-
Notifications
You must be signed in to change notification settings - Fork 114
/
openid_connect.rb
76 lines (63 loc) · 2.32 KB
/
openid_connect.rb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
# frozen_string_literal: true
require 'doorkeeper'
require 'active_model'
require 'jwt'
require 'doorkeeper/request'
require 'doorkeeper/request/id_token'
require 'doorkeeper/request/id_token_token'
require 'doorkeeper/oauth/id_token_request'
require 'doorkeeper/oauth/id_token_token_request'
require 'doorkeeper/oauth/id_token_response'
require 'doorkeeper/oauth/id_token_token_response'
require 'doorkeeper/openid_connect/claims_builder'
require 'doorkeeper/openid_connect/claims/claim'
require 'doorkeeper/openid_connect/claims/normal_claim'
require 'doorkeeper/openid_connect/config'
require 'doorkeeper/openid_connect/engine'
require 'doorkeeper/openid_connect/errors'
require 'doorkeeper/openid_connect/id_token'
require 'doorkeeper/openid_connect/id_token_token'
require 'doorkeeper/openid_connect/user_info'
require 'doorkeeper/openid_connect/version'
require 'doorkeeper/openid_connect/helpers/controller'
require 'doorkeeper/openid_connect/oauth/authorization/code'
require 'doorkeeper/openid_connect/oauth/authorization_code_request'
require 'doorkeeper/openid_connect/oauth/password_access_token_request'
require 'doorkeeper/openid_connect/oauth/pre_authorization'
require 'doorkeeper/openid_connect/oauth/token_response'
require 'doorkeeper/openid_connect/orm/active_record'
require 'doorkeeper/openid_connect/rails/routes'
module Doorkeeper
module OpenidConnect
def self.signing_algorithm
configuration.signing_algorithm.to_s.upcase.to_sym
end
def self.signing_key
key =
if %i[HS256 HS384 HS512].include?(signing_algorithm)
configuration.signing_key
else
OpenSSL::PKey.read(configuration.signing_key)
end
JWT::JWK.new(key)
end
def self.signing_key_normalized
signing_key.export
end
Doorkeeper::GrantFlow.register(
:id_token,
response_type_matches: 'id_token',
response_mode_matches: %w[fragment form_post],
response_type_strategy: Doorkeeper::Request::IdToken,
)
Doorkeeper::GrantFlow.register(
'id_token token',
response_type_matches: 'id_token token',
response_mode_matches: %w[fragment form_post],
response_type_strategy: Doorkeeper::Request::IdTokenToken,
)
Doorkeeper::GrantFlow.register_alias(
'implicit_oidc', as: ['implicit', 'id_token', 'id_token token']
)
end
end