doorkeeper 0.3.0 → 0.4.0

data/.gitignore

@@ -0,0 +1,12 @@
+.bundle/
+.rbx
+*.rbc
+log/*.log
+pkg/
+spec/dummy/db/*.sqlite3
+spec/dummy/log/*.log
+spec/dummy/tmp/
+Gemfile.lock
+gemfiles/*.lock
+spec/generators/tmp
+.rvmrc

data/.rspec

@@ -0,0 +1 @@
+--colour

data/.travis.yml

@@ -0,0 +1,8 @@
+rvm:
+  - 1.9.3
+  - 1.8.7
+  - 1.9.2
+  - rbx
+gemfile:
+  - gemfiles/gemfile.rails-3.1.x
+  - gemfiles/gemfile.rails-3.2.x

data/CHANGELOG.md

@@ -0,0 +1,98 @@
+# Changelog
+
+## 0.4.0
+
+- deprecation
+  - Deprecate authorization_scopes
+- database changes
+  - AccessToken#resource_owner_id is not nullable
+- enhancements
+  - [#83] Add Resource Owner Password Credentials flow [@jaimeiniesta](https://github.com/jaimeiniesta)
+  - [#76] Allow token expiration to be disabled [@mattgreen](https://github.com/mattgreen)
+  - [#b6470a] Add Client Credentials flow
+- internals
+  - [#2ece8d, #f93778] Introduce Client and ErrorResponse classes
+
+## 0.3.4
+
+- Fix attr_accessible for rails 3.2.x
+
+## 0.3.3
+
+- [#86] shrink gem package size
+
+## 0.3.2
+
+- enhancements
+  - [#54] Ignore Authorization: headers that are not Bearer [@miyagawa](https://github.com/miyagawa)
+  - [#58, #64] Add destroy action to applications endpoint [@jaimeiniesta](https://github.com/jaimeiniesta), [@davidfrey](https://github.com/davidfrey)
+  - [#63] TokensController responds with `401 unauthorized` [@jaimeiniesta](https://github.com/jaimeiniesta)
+  - [#67, #72] Fix for mass-assignment [@cicloid](https://github.com/cicloid)
+- internals
+  - [#49] Add Gemnasium status image to README [@laserlemon](https://github.com/laserlemon)
+  - [#50] Fix typos [@tomekw](https://github.com/tomekw)
+  - [#51] Updated the factory_girl_rails dependency, fix expires_in response which returned a float number instead of integer [@antekpiechnik](https://github.com/antekpiechnik)
+  - [#62] Typos, .gitignore [@jaimeiniesta](https://github.com/jaimeiniesta)
+  - [#65] Change _path redirections to _url redirections [@jaimeiniesta](https://github.com/jaimeiniesta)
+  - [#75] Fix unknown method #authenticate_admin! [@mattgreen](https://github.com/mattgreen)
+  - Remove application link in authorized app view
+
+## 0.3.1
+
+- enhancements
+  - [#48] Add if, else options to doorkeeper_for
+  - Add views generator
+- internals
+  - Namespace models
+
+## 0.3.0
+
+- enhancements
+  - [#17, #31] Add support for client credentials in basic auth header [@GoldsteinTechPartners](https://github.com/GoldsteinTechPartners)
+  - [#28] Add indices to migration [@GoldsteinTechPartners](https://github.com/GoldsteinTechPartners)
+  - [#29] Allow doorkeeper to run with rails 3.2 [@john-griffin](https://github.com/john-griffin)
+  - [#30] Improve client's redirect uri validation [@GoldsteinTechPartners](https://github.com/GoldsteinTechPartners)
+  - [#32] Add token (implicit grant) flow [@GoldsteinTechPartners](https://github.com/GoldsteinTechPartners)
+  - [#34] Add support for custom unathorized responses [@GoldsteinTechPartners](https://github.com/GoldsteinTechPartners)
+  - [#36] Remove repetitions from the Authorised Applications view [@carvil](https://github.com/carvil)
+  - When user revoke an application, all tokens for that application are revoked
+  - Error messages now can be translated
+  - Install generator copies the error messages localization file
+- internals
+  - Fix deprecation warnings in ActiveSupport::Base64
+  - Remove deprecation in doorkeeper_for that handles hash arguments
+  - Depends on railties instead of whole rails framework
+  - CI now integrates with rails 3.1 and 3.2
+
+## 0.2.0
+
+- enhancements
+  - [#4] Add authorized applications endpoint
+  - [#5, #11] Add access token scopes
+  - [#10] Add access token expiration by default
+  - [#9, #12] Add refresh token flow
+- internals
+  - [#7] Improve configuration options with :default
+  - Improve configuration options with :builder
+  - Refactor config class
+  - Improve coverage of authorization request integration
+- bug fixes
+  - [#6, #20] Fix access token response headers
+  - Fix issue with state parameter
+- deprecation
+  - deprecate :only and :except options in doorkeeper_for
+
+## 0.1.1
+
+- enhancements
+  - [#3] Authorization code must be short lived and single use
+  - [#2] Improve views provided by doorkeeper
+  - [#1] Skips authorization form if the client has been authorized by the resource owner
+  - Improve readme
+- bugfixes
+  - Fix issue when creating the access token (wrong client id)
+
+## 0.1.0
+
+- Authorization Code flow
+- OAuth applications endpoint

