Assertion grant extension for Doorkeeper. Born from: doorkeeper-gem/doorkeeper#249
- Add both gems to your
Gemfile
. - Add
assertion
as agrant_flow
to your initializer.
Lets you define your own way of authenticating resource owners via 3rd Party applications. For example, via Facebook:
Doorkeeper.configure do
resource_owner_from_assertion do
facebook = URI.parse('https://graph.facebook.com/me?access_token=' +
params[:assertion])
response = Net::HTTP.get_response(facebook)
user_data = JSON.parse(response.body)
User.find_by_facebook_id(user_data['id'])
end
# add your supported grant types and other extensions
grant_flows %w(assertion authorization_code implicit password client_credentials)
end
IETF standard: http://tools.ietf.org/html/draft-ietf-oauth-assertions-16