Home

Doorkeeper::OpenidConnect

This library implements an OpenID Connect authentication provider for Rails applications on top of the Doorkeeper OAuth 2.0 framework.

For installation instructions and an overview of supported features, see the README.

Getting Started

• Configuration — Configuring the initializer: issuer, subject, signing keys, auth_time, and more
• Migration from Old Versions — Upgrade instructions for breaking changes between versions

Topics

• Scopes — Enabling the openid scope and offline_access
• Claims — Defining custom and standard claims, acr / amr
• Prompt and Max Age — Supporting prompt and max_age with reauthentication and account selection
• Routes — Mounted routes, customizing jwks_uri, multiple mounts
• Nonces — Passing the nonce parameter through the authorization view
• RP-Initiated Logout — Advertising the end-session endpoint and validating post-logout redirects
• Dynamic Client Registration — Enabling and authorizing the registration endpoint
• I18n — Overriding error messages and scope descriptions
• Troubleshooting — Symptoms, causes and fixes for common integration pitfalls

Guides

• Enabling Standard Claims and Scopes
• Using PostgreSQL UUID as primary key with Doorkeeper OpenID Connect