All issues

Search results

Support for Pushed Authorization Requests?

feature request

Status: Open.

#1949 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Sep 21, 2026

Persist per-client token endpoint authentication methods on oauth_applications

feature request

security

Status: Open.

#1948 In doorkeeper-gem/doorkeeper;

· 55728 opened on Sep 20, 2026

Add refresh token chain tracking to support grant-level revocation (RFC 7009 §2.1)

Status: Open.

#1945 In doorkeeper-gem/doorkeeper;

· 55728 opened on Sep 19, 2026

Client ID Metadata Documents (CIMDs)

feature request

Status: Open.

#1875 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Jul 23, 2026

Support OAuth RFC - JWT for Client Authentication and Authorization Grants

Status: Open.

#1768 In doorkeeper-gem/doorkeeper;

· hagaivcita opened on Apr 9, 2025

There is no way to refresh an access token without revoking the previous access token

Status: Open.

#1730 In doorkeeper-gem/doorkeeper;

· ransombriggs opened on Sep 10, 2024

Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks

Status: Open.

#1719 In doorkeeper-gem/doorkeeper;

· ThisIsMissEm opened on Jul 25, 2024

Always requiring redirect_uri is not compliant to RFC 6749

Status: Open.

#1678 In doorkeeper-gem/doorkeeper;

· westnordost opened on Nov 22, 2023

Better support for credential rotation

feature request

Status: Open.

#1675 In doorkeeper-gem/doorkeeper;

· sgallag-insta opened on Oct 25, 2023

Support OAuth DPoP

feature request

Status: Open.

#1655 In doorkeeper-gem/doorkeeper;

· hickford opened on Apr 25, 2023

Is there a way to store Doorkeeper::AccessToken data inside Doorkeeper::JWT (and not use db-backed tokens)?

feature request

Status: Open.

#1600 In doorkeeper-gem/doorkeeper;

· NeilSlater-Clixifix opened on Nov 8, 2022