Note that there are some explanatory texts on larger screens.

plurals
  1. POOAuth2 Resource Owner Password Credentials flow
    primarykey
    data
    text
    <p>Does the OAuth2 Resource Owner Password Credentials flow only need the following informations for authentication:</p> <pre><code> grant_type: password username: test@test.de password: test </code></pre> <p>Or does it need also the <code>client_id</code> and <code>client_secret</code>? I ask, because I want to use <a href="https://github.com/simplabs/ember-simple-auth" rel="nofollow noreferrer">Ember-Simple-Auth</a> together with <a href="https://github.com/applicake/doorkeeper" rel="nofollow noreferrer">Doorkeeper</a>. Both implement the flow, but Ember-Simple-Auth didn't use <code>client_id</code> and <code>client_secret</code>, whereas Doorkeeper needs that information to work. So I think one of these doesn't implement the OAuth2 specs correctly.</p> <p><strong>Edit 1:</strong></p> <ul> <li><a href="https://github.com/applicake/doorkeeper/wiki/Supported-Features" rel="nofollow noreferrer">Doorkeeper features</a></li> <li><a href="https://github.com/simplabs/ember-simple-auth#embersimpleauth" rel="nofollow noreferrer">Ember-Simple-Auth features</a></li> </ul> <p>I also have looked at the specs before, but I want to be sure, before I fill a bug report for Doorkeeper gem, but there is also this section in the specs:</p> <blockquote> <p>If the client type is confidential or the client was issued client credentials (or assigned other authentication requirements), the client MUST authenticate with the authorization server as described in Section 3.2.1.</p> </blockquote> <p><strong>Edit 2</strong></p> <p>While looking into the tests of ember-simple-auth, I saw that it also tests for request parameters <code>client_id</code> and <code>client_secret</code>. Therefor I looked deeper into the code and found out how to setup id and secret.</p> <pre><code>App.LoginController = Ember.Controller.extend(Ember.SimpleAuth.LoginControllerMixin, { client_id: 'id', client_secret: 'secret' }) </code></pre> <p><strong>Edit 3</strong></p> <p>Since a big refactoring in Ember-SimpleAuth, the solution shown in Edit 2 doesn't work anymore. But Doorkeeper also changes and now <code>client_id</code> and <code>client_secret</code> are optional.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload