Home

as OAuth Client

• Setup Client
• Obtain Access Token
• Access to Protected Resource

as OAuth Server

• Authorization Endpoint
• Token Endpoint
• Resource Endpoint

Note for OAuth Server Implementers

Before starting OAuth2 server implementation, PLEASE UNDERSTAND RFC 6749 and RFC 6750.

This gem do low-level OAuth2 protocol works, but you need to define these things by yourself.

• Client Management Policy
• API Security Policy
• API Scope Design
• Token Design (lifetime, opaque string or JWT etc.)
• etc.

This gem is designed for those who understand OAuth RFCs.

If you haven't read them, but needs to implement OAuth2 server, USE OTHER GEMS.

It seems there are several OAuth2 server gems on top of this gem.

Debugging

Call Rack::OAuth2.debug!, then you'll see all HTTP requests after that line in the log.

In Rails, you'll need to set Rack::OAuth2.logger = Rails.logger.

Rack::OAuth2.debug!
Rack::OAuth2.logger = Rails.logger