data/Gemfile

@@ -0,0 +1,6 @@
+source "http://rubygems.org"
+
+gemspec
+
+# jquery-rails is used by the dummy application
+gem "jquery-rails"

data/README.md

@@ -1,6 +1,7 @@
 # Doorkeeper - awesome oauth provider for your Rails app.
 
 [![Build Status](https://secure.travis-ci.org/applicake/doorkeeper.png)](http://travis-ci.org/applicake/doorkeeper)
+[![Dependency Status](https://gemnasium.com/applicake/doorkeeper.png)](https://gemnasium.com/applicake/doorkeeper)
 
 Doorkeeper is a gem that makes it easy to introduce OAuth 2 provider functionality to your application.
 
@@ -13,7 +14,7 @@ For more information about the supported features, check out the related [page i
 Put this in your Gemfile:
 
 ``` ruby
-gem 'doorkeeper', '~> 0.3.0'
+gem 'doorkeeper', '~> 0.4.0'
 ```
 
 Run the installation generator with:
@@ -48,11 +49,13 @@ You need to configure Doorkeeper in order to provide resource_owner model and au
 ``` ruby
 Doorkeeper.configure do
   resource_owner_authenticator do |routes|
-    current_user || redirect_to('/sign_in', :alert => "Needs sign in.") # returns nil if current_user is not logged in
+    current_user || redirect_to(routes.login_url) # returns nil if current_user is not logged in
   end
 end
 ```
 
+This block runs into the context of your Rails application, and it has access to `current_user` method, for example.
+
 If you use [devise](https://github.com/plataformatec/devise), you may want to use warden to authenticate the block:
 
 ``` ruby
@@ -61,6 +64,8 @@ resource_owner_authenticator do |routes|
 end
 ```
 
+If you are not using devise, you may want to check other ways of authentication [here](https://github.com/applicake/doorkeeper/wiki/Authenticating-using-Clearance-DIY).
+
 ## Protecting resources with OAuth (a.k.a your API endpoint)
 
