
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
oauth_provider_engine
Advanced tools
= OauthProviderEngine
A Rails Engine that allow the site to act as an OAuth provider
== Installation
In your Gemfile add:
gem 'oauth_provider_engine'
Install your gems:
bundle install
That's it!
== Configuration
OauthProviderEngine makes no assumptions about how you manage your user authentication. You can configure OauthProviderEngine by setting Proc's that are evaluated at runtime.
For example, in an initializer:
OauthProviderEngine.configure do |config| # runs as a before_filter to the /oauth/authenticate endpoint to # ensure the user is logged in before authorizing an app config.authenticate_method = Proc.new{|controller| controller.redirect_to login_path unless controller.logged_in? }
# runs as a before_filter to the /oauth/applications resource to
# ensure the user can manage the oauth applications
config.admin_authenticate_method = Proc.new{|controller|
render :text => '', :status => 401 unless controller.current_user &&
controller.current_user.allowed?("manage_oauth")
}
# returns the current user's id so we know who is allowing access
config.user_method = Proc.new{|controller|
controller.current_user.id
end
end
== Data Model
OauthProviderEngine uses ActiveRecord to manage 3 tables:
A rails generator is provided for your convenience:
bundle exec rails generate oauth_provider_engine
You may also generate your migration by hand, if you'd like to take advantage of database specific features (like foreign keys for InnoDB MySQL tables).
== Contributing
If you'd like to contribute to this project, please fork and send me a pull request.
FAQs
Unknown package
We found that oauth_provider_engine demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.