Search results

Feature request: Support Identity Assertion JWT Authorization Grant (ID-JAG)

Status: Open.

#1799 In doorkeeper-gem/doorkeeper;

· Akankshabhasin opened on Mar 9, 2026

Refresh Token Rotation + Expiry questions

Status: Open.

#1787 In doorkeeper-gem/doorkeeper;

· stevetsanders opened on Dec 18, 2025

Refresh tokens cannot reduce scopes correctly

Status: Open.

#1771 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Apr 19, 2025

Support OAuth RFC - JWT for Client Authentication and Authorization Grants

Status: Open.

#1768 In doorkeeper-gem/doorkeeper;

· hagaivcita opened on Apr 9, 2025

Issue: Configuring Active Record to Use Different Base Classes for Sharded and Non-Sharded Models

Status: Open.

#1764 In doorkeeper-gem/doorkeeper;

· rishav-enigma opened on Feb 7, 2025

Introspecting a token should behave the same wrt "revoke on use"

Status: Open.

#1759 In doorkeeper-gem/doorkeeper;

· kmayer opened on Jan 14, 2025

How to implement using multi-database like Makara

Status: Open.

#1756 In doorkeeper-gem/doorkeeper;

· benviloria opened on Dec 29, 2024

There is no way to refresh an access token without revoking the previous access token

Status: Open.

#1730 In doorkeeper-gem/doorkeeper;

· ransombriggs opened on Sep 10, 2024

Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks

Status: Open.

#1719 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Jul 25, 2024

Doorkeeper's redirect_uri validation is not implemented according to specification

RFC

Status: Open.

#1718 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Jul 25, 2024

Access tokens should be revoked when multiple attempts are made to exchange the same authorization code

Status: Open.

#1713 In doorkeeper-gem/doorkeeper;

· ransombriggs opened on Jul 10, 2024

Doorkeeper appears to be missing a way to validate client configuration before redirecting to the authentication page

Status: Open.

#1711 In doorkeeper-gem/doorkeeper;

· ransombriggs opened on Jun 25, 2024