINOR}]"
end
end
end
doorkeeper-4.3.1/lib/generators/doorkeeper/application_owner_generator.rb 0000644 0000041 0000041 00000001362 13253470511 027077 0 ustar www-data www-data require 'rails/generators/active_record'
class Doorkeeper::ApplicationOwnerGenerator < Rails::Generators::Base
include Rails::Generators::Migration
source_root File.expand_path('../templates', __FILE__)
desc 'Provide support for client application ownership.'
def application_owner
migration_template(
'add_owner_to_application_migration.rb.erb',
'db/migrate/add_owner_to_application.rb',
migration_version: migration_version
)
end
def self.next_migration_number(dirname)
ActiveRecord::Generators::Base.next_migration_number(dirname)
end
private
def migration_version
if ActiveRecord::VERSION::MAJOR >= 5
"[#{ActiveRecord::VERSION::MAJOR}.#{ActiveRecord::VERSION::MINOR}]"
end
end
end
doorkeeper-4.3.1/lib/generators/doorkeeper/previous_refresh_token_generator.rb 0000644 0000041 0000041 00000001677 13253470511 030165 0 ustar www-data www-data require 'rails/generators/active_record'
class Doorkeeper::PreviousRefreshTokenGenerator < Rails::Generators::Base
include Rails::Generators::Migration
source_root File.expand_path('../templates', __FILE__)
desc 'Support revoke refresh token on access token use'
def self.next_migration_number(path)
ActiveRecord::Generators::Base.next_migration_number(path)
end
def previous_refresh_token
if no_previous_refresh_token_column?
migration_template(
'add_previous_refresh_token_to_access_tokens.rb.erb',
'db/migrate/add_previous_refresh_token_to_access_tokens.rb'
)
end
end
private
def migration_version
if ActiveRecord::VERSION::MAJOR >= 5
"[#{ActiveRecord::VERSION::MAJOR}.#{ActiveRecord::VERSION::MINOR}]"
end
end
def no_previous_refresh_token_column?
!ActiveRecord::Base.connection.column_exists?(
:oauth_access_tokens,
:previous_refresh_token
)
end
end
doorkeeper-4.3.1/lib/generators/doorkeeper/views_generator.rb 0000644 0000041 0000041 00000000636 13253470511 024522 0 ustar www-data www-data module Doorkeeper
module Generators
class ViewsGenerator < ::Rails::Generators::Base
source_root File.expand_path('../../../../app/views', __FILE__)
desc 'Copies default Doorkeeper views and layouts to your application.'
def manifest
directory 'doorkeeper', 'app/views/doorkeeper'
directory 'layouts/doorkeeper', 'app/views/layouts/doorkeeper'
end
end
end
end
doorkeeper-4.3.1/lib/generators/doorkeeper/install_generator.rb 0000644 0000041 0000041 00000000672 13253470511 025033 0 ustar www-data www-data class Doorkeeper::InstallGenerator < ::Rails::Generators::Base
include Rails::Generators::Migration
source_root File.expand_path('../templates', __FILE__)
desc 'Installs Doorkeeper.'
