spec/dummy/config/initializers/doorkeeper.rb in doorkeeper-mongodb-4.1.0 vs spec/dummy/config/initializers/doorkeeper.rb in doorkeeper-mongodb-4.2.0

- old
+ new

@@ -27,10 +27,15 @@ # reuse_access_token # Issue access tokens with refresh token (disabled by default) use_refresh_token + # Opt out of breaking api change to the native authorization code flow. Opting out sets the authorization + # code response route for native redirect uris to oauth/authorize/<code>. The default is oauth/authorize/native?code=<code>. + # Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/1143 + # opt_out_native_route_change + # Provide support for an owner to be assigned to each registered application (disabled by default) # Optional parameter confirmation: true (default false) if you want to enforce ownership of # a registered application # Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support # enable_application_owner confirmation: false @@ -81,9 +86,20 @@ # before enabling: # http://tools.ietf.org/html/rfc6819#section-4.4.2 # http://tools.ietf.org/html/rfc6819#section-4.4.3 # # grant_flows %w[authorization_code client_credentials] + + # Hook into the strategies' request & response life-cycle in case your + # application needs advanced customization or logging: + # + # before_successful_strategy_response do |request| + # puts "BEFORE HOOK FIRED! #{request}" + # end + # + # after_successful_strategy_response do |request, response| + # puts "AFTER HOOK FIRED! #{request}, #{response}" + # end # Under some circumstances you might want to have applications auto-approved, # so that the user skips the authorization step. # For example if dealing with a trusted application. # skip_authorization do |resource_owner, client|