doorkeeper

I've got a Rails API that is using Doorkeeper with the password grant method for Oauth2. Doorkeeper requires both the client_id and client_secret to be sent to the token request ( /oauth/token ), alongside the user's login details and scope. How would I go about doing this in an Angular app? I don't like the idea of storing the client id and secret client side... The client_id and client_secret should only be used when your app code is secured, i.g. inside your web server. For browser web apps and mobile apps the oauth implicit flow or the password flow should be used. In the implicit flow,

I am building an ouath 2.0 system in ruby on rails using Doorkeeper . My resource server is protected with doorkeeper_for method and is separate from the authorization server, and i am using the implicit grant flow. So i get the access token from the auth server and then make a request to the resource server in this way: localhsot:3000/pages?access_token=XXXX but when the resource server read the access token it try to looks for the token in its own database and not in the authentication server database so i get a 401 Unautorized error. How can i solve this? You should add a database

Twitter has application-only authentication for their api: https://dev.twitter.com/docs/auth/application-only-auth Twitter offers applications the ability to issue authenticated requests on behalf of the application itself (as opposed to on behalf of a specific user) I want to do the same with doorkeeper in Rails, but I'm not sure how to do that. It seems to be only possible to authenticate users via a callback url, but how can I access my API using the applications context (only by using the app ID and app secret) My first idea was to do a password credentials login with the app's ID and

I am trying to create a log in system for an iOS app with a rails back end powered by devise and door keeper. I want to limit the number of network requests so don't want to have to get the token from credentials then get the user details as a separate request. Here is my current attempt: token = Doorkeeper::AccessToken.create!(application_id: @application_id, resource_owner_id: current_user.id, :expires_in => 168.hours) puts token.token render :json => {:user => current_user, :token => token.as_json(:include=> token)}, status: :ok, location: :users However what is being returned is: {"user":{