 To protect your API with OAuth, doorkeeper only requires you to call `doorkeeper_for` helper, specifying the actions you want to protect.
@@ -70,7 +75,7 @@ For example, if you have a products controller under api/v1, you can require the
 ``` ruby
 class Api::V1::ProductsController < Api::V1::ApiController
   doorkeeper_for :all                     # Require access token for all actions
-  doorkeeper_for :all, :except => :index  # All actions except show
+  doorkeeper_for :all, :except => :index  # All actions except index
   doorkeeper_for :index, :show            # Only for index and show action
 
   # your actions
@@ -79,10 +84,29 @@ end
 
 You don't need to setup any before filter, `doorkeeper_for` will handle that for you.
 
+You can pass `if` or `unless` blocks that would specify when doorkeeper has to guard the access.
+
+``` ruby
+class Api::V1::ProductsController < Api::V1::ApiController
+  doorkeeper_for :all, :if => lambda { request.xhr? }
+end
+```
+
 ### Access Token Scopes
 
 You can also require the access token to have specific scopes in certain actions:
 
+First configure the scopes in `initializers/doorkeeper.rb`
+
+```ruby
+Doorkeeper.configure do
+  default_scope :public # if no scope was requested, this will be the default
+  optional_scope :admin, :write
+end
+```
+
+The in your controllers:
+
 ```ruby
 class Api::V1::ProductsController < Api::V1::ApiController
   doorkeeper_for :index, :show,    :scopes => [:public]
@@ -117,12 +141,24 @@ end
 
 In this example, we're returning the credentials (`me.json`) of the access token owner.
 
+## Upgrading
+
+If you want to upgrade doorkeeper to a new version, check out the [upgrading notes](https://github.com/applicake/doorkeeper/wiki/Migration-from-old-versions) and take a look at the [changelog](https://github.com/applicake/doorkeeper/blob/master/CHANGELOG.md).
+
 ## Other resources
 
+### Wiki
+
+You can find everything about doorkeeper in our [wiki here](https://github.com/applicake/doorkeeper/wiki).
+
 ### Live demo
 
 Check out this [live demo](http://doorkeeper-provider.herokuapp.com) hosted on heroku. For more demos check out [the wiki](https://github.com/applicake/doorkeeper/wiki/Example-Applications).
 
+### Screencast
+
+Check out this screencast from [railscasts.com](http://railscasts.com/): [#353 OAuth with Doorkeeper](http://railscasts.com/episodes/353-oauth-with-doorkeeper)
+
 ### Client applications
 
 After you set up the provider, you may want to create a client application to test the integration. Check out these [client examples](https://github.com/applicake/doorkeeper/wiki/Example-Applications) in our wiki or follow this [tutorial here](https://github.com/applicake/doorkeeper/wiki/Testing-your-provider-with-OAuth2-gem).
@@ -135,14 +171,14 @@ Also, check out our [contributing guidelines page](https://github.com/applicake/
 
 ### Supported ruby versions
 
-All supported ruby versions are [listed here](https://github.com/applicake/doorkeeper/wiki/Supported-Ruby-versions)
+All supported ruby versions are [listed here](https://github.com/applicake/doorkeeper/wiki/Supported-Ruby-&-Rails-versions).
 
 ## Additional information
 
 ### Maintainers
 
-- Felipe Elias Philipp ([github.com/felipeelias](https://github.com/felipeelias))
-- Piotr Jakubowski ([github.com/piotrj](https://github.com/piotrj))
+- Felipe Elias Philipp ([github.com/felipeelias](https://github.com/felipeelias), [twitter.com/felipeelias](https://twitter.com/felipeelias))
+- Piotr Jakubowski ([github.com/piotrj](https://github.com/piotrj), [twitter.com/piotrjakubowski](https://twitter.com/piotrjakubowski))
 
 ### Contributors
 

data/app/controllers/doorkeeper/application_controller.rb

@@ -2,17 +2,6 @@ module Doorkeeper
   class ApplicationController < ActionController::Base
     private
 
-    def parse_client_info_from_basic_auth
-      auth_header = request.env['HTTP_AUTHORIZATION']
-      return unless auth_header && auth_header =~ /^Basic (.*)/m
-      client_info = Base64.decode64($1).split(/:/, 2)
-      client_id = client_info[0]
-      client_secret = client_info[1]
-      return if client_id.nil? || client_secret.nil?
-      params[:client_id] = client_id
-      params[:client_secret] = client_secret
-    end
-
     def authenticate_resource_owner!
       current_resource_owner
     end
@@ -21,6 +10,10 @@ module Doorkeeper
       instance_exec(main_app, &Doorkeeper.configuration.authenticate_resource_owner)
     end
 
