Integrating with Devise/Warden flows about doorkeeper-openid_connect HOT 4 CLOSED

Is something like the warden-doorkeeper gem the best solution to begin integrating these, or can it be more simply done?

I'm not familiar with this gem but it looks to be just a bit of glue around Doorkeeper.

Setting this up basically involves these steps:

1. Setup devise or another form of authentication
2. Setup doorkeeper, optionally in combination with warden-doorkeeper
3. Setup doorkeeper-openid_connect
4. Create one or more Doorkeeper applications with the openid scope included, and configure your clients with them

Is it possible to use existing session state if the user is already logged in?

Hmm neither Doorkeeper or this extension deals directly with sessions, it's basically just an authentication API and any handling of session state will happen in your client application ("Relying Party" in OIC terms).

Maybe I misunderstood, could you elaborate on what the client side looks like?

Which part of this is responsible for rendering the view wherein the user (post-authentication) is presented with the requested scopes/claims and accepts or rejects the authorization request?

That's Doorkeeper, see Customizing views and this caveat for nonces.

Finally, is a migration on the user to store some sort of subject identifier required or is there a property on the user object provided by doorkeeper already that can be coopted into this role?

No, you have to define how to get the identifier with the subject callback, see README

Thank you very much!

You're welcome! I tweaked the README a bit, let me know which parts are still unclear.

Doorkeeper also has an extensive wiki) and example applications.

from doorkeeper-openid_connect.

Great, thanks. I'll take a look and come back with clarifications/questions. Great to see some support for this gem, much appreciated!

from doorkeeper-openid_connect.

[Edit: Nevermind, was using webfinger instead of openid-configuration]

from doorkeeper-openid_connect.

@malacalypse gotcha :)

Just for reference, the routes added by this gem are described in the README, and I just added a link to the Doorkeeper wiki for details on how to customize them.

from doorkeeper-openid_connect.