def install
template 'initializer.rb', 'config/initializers/doorkeeper.rb'
copy_file File.expand_path('../../../../config/locales/en.yml', __FILE__), 'config/locales/doorkeeper.en.yml'
route 'use_doorkeeper'
readme 'README'
end
end
doorkeeper-4.3.1/gemfiles/ 0000755 0000041 0000041 00000000000 13253470511 015502 5 ustar www-data www-data doorkeeper-4.3.1/gemfiles/rails_5_2.gemfile 0000644 0000041 0000041 00000000524 13253470511 020614 0 ustar www-data www-data # This file was generated by Appraisal
source "https://rubygems.org"
gem "rails", "5.2.0.rc1"
gem "appraisal"
gem "activerecord-jdbcsqlite3-adapter", platforms: :jruby
gem "sqlite3", platforms: [:ruby, :mswin, :mingw, :x64_mingw]
gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
gem "rspec-rails", "~> 3.7"
gemspec path: "../"
doorkeeper-4.3.1/gemfiles/rails_5_0.gemfile 0000644 0000041 0000041 00000000523 13253470511 020611 0 ustar www-data www-data # This file was generated by Appraisal
source "https://rubygems.org"
gem "rails", "~> 5.0.0"
gem "appraisal"
gem "activerecord-jdbcsqlite3-adapter", platforms: :jruby
gem "sqlite3", platforms: [:ruby, :mswin, :mingw, :x64_mingw]
gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
gem "rspec-rails", "~> 3.5"
gemspec path: "../"
doorkeeper-4.3.1/gemfiles/rails_5_1.gemfile 0000644 0000041 0000041 00000000523 13253470511 020612 0 ustar www-data www-data # This file was generated by Appraisal
source "https://rubygems.org"
gem "rails", "~> 5.1.0"
gem "appraisal"
gem "activerecord-jdbcsqlite3-adapter", platforms: :jruby
gem "sqlite3", platforms: [:ruby, :mswin, :mingw, :x64_mingw]
gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
gem "rspec-rails", "~> 3.7"
gemspec path: "../"
doorkeeper-4.3.1/gemfiles/rails_master.gemfile 0000644 0000041 0000041 00000000636 13253470511 021526 0 ustar www-data www-data # This file was generated by Appraisal
source "https://rubygems.org"
gem "rails", git: 'https://github.com/rails/rails'
gem "arel", git: 'https://github.com/rails/arel'
gem "appraisal"
gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
gem "sqlite3", platform: [:ruby, :mswin, :mingw, :x64_mingw]
gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
gem "rspec-rails", "~> 3.7"
gemspec path: "../"
doorkeeper-4.3.1/gemfiles/rails_4_2.gemfile 0000644 0000041 0000041 00000000575 13253470511 020621 0 ustar www-data www-data # This file was generated by Appraisal
source "https://rubygems.org"
gem "rails", "~> 4.2.0"
gem "appraisal"
gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
gem "sqlite3", platform: [:ruby, :mswin, :mingw, :x64_mingw]
gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
# Older Grape requires Ruby >= 2.2.2
gem "grape", '~> 0.16', '< 0.19.2'
gemspec path: "../"
doorkeeper-4.3.1/.rubocop.yml 0000644 0000041 0000041 00000000233 13253470511 016157 0 ustar www-data www-data AllCops:
Exclude:
- "spec/dummy/db/*"
LineLength:
Exclude:
- spec/**/*
StringLiterals:
Enabled: false
TrailingBlankLines:
Enabled: true
doorkeeper-4.3.1/.gitignore 0000644 0000041 0000041 00000000316 13253470511 015677 0 ustar www-data www-data .bundle/
.rbx
*.rbc
log/*.log
pkg/
spec/dummy/db/*.sqlite3
spec/dummy/log/*.log
spec/dummy/tmp/
spec/generators/tmp
Gemfile.lock
gemfiles/*.lock
.rvmrc
*.swp
.idea
/.yardoc/
/_yardoc/
/doc/
/rdoc/
coverage
doorkeeper-4.3.1/config/ 0000755 0000041 0000041 00000000000 13253470511 015154 5 ustar www-data www-data doorkeeper-4.3.1/config/locales/ 0000755 0000041 0000041 00000000000 13253470511 016576 5 ustar www-data www-data doorkeeper-4.3.1/config/locales/en.yml 0000644 0000041 0000041 00000011117 13253470511 017724 0 ustar www-data www-data en:
activerecord:
attributes:
doorkeeper/application:
name: 'Name'
redirect_uri: 'Redirect URI'
errors:
models:
doorkeeper/application:
attributes:
redirect_uri:
fragment_present: 'cannot contain a fragment.'
invalid_uri: 'must be a valid URI.'
relative_uri: 'must be an absolute URI.'
secured_uri: 'must be an HTTPS/SSL URI.'
forbidden_uri: 'is forbidden by the server.'
doorkeeper:
applications:
confirmations:
destroy: 'Are you sure?'