+    def resource_owner_from_credentials
+      instance_exec(main_app, &Doorkeeper.configuration.resource_owner_from_credentials)
+    end
+
     def authenticate_admin!
       if block = Doorkeeper.configuration.authenticate_admin
         instance_exec(main_app, &block)

data/app/controllers/doorkeeper/applications_controller.rb

@@ -1,5 +1,5 @@
 module Doorkeeper
-  class ApplicationsController < ApplicationController
+  class ApplicationsController < Doorkeeper::ApplicationController
     respond_to :html
 
     before_filter :authenticate_admin!
@@ -31,5 +31,11 @@ module Doorkeeper
       flash[:notice] = "Application updated" if @application.update_attributes(params[:application])
       respond_with @application
     end
+
+    def destroy
+      @application = Application.find(params[:id])
+      flash[:notice] = "Application deleted" if @application.destroy
+      redirect_to applications_url
+    end
   end
 end

data/app/controllers/doorkeeper/authorizations_controller.rb

@@ -10,6 +10,7 @@ class Doorkeeper::AuthorizationsController < Doorkeeper::ApplicationController
     elsif authorization.redirect_on_error?
       redirect_to authorization.invalid_redirect_uri
     else
+      @error = authorization.error_response
       render :error
     end
   end
@@ -20,6 +21,7 @@ class Doorkeeper::AuthorizationsController < Doorkeeper::ApplicationController
     elsif authorization.redirect_on_error?
       redirect_to authorization.invalid_redirect_uri
     else
+      @error = authorization.error_response
       render :error
     end
   end
@@ -31,7 +33,15 @@ class Doorkeeper::AuthorizationsController < Doorkeeper::ApplicationController
 
   private
 
+  def authorization_params
+    params.has_key?(:authorization) ? params[:authorization] : params
+  end
+
+  def client
+    @client ||= Doorkeeper::OAuth::Client.find(authorization_params[:client_id])
+  end
+
   def authorization
-    @authorization ||= Doorkeeper::OAuth::AuthorizationRequest.new(current_resource_owner, params)
+    @authorization ||= Doorkeeper::OAuth::AuthorizationRequest.new(client, current_resource_owner, authorization_params)
   end
 end

data/app/controllers/doorkeeper/authorized_applications_controller.rb

@@ -2,11 +2,11 @@ class Doorkeeper::AuthorizedApplicationsController < Doorkeeper::ApplicationCont
   before_filter :authenticate_resource_owner!
 
   def index
-    @applications = Application.authorized_for(current_resource_owner)
+    @applications = Doorkeeper::Application.authorized_for(current_resource_owner)
   end
 
   def destroy
-    AccessToken.revoke_all_for params[:id], current_resource_owner
-    redirect_to authorized_applications_path, :notice => "Application revoked."
+    Doorkeeper::AccessToken.revoke_all_for params[:id], current_resource_owner
+    redirect_to authorized_applications_url, :notice => "Application revoked."
   end
 end

data/app/controllers/doorkeeper/tokens_controller.rb

@@ -1,7 +1,4 @@
 class Doorkeeper::TokensController < Doorkeeper::ApplicationController
-
-  before_filter :parse_client_info_from_basic_auth, :only => :create
-
   def create
     response.headers.merge!({
       'Pragma'        => 'no-cache',
@@ -10,13 +7,30 @@ class Doorkeeper::TokensController < Doorkeeper::ApplicationController
     if token.authorize
       render :json => token.authorization
     else
-      render :json => token.error_response
+      render :json => token.error_response, :status => token.error_response.status
     end
   end
 
   private
 
+  def client
+    @client ||= Doorkeeper::OAuth::Client.authenticate(credentials)
+  end
+
+  def credentials
+    methods = Doorkeeper.configuration.client_credentials_methods
+    @credentials ||= Doorkeeper::OAuth::Client::Credentials.from_request(request, *methods)
+  end
+
   def token
-    @token ||= Doorkeeper::OAuth::AccessTokenRequest.new(params)
+    case params[:grant_type]
+    when 'password'
+      owner = resource_owner_from_credentials
+      @token ||= Doorkeeper::OAuth::PasswordAccessTokenRequest.new(client, owner, params)
+    when 'client_credentials'
+      @token ||= Doorkeeper::OAuth::ClientCredentialsRequest.new(Doorkeeper.configuration, client, params)
+    else
+      @token ||= Doorkeeper::OAuth::AccessTokenRequest.new(client, params)
+    end
   end
 end

data/app/models/doorkeeper/access_grant.rb

@@ -0,0 +1,28 @@
+module Doorkeeper
+  class AccessGrant < ActiveRecord::Base
+    include Doorkeeper::OAuth::Helpers
+    include Doorkeeper::Models::Expirable
+    include Doorkeeper::Models::Revocable
+    include Doorkeeper::Models::Scopes
+
+    self.table_name = :oauth_access_grants
+
+    belongs_to :application
+
+    attr_accessible :resource_owner_id, :application_id, :expires_in, :redirect_uri, :scopes
+
+    validates :resource_owner_id, :application_id, :token, :expires_in, :redirect_uri, :presence => true
+
+    before_validation :generate_token, :on => :create
+
+    def accessible?
+      !expired? && !revoked?
+    end
+
+    private
+
+    def generate_token
+      self.token = UniqueToken.generate_for :token, self.class
+    end
+  end
+end

data/app/models/doorkeeper/access_token.rb

@@ -0,0 +1,65 @@
+module Doorkeeper
+  class AccessToken < ActiveRecord::Base
+    include Doorkeeper::OAuth::Helpers
+    include Doorkeeper::Models::Expirable
+    include Doorkeeper::Models::Revocable
+    include Doorkeeper::Models::Scopes
+
+    self.table_name = :oauth_access_tokens
+
+    belongs_to :application
+
+    scope :accessible, where(:revoked_at => nil)
+
+    validates :application_id, :token, :presence => true
+
+    attr_accessor :use_refresh_token
+    attr_accessible :application_id, :resource_owner_id, :expires_in, :scopes, :use_refresh_token
+
+    before_validation :generate_token, :on => :create
+    before_validation :generate_refresh_token, :on => :create, :if => :use_refresh_token?
+
+    def self.revoke_all_for(application_id, resource_owner)
+      where(:application_id => application_id,
+              :resource_owner_id => resource_owner.id).delete_all
+    end
+
+    def self.matching_token_for(application, resource_owner_or_id, scopes)
+      token = last_authorized_token_for(application, resource_owner_or_id)
+      token if token && ScopeChecker.matches?(token.scopes, scopes)
+    end
+
+    def self.last_authorized_token_for(application, resource_owner_or_id)
+      resource_owner_id = resource_owner_or_id.kind_of?(ActiveRecord::Base) ? resource_owner_or_id.id : resource_owner_or_id
+      accessible.
+        where(:application_id => application.id,
+              :resource_owner_id => resource_owner_id).
+        order("created_at desc").
+        limit(1).
+        first
+    end
+    private_class_method :last_authorized_token_for
+
+    def token_type
+      "bearer"
+    end
+
+    def accessible?
+      !expired? && !revoked?
+    end
+
+    def use_refresh_token?
+      self.use_refresh_token
+    end
+
+    private
+
+    def generate_refresh_token
+      self.refresh_token = UniqueToken.generate_for :refresh_token, self.class
+    end
+
+    def generate_token
+      self.token = UniqueToken.generate_for :token, self.class
+    end
+  end
+end

data/app/models/doorkeeper/application.rb

@@ -0,0 +1,54 @@
+module Doorkeeper
+  class Application < ActiveRecord::Base
+    include Doorkeeper::OAuth::Helpers
+
+    self.table_name = :oauth_applications
+
+    has_many :access_grants, :dependent => :destroy
+    has_many :access_tokens, :dependent => :destroy
+    has_many :authorized_tokens, :class_name => "AccessToken", :conditions => { :revoked_at => nil }
+    has_many :authorized_applications, :through => :authorized_tokens, :source => :application
+
+    validates :name, :secret, :redirect_uri, :presence => true
+    validates :uid, :presence => true, :uniqueness => true
+    validate :validate_redirect_uri
+
+    before_validation :generate_uid, :generate_secret, :on => :create
+
+    attr_accessible :name, :redirect_uri
+
+    def self.authenticate(uid, secret)
+      find_by_uid_and_secret(uid, secret)
+    end
+
+    def self.column_names_with_table
+      self.column_names.map { |c| "oauth_applications.#{c}" }
+    end
+
+    def self.authorized_for(resource_owner)
+      joins(:authorized_applications).
+        where(:oauth_access_tokens => { :resource_owner_id => resource_owner.id }).
+        group(column_names_with_table.join(','))
+    end
+
+    def validate_redirect_uri
+      return unless redirect_uri
+      uri = URI.parse(redirect_uri)
+      errors.add(:redirect_uri, "cannot contain a fragment.") unless uri.fragment.nil?
+      errors.add(:redirect_uri, "must be an absolute URL.") if uri.scheme.nil? || uri.host.nil?
+      errors.add(:redirect_uri, "cannot contain a query parameter.") unless uri.query.nil?
+    rescue URI::InvalidURIError => e
+      errors.add(:redirect_uri, "must be a valid URI.")
+    end
+
+    private
+
+    def generate_uid
+      self.uid = UniqueToken.generate_for :uid, self.class
+    end
+
+    def generate_secret
+      self.secret = UniqueToken.generate_for :secret, self.class
+    end
+  end
+end

data/app/views/doorkeeper/applications/index.html.erb

@@ -16,7 +16,7 @@
     </thead>
     <tbody>
       <% @applications.each do |application| %>
-        <tr>
+        <tr id="application_<%= application.id %>">
           <td><%= link_to application.name, application %></td>
           <td><%= application.redirect_uri %></td>
           <td><%= link_to 'Edit', edit_application_path(application) %></td>

data/app/views/doorkeeper/authorizations/error.html.erb

@@ -1,6 +1,6 @@
 <div class="span16">
   <h2>An error has occurred</h2>
   <p>
-    <pre><%= t @authorization.error, :scope => [:doorkeeper, :errors, :messages] %></pre>
+    <pre><%= @error.description %></pre>
   </p>
 </div>

data/app/views/doorkeeper/authorizations/new.html.erb

@@ -9,29 +9,29 @@
   </p>
   <ul>
     <% @authorization.scopes.each do |scope| %>
-      <li><%= scope.description %></li>
+      <li><%= t scope, :scope => [:doorkeeper, :scopes]  %></li>
     <% end %>
   </ul>
   <% end %>
 
