Search results

Public Clients and security exposure (OAuth 2.1)

Status: Open.

#1895 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Aug 1, 2026

Document custom client authentication methods in README

Status: Open.

#1894 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Jul 31, 2026

Deprecation or removal of insecure grant flows

Status: Open.

#1892 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Jul 31, 2026

Default-scope calculation diverges between the authorization and token endpoints when dynamic scopes are enabled

Status: Open.

#1889 In doorkeeper-gem/doorkeeper;

· 55728 opened on Jul 31, 2026

Client ID Metadata Documents (CIMDs)

Status: Open.

#1875 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Jul 23, 2026

force_pkce requires a code_challenge from response types that never issue an authorization code

Status: Open.

#1873 In doorkeeper-gem/doorkeeper;

· 55728 opened on Jul 23, 2026

Feature request: Support Identity Assertion JWT Authorization Grant (ID-JAG)

Status: Open.

#1799 In doorkeeper-gem/doorkeeper;

· Akankshabhasin opened on Mar 9, 2026

Refresh Token Rotation + Expiry questions

Status: Open.

#1787 In doorkeeper-gem/doorkeeper;

· stevetsanders opened on Dec 18, 2025

Refresh tokens cannot reduce scopes correctly

Status: Open.

#1771 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Apr 19, 2025

Support OAuth RFC - JWT for Client Authentication and Authorization Grants

Status: Open.

#1768 In doorkeeper-gem/doorkeeper;

· hagaivcita opened on Apr 9, 2025

Issue: Configuring Active Record to Use Different Base Classes for Sharded and Non-Sharded Models

Status: Open.

#1764 In doorkeeper-gem/doorkeeper;

· rishav-enigma opened on Feb 7, 2025

Introspecting a token should behave the same wrt "revoke on use"

Status: Open.

#1759 In doorkeeper-gem/doorkeeper;

· kmayer opened on Jan 14, 2025