buttons:
edit: 'Edit'
destroy: 'Destroy'
submit: 'Submit'
cancel: 'Cancel'
authorize: 'Authorize'
form:
error: 'Whoops! Check your form for possible errors'
help:
redirect_uri: 'Use one line per URI'
native_redirect_uri: 'Use %{native_redirect_uri} if you want to add localhost URIs for development purposes'
scopes: 'Separate scopes with spaces. Leave blank to use the default scopes.'
edit:
title: 'Edit application'
index:
title: 'Your applications'
new: 'New Application'
name: 'Name'
callback_url: 'Callback URL'
new:
title: 'New Application'
show:
title: 'Application: %{name}'
application_id: 'Application Id'
secret: 'Secret'
scopes: 'Scopes'
callback_urls: 'Callback urls'
actions: 'Actions'
authorizations:
buttons:
authorize: 'Authorize'
deny: 'Deny'
error:
title: 'An error has occurred'
new:
title: 'Authorization required'
prompt: 'Authorize %{client_name} to use your account?'
able_to: 'This application will be able to'
show:
title: 'Authorization code'
authorized_applications:
confirmations:
revoke: 'Are you sure?'
buttons:
revoke: 'Revoke'
index:
title: 'Your authorized applications'
application: 'Application'
created_at: 'Created At'
date_format: '%Y-%m-%d %H:%M:%S'
errors:
messages:
# Common error messages
invalid_request: 'The request is missing a required parameter, includes an unsupported parameter value, or is otherwise malformed.'
invalid_redirect_uri: "The requested redirect uri is malformed or doesn't match client redirect URI."
unauthorized_client: 'The client is not authorized to perform this request using this method.'
access_denied: 'The resource owner or authorization server denied the request.'
invalid_scope: 'The requested scope is invalid, unknown, or malformed.'
server_error: 'The authorization server encountered an unexpected condition which prevented it from fulfilling the request.'
temporarily_unavailable: 'The authorization server is currently unable to handle the request due to a temporary overloading or maintenance of the server.'
# Configuration error messages
credential_flow_not_configured: 'Resource Owner Password Credentials flow failed due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.'
resource_owner_authenticator_not_configured: 'Resource Owner find failed due to Doorkeeper.configure.resource_owner_authenticator being unconfigured.'
# Access grant errors
unsupported_response_type: 'The authorization server does not support this response type.'
# Access token errors
invalid_client: 'Client authentication failed due to unknown client, no client authentication included, or unsupported authentication method.'
invalid_grant: 'The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.'
unsupported_grant_type: 'The authorization grant type is not supported by the authorization server.'
invalid_token:
revoked: "The access token was revoked"
expired: "The access token expired"
unknown: "The access token is invalid"
flash:
applications:
create:
notice: 'Application created.'
destroy:
notice: 'Application deleted.'
update:
notice: 'Application updated.'
authorized_applications:
destroy:
notice: 'Application revoked.'
layouts:
admin:
nav:
oauth2_provider: 'OAuth2 Provider'
applications: 'Applications'
home: 'Home'
application:
title: 'OAuth authorization required'
doorkeeper-4.3.1/CONTRIBUTING.md 0000644 0000041 0000041 00000002035 13253470511 016140 0 ustar www-data www-data # Contributing
We love pull requests from everyone. By participating in this project, you agree
to abide by the thoughtbot [code of conduct].
[code of conduct]: https://thoughtbot.com/open-source-code-of-conduct
Fork, then clone the repo:
git clone git@github.com:your-username/doorkeeper.git
Set up Ruby dependencies via Bundler
bundle install
Make sure the tests pass:
rake
Make your change.
Write tests.
Follow our [style guide][style].
Make the tests pass:
[style]: https://github.com/thoughtbot/guides/tree/master/style
rake
Add notes on your change to the `NEWS.md` file.
Write a [good commit message][commit].
Push to your fork.
[Submit a pull request][pr].
[commit]: http://tbaggery.com/2008/04/19/a-note-about-git-commit-messages.html
[pr]: https://github.com/doorkeeper-gem/doorkeeper/compare/
If [Hound] catches style violations,
fix them.
[hound]: https://houndci.com
Wait for us.
We try to at least comment on pull requests within one business day.
We may suggest changes.