   <div class="inline_block">
-    <%= form_tag authorization_path do %>
-      <%= hidden_field_tag :client_id, @authorization.client_id %>
-      <%= hidden_field_tag :redirect_uri, @authorization.redirect_uri %>
-      <%= hidden_field_tag :state, @authorization.state %>
-      <%= hidden_field_tag :response_type, @authorization.response_type %>
-      <%= hidden_field_tag :scope, @authorization.scope %>
-      <%= submit_tag "Authorize", :class => "btn success" %> or
+    <%= form_for @authorization, :as => :authorization, :url => authorization_path, :method => :post do |f| %>
+      <%= f.hidden_field :client_id %>
+      <%= f.hidden_field :redirect_uri %>
+      <%= f.hidden_field :state %>
+      <%= f.hidden_field :response_type %>
+      <%= f.hidden_field :scope %>
+      <%= f.submit "Authorize", :class => "btn success" %> or
     <% end %>
   </div>
   <div class="inline_block">
-    <%= form_tag authorization_path, :method => :delete do %>
-      <%= hidden_field_tag :client_id, @authorization.client_id %>
-      <%= hidden_field_tag :redirect_uri, @authorization.redirect_uri %>
-      <%= hidden_field_tag :state, @authorization.state %>
-      <%= hidden_field_tag :response_type, @authorization.response_type %>
-      <%= hidden_field_tag :scope, @authorization.scope %>
-      <%= button_tag "Deny", :class => "btn" %>
+    <%= form_for @authorization, :as => :authorization, :url => authorization_path, :method => :delete do |f| %>
+      <%= f.hidden_field :client_id %>
+      <%= f.hidden_field :redirect_uri %>
+      <%= f.hidden_field :state %>
+      <%= f.hidden_field :response_type %>
+      <%= f.hidden_field :scope %>
+      <%= f.submit "Deny", :class => "btn" %>
     <% end %>
   </div>
 </div>

data/app/views/doorkeeper/authorized_applications/index.html.erb

@@ -15,12 +15,11 @@
     <tbody>
       <% @applications.each do |application| %>
         <tr>
-          <td><%= link_to application.name, application %></td>
+          <td><%= application.name %></td>
           <td><%= application.created_at %></td>
           <td><%= link_to 'Revoke', authorized_application_path(application), :confirm => 'Are you sure?', :method => :delete, :class => 'btn danger' %></td>
         </tr>
       <% end %>
     </tbody>
   </table>
-
 </div>

data/config/locales/en.yml

@@ -18,3 +18,6 @@ en:
         invalid_client: 'Client authentication failed due to unknown client, no client authentication included, or unsupported authentication method.'
         invalid_grant: 'The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.'
         unsupported_grant_type: 'The authorization grant type is not supported by the authorization server.'
+
+        # Password Access token errors
+        invalid_resource_owner: 'The provided resource owner credentials are not valid, or resource owner cannot be found'

data/doorkeeper.gemspec

@@ -0,0 +1,28 @@
+$:.push File.expand_path("../lib", __FILE__)
+
+require "doorkeeper/version"
+
+Gem::Specification.new do |s|
+  s.name        = "doorkeeper"
+  s.version     = Doorkeeper::VERSION
+  s.authors     = ["Felipe Elias Philipp", "Piotr Jakubowski"]
+  s.email       = ["felipe@applicake.com", "piotr.jakubowski@applicake.com"]
+  s.homepage    = "https://github.com/applicake/doorkeeper"
+  s.summary     = "Doorkeeper is an OAuth 2 provider for Rails."
+  s.description = "Doorkeeper is an OAuth 2 provider for Rails."
+
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- test/*`.split("\n")
+  s.require_paths = ["lib"]
+
+  s.add_dependency "railties", "~> 3.1"
+
+  s.add_development_dependency "sqlite3", "~> 1.3.5"
+  s.add_development_dependency "rspec-rails", "~> 2.10.0"
+  s.add_development_dependency "capybara", "~> 1.1.2"
+  s.add_development_dependency "generator_spec", "~> 0.8.5"
+  s.add_development_dependency "factory_girl", "~> 2.6.4"
+  s.add_development_dependency "timecop", "~> 0.3.5"
+  s.add_development_dependency "database_cleaner", "~> 0.7.1"
+  s.add_development_dependency "bcrypt-ruby", "~> 3.0.1"
+end

data/gemfiles/gemfile.rails-3.1.x

@@ -0,0 +1,7 @@
+source 'http://rubygems.org'
+
+gem 'rails', '~> 3.1.0'
+gem 'jquery-rails'
+gem 'doorkeeper', :path => '../'
+
+gemspec :path => '../'