Skip to content


Subversion checkout URL

You can clone with
Download ZIP
Fetching contributors…

Cannot retrieve contributors at this time

41 lines (26 sloc) 1.554 kB


OpenSesame is a Warden strategy for providing "walled garden" authentication for access to Rack-based applications via Omniauth. For example, your company has internal apps and/or staging enviroments for multiple projects and you want something better than HTTP basic auth. The intent is protect the visibility of your app from the outside world.

Enter OpenSesame. To authenticate, OpenSesame currently uses Omniauth and the Github API to require that a user is both logged in to Github and a member of the configurable Github organization.


In your Gemfile:

$ gem "opensesame"

Register your application(s) with Github for OAuth access. For each application, you need a name, the site url, and a callback for OAuth. The OmniAuth-Github OAuth strategy used under the hood will expect the callback at mount path + '/auth/github/callback'. So the development version of your client application might be registered as:

Name: MyApp - local
URL: http://localhost:3000
Callback URL: http://localhost:3000/welcome/auth/github/callback

Configure OpenSesame:

# Rails config/initializers/opensesame.rb or Sinatra app.rb

require 'opensesame'

OpenSesame.configure do |config|
  config.organization 'challengepost'
  config.mounted_at   '/welcome'

Mount OpenSesame in your Rails routes.rb:

# Rails config/routes.rb

mount OpenSesame::Engine => "/welcome", :as => "opensesame"
Jump to Line
Something went wrong with that request. Please try again.