Thank you for your contribution!
doorkeeper-4.3.1/.github/ 0000755 0000041 0000041 00000000000 13253470511 015247 5 ustar www-data www-data doorkeeper-4.3.1/.github/PULL_REQUEST_TEMPLATE.md 0000644 0000041 0000041 00000001175 13253470511 021054 0 ustar www-data www-data ### Summary
Provide a general description of the code changes in your pull
request... were there any bugs you had fixed? If so, mention them. If
these bugs have open GitHub issues, be sure to tag them here as well,
to keep the conversation linked together.
### Other Information
If there's anything else that's important and relevant to your pull
request, mention that information here. This could include
benchmarks, or other information.
If you are updating NEWS.md file or are asked to update it by reviewers,
please add the changelog entry at the top of the file.
Thanks for contributing to Doorkeeper project!
doorkeeper-4.3.1/.github/ISSUE_TEMPLATE.md 0000644 0000041 0000041 00000001322 13253470511 017752 0 ustar www-data www-data ### Steps to reproduce
What we need to do to see your problem or bug?
The more detailed the issue, the more likely that we will fix it ASAP.
Don't use GitHub issues for questions like "How can I do that?" —
use [StackOverflow](https://stackoverflow.com/questions/tagged/doorkeeper)
instead with the corresponding tag.
### Expected behavior
Tell us what should happen
### Actual behavior
Tell us what happens instead
### System configuration
You can help us to understand your problem if you will share some very
useful information about your project environment (don't forget to
remove any confidential data if it exists).
**Doorkeeper initializer**:
**Ruby version**:
**Gemfile.lock**:
doorkeeper-4.3.1/RELEASING.md 0000644 0000041 0000041 00000000601 13253470511 015537 0 ustar www-data www-data # Releasing doorkeeper
How to release doorkeeper in five easy steps!
1. Update `lib/doorkeeper/version.rb` file accordingly.
2. Update `NEWS.md` to reflect the changes since last release.
3. Commit changes: `git commit -am 'Bump to vVERSION'`
4. Run `rake release`
5. Announce the new release, making sure to say “thank you” to the contributors
who helped shape this version!
doorkeeper-4.3.1/Appraisals 0000644 0000041 0000041 00000000550 13253470511 015731 0 ustar www-data www-data appraise "rails-4-2" do
gem "rails", "~> 4.2.0"
end
appraise "rails-5-0" do
gem "rails", "~> 5.0.0"
gem "rspec-rails", "~> 3.5"
end
appraise "rails-5-1" do
gem "rails", "~> 5.1.0"
gem "rspec-rails", "~> 3.5"
end
appraise "rails-master" do
gem "rails", git: 'https://github.com/rails/rails'
gem "arel", git: 'https://github.com/rails/arel'
end
doorkeeper-4.3.1/app/ 0000755 0000041 0000041 00000000000 13253470511 014467 5 ustar www-data www-data doorkeeper-4.3.1/app/views/ 0000755 0000041 0000041 00000000000 13253470511 015624 5 ustar www-data www-data doorkeeper-4.3.1/app/views/doorkeeper/ 0000755 0000041 0000041 00000000000 13253470511 017763 5 ustar www-data www-data doorkeeper-4.3.1/app/views/doorkeeper/authorizations/ 0000755 0000041 0000041 00000000000 13253470511 023046 5 ustar www-data www-data doorkeeper-4.3.1/app/views/doorkeeper/authorizations/show.html.erb 0000644 0000041 0000041 00000000236 13253470511 025464 0 ustar www-data www-data
<%= params[:code] %>
doorkeeper-4.3.1/app/views/doorkeeper/authorizations/new.html.erb 0000644 0000041 0000041 00000003054 13253470511 025276 0 ustar www-data www-data
<%= raw t('.prompt', client_name: content_tag(:strong, class: 'text-info') { @pre_auth.client.name }) %>
<% if @pre_auth.scopes.count > 0 %>
<%= t('.able_to') %>:
