spec/dummy/config/initializers/doorkeeper.rb in doorkeeper-mongodb-4.1.0 vs spec/dummy/config/initializers/doorkeeper.rb in doorkeeper-mongodb-4.2.0
- old
+ new
@@ -27,10 +27,15 @@
# reuse_access_token
# Issue access tokens with refresh token (disabled by default)
use_refresh_token
+ # Opt out of breaking api change to the native authorization code flow. Opting out sets the authorization
+ # code response route for native redirect uris to oauth/authorize/<code>. The default is oauth/authorize/native?code=<code>.
+ # Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/1143
+ # opt_out_native_route_change
+
# Provide support for an owner to be assigned to each registered application (disabled by default)
# Optional parameter confirmation: true (default false) if you want to enforce ownership of
# a registered application
# Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support
# enable_application_owner confirmation: false
@@ -81,9 +86,20 @@
# before enabling:
# http://tools.ietf.org/html/rfc6819#section-4.4.2
# http://tools.ietf.org/html/rfc6819#section-4.4.3
#
# grant_flows %w[authorization_code client_credentials]
+
+ # Hook into the strategies' request & response life-cycle in case your
+ # application needs advanced customization or logging:
+ #
+ # before_successful_strategy_response do |request|
+ # puts "BEFORE HOOK FIRED! #{request}"
+ # end
+ #
+ # after_successful_strategy_response do |request, response|
+ # puts "AFTER HOOK FIRED! #{request}, #{response}"
+ # end
# Under some circumstances you might want to have applications auto-approved,
# so that the user skips the authorization step.
# For example if dealing with a trusted application.
# skip_authorization do |resource_owner, client|