Rails3 engine that brings OAuth2 Provider support to your application.
Current OAuth2 Specification Draft: http://tools.ietf.org/html/draft-ietf-oauth-v2-22
- integrate OAuth2 authentication with Devise authenthentication stack
- one-stop-shop includes all Models, Controllers and Views to get up and running quickly
- All server requests support authentication via bearer token included in the request. http://tools.ietf.org/html/draft-ietf-oauth-v2-bearer-04
- customizable mount point for oauth2 routes (ex: /oauth2 vs /oauth)
- Devise authentication library
- Rails 3.1 or higher
# Gemfile gem 'devise_oauth2_providable'
Migrate database for Oauth2 models
$ rake devise_oauth2_providable:install:migrations $ rake db:migrate
Add Oauth2 Routes
# config/routes.rb Rails.application.routes.draw do # oauth routes can be mounted to any path (ex: /oauth2 or /oauth) mount Devise::Oauth2Providable::Engine => '/oauth2' end
Configure User for supported Oauth2 flows
class User # NOTE: include :database_authenticatable configuration # if supporting Resource Owner Password Credentials Grant Type devise :oauth2_providable, :oauth2_password_grantable, :oauth2_refresh_token_grantable, :oauth2_authorization_code_grantable end
registered OAuth2 client for storing the unique client_id and client_secret.
Short lived token used by clients to perform subsequent requests (see bearer token spec)
expires after 15min by default. to customize the duration of the access token:
Devise::Oauth2Providable::AccessToken.default_lifetime = 1.minute
Long lived token used by clients to request new access tokens without requiring user intervention to re-authorize.
expires after 1 month by default. to customize the duration of refresh token:
Devise::Oauth2Providable::RefreshToken.default_lifetime = 1.year
Very short lived token created to allow a client to request an access token after a user has gone through the authorization flow.
expires after 1min by default. to customize the duration of the authorization code:
Devise::Oauth2Providable::AuthorizationCode.default_lifetime = 5.minutes
Endpoint to start client authorization flow. Models, controllers and views are included for out of the box deployment.
Supports the Authorization Code and Implicit grant types.
Endpoint to request access token. See grant type documentation for supported flows.
Resource Owner Password Credentials Grant Type
in order to use the Resource Owner Password Credentials Grant Type, your Devise model must be configured with the :database_authenticatable option
Client Credentials Grant Type
Authorization Code Grant Type
Implicit Grant Type
Refresh Token Grant Type
- Fork the project
- Fix the issue
- Add unit tests
- Submit pull request on github
See CONTRIBUTORS.txt for list of project contributors
Copyright (c) 2011 Socialcast, Inc. See LICENSE.txt for further details.