<% @pre_auth.scopes.each do |scope| %>
- <%= t scope, scope: [:doorkeeper, :scopes] %>
<% end %>
<% end %>
<%= form_tag oauth_authorization_path, method: :post do %>
<%= hidden_field_tag :client_id, @pre_auth.client.uid %>
<%= hidden_field_tag :redirect_uri, @pre_auth.redirect_uri %>
<%= hidden_field_tag :state, @pre_auth.state %>
<%= hidden_field_tag :response_type, @pre_auth.response_type %>
<%= hidden_field_tag :scope, @pre_auth.scope %>
<%= submit_tag t('doorkeeper.authorizations.buttons.authorize'), class: "btn btn-success btn-lg btn-block" %>
<% end %>
<%= form_tag oauth_authorization_path, method: :delete do %>
<%= hidden_field_tag :client_id, @pre_auth.client.uid %>
<%= hidden_field_tag :redirect_uri, @pre_auth.redirect_uri %>
<%= hidden_field_tag :state, @pre_auth.state %>
<%= hidden_field_tag :response_type, @pre_auth.response_type %>
<%= hidden_field_tag :scope, @pre_auth.scope %>
<%= submit_tag t('doorkeeper.authorizations.buttons.deny'), class: "btn btn-danger btn-lg btn-block" %>
<% end %>
doorkeeper-4.3.1/app/views/doorkeeper/authorizations/error.html.erb 0000644 0000041 0000041 00000000300 13253470511 025625 0 ustar www-data www-data
<%= @pre_auth.error_response.body[:error_description] %>
doorkeeper-4.3.1/app/views/doorkeeper/authorized_applications/ 0000755 0000041 0000041 00000000000 13253470511 024707 5 ustar www-data www-data doorkeeper-4.3.1/app/views/doorkeeper/authorized_applications/_delete_form.html.erb 0000644 0000041 0000041 00000000510 13253470511 030764 0 ustar www-data www-data <%- submit_btn_css ||= 'btn btn-link' %>
<%= form_tag oauth_authorized_application_path(application), method: :delete do %>
<%= submit_tag t('doorkeeper.authorized_applications.buttons.revoke'), onclick: "return confirm('#{ t('doorkeeper.authorized_applications.confirmations.revoke') }')", class: submit_btn_css %>
<% end %>
doorkeeper-4.3.1/app/views/doorkeeper/authorized_applications/index.html.erb 0000644 0000041 0000041 00000001344 13253470511 027455 0 ustar www-data www-data
| <%= t('doorkeeper.authorized_applications.index.application') %> |
<%= t('doorkeeper.authorized_applications.index.created_at') %> |
|
<% @applications.each do |application| %>
| <%= application.name %> |
<%= application.created_at.strftime(t('doorkeeper.authorized_applications.index.date_format')) %> |
<%= render 'delete_form', application: application %> |
<% end %>
doorkeeper-4.3.1/app/views/doorkeeper/applications/ 0000755 0000041 0000041 00000000000 13253470511 022451 5 ustar www-data www-data doorkeeper-4.3.1/app/views/doorkeeper/applications/_delete_form.html.erb 0000644 0000041 0000041 00000000451 13253470511 026532 0 ustar www-data www-data <%- submit_btn_css ||= 'btn btn-link' %>
<%= form_tag oauth_application_path(application), method: :delete do %>
<%= submit_tag t('doorkeeper.applications.buttons.destroy'), onclick: "return confirm('#{ t('doorkeeper.applications.confirmations.destroy') }')", class: submit_btn_css %>
<% end %>
doorkeeper-4.3.1/app/views/doorkeeper/applications/show.html.erb 0000644 0000041 0000041 00000002370 13253470511 025070 0 ustar www-data www-data
<%= t('.application_id') %>:
<%= @application.uid %>
<%= t('.secret') %>:
<%= @application.secret %>
<%= t('.scopes') %>:
<%= @application.scopes %>
<%= t('.callback_urls') %>:
<% @application.redirect_uri.split.each do |uri| %>
<%= uri %>
|
<%= link_to t('doorkeeper.applications.buttons.authorize'), oauth_authorization_path(client_id: @application.uid, redirect_uri: uri, response_type: 'code', scope: @application.scopes), class: 'btn btn-success', target: '_blank' %>
|
<% end %>
<%= t('.actions') %>
<%= link_to t('doorkeeper.applications.buttons.edit'), edit_oauth_application_path(@application), class: 'btn btn-primary' %>
<%= render 'delete_form', application: @application, submit_btn_css: 'btn btn-danger' %>
doorkeeper-4.3.1/app/views/doorkeeper/applications/index.html.erb 0000644 0000041 0000041 00000001442 13253470511 025216 0 ustar www-data www-data
<%= link_to t('.new'), new_oauth_application_path, class: 'btn btn-success' %>
| <%= t('.name') %> |
<%= t('.callback_url') %> |
|
|
<% @applications.each do |application| %>
| <%= link_to application.name, oauth_application_path(application) %> |
<%= application.redirect_uri %> |
<%= link_to t('doorkeeper.applications.buttons.edit'), edit_oauth_application_path(application), class: 'btn btn-link' %> |
<%= render 'delete_form', application: application %> |
<% end %>
doorkeeper-4.3.1/app/views/doorkeeper/applications/new.html.erb 0000644 0000041 0000041 00000000160 13253470511 024674 0 ustar www-data www-data
<%= render 'form', application: @application %>
doorkeeper-4.3.1/app/views/doorkeeper/applications/_form.html.erb 0000644 0000041 0000041 00000004065 13253470511 025215 0 ustar www-data www-data <%= form_for application, url: doorkeeper_submit_path(application), html: {class: 'form-horizontal', role: 'form'} do |f| %>
<% if application.errors.any? %>
<%= t('doorkeeper.applications.form.error') %>
<%= f.text_field :name, class: 'form-control' %>
<%= doorkeeper_errors_for application, :name %>
<% end %>
<%= content_tag :div, class: "form-group#{' has-error' if application.errors[:redirect_uri].present?}" do %>
<%= f.label :redirect_uri, class: 'col-sm-2 control-label' %>
<%= f.text_area :redirect_uri, class: 'form-control' %>
<%= doorkeeper_errors_for application, :redirect_uri %>
<%= t('doorkeeper.applications.help.redirect_uri') %>
<% if Doorkeeper.configuration.native_redirect_uri %>
<%= raw t('doorkeeper.applications.help.native_redirect_uri', native_redirect_uri: content_tag(:code) { Doorkeeper.configuration.native_redirect_uri }) %>
<% end %>
<% end %>
<%= content_tag :div, class: "form-group#{' has-error' if application.errors[:scopes].present?}" do %>
<%= f.label :scopes, class: 'col-sm-2 control-label' %>
<%= f.text_field :scopes, class: 'form-control' %>
<%= doorkeeper_errors_for application, :scopes %>
<%= t('doorkeeper.applications.help.scopes') %>
<% end %>
<% end %>
doorkeeper-4.3.1/app/views/doorkeeper/applications/edit.html.erb 0000644 0000041 0000041 00000000160 13253470511 025030 0 ustar www-data www-data
<%= render 'form', application: @application %>
doorkeeper-4.3.1/app/views/layouts/ 0000755 0000041 0000041 00000000000 13253470511 017324 5 ustar www-data www-data doorkeeper-4.3.1/app/views/layouts/doorkeeper/ 0000755 0000041 0000041 00000000000 13253470511 021463 5 ustar www-data www-data doorkeeper-4.3.1/app/views/layouts/doorkeeper/application.html.erb 0000644 0000041 0000041 00000001017 13253470511 025422 0 ustar www-data www-data
<%= t('doorkeeper.layouts.application.title') %>
<%= stylesheet_link_tag "doorkeeper/application" %>
<%= csrf_meta_tags %>
<%- if flash[:notice].present? %>
<%= flash[:notice] %>
<% end -%>
<%= yield %>
<%= content_tag :li, class: "#{'active' if request.path == oauth_applications_path}" do %>
<%= link_to t('doorkeeper.layouts.admin.nav.applications'), oauth_applications_path %>
<% end %>
<%= content_tag :li do %>
<%= link_to t('doorkeeper.layouts.admin.nav.home'), root_path %>
<% end %>
<%- if flash[:notice].present? %>
<%= flash[:notice] %>
<% end -%>
<%= yield %>