RubyGems - doorkeeper - Versions diffs - 5.4.0.rc1 → 5.4.0.rc2 - Mend

doorkeeper 5.4.0.rc1 → 5.4.0.rc2

Potentially problematic release.

This version of doorkeeper might be problematic. Click here for more details.

Files changed (181) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +28 -1
data/app/controllers/doorkeeper/applications_controller.rb +3 -3
data/app/controllers/doorkeeper/authorized_applications_controller.rb +1 -1
data/app/views/doorkeeper/applications/_form.html.erb +1 -1
data/lib/doorkeeper.rb +1 -1
data/lib/doorkeeper/config.rb +24 -18
data/lib/doorkeeper/config/abstract_builder.rb +1 -1
data/lib/doorkeeper/helpers/controller.rb +4 -4
data/lib/doorkeeper/models/access_grant_mixin.rb +11 -5
data/lib/doorkeeper/models/access_token_mixin.rb +9 -5
data/lib/doorkeeper/models/application_mixin.rb +5 -4
data/lib/doorkeeper/oauth/client_credentials/creator.rb +2 -2
data/lib/doorkeeper/oauth/client_credentials/validator.rb +3 -1
data/lib/doorkeeper/oauth/password_access_token_request.rb +1 -1
data/lib/doorkeeper/oauth/pre_authorization.rb +5 -4
data/lib/doorkeeper/oauth/token.rb +1 -2
data/lib/doorkeeper/orm/active_record.rb +10 -2
data/lib/doorkeeper/orm/active_record/mixins/access_grant.rb +1 -1
data/lib/doorkeeper/orm/active_record/mixins/access_token.rb +1 -1
data/lib/doorkeeper/orm/active_record/mixins/application.rb +64 -9
data/lib/doorkeeper/request/refresh_token.rb +2 -1
data/lib/doorkeeper/version.rb +1 -1
data/lib/generators/doorkeeper/templates/migration.rb.erb +12 -5
metadata +5 -299
data/Appraisals +0 -26
data/CODE_OF_CONDUCT.md +0 -46
data/CONTRIBUTING.md +0 -49
data/Dangerfile +0 -67
data/Dockerfile +0 -29
data/Gemfile +0 -25
data/NEWS.md +0 -1
data/RELEASING.md +0 -11
data/Rakefile +0 -28
data/SECURITY.md +0 -15
data/UPGRADE.md +0 -2
data/bin/console +0 -30
data/doorkeeper.gemspec +0 -42
data/gemfiles/rails_5_0.gemfile +0 -19
data/gemfiles/rails_5_1.gemfile +0 -19
data/gemfiles/rails_5_2.gemfile +0 -19
data/gemfiles/rails_6_0.gemfile +0 -19
data/gemfiles/rails_master.gemfile +0 -19
data/spec/controllers/application_metal_controller_spec.rb +0 -64
data/spec/controllers/applications_controller_spec.rb +0 -274
data/spec/controllers/authorizations_controller_spec.rb +0 -743
data/spec/controllers/protected_resources_controller_spec.rb +0 -361
data/spec/controllers/token_info_controller_spec.rb +0 -50
data/spec/controllers/tokens_controller_spec.rb +0 -499
data/spec/dummy/Rakefile +0 -9
data/spec/dummy/app/assets/config/manifest.js +0 -2
data/spec/dummy/app/controllers/application_controller.rb +0 -5
data/spec/dummy/app/controllers/custom_authorizations_controller.rb +0 -9
data/spec/dummy/app/controllers/full_protected_resources_controller.rb +0 -14
data/spec/dummy/app/controllers/home_controller.rb +0 -18
data/spec/dummy/app/controllers/metal_controller.rb +0 -13
data/spec/dummy/app/controllers/semi_protected_resources_controller.rb +0 -13
data/spec/dummy/app/helpers/application_helper.rb +0 -7
data/spec/dummy/app/models/user.rb +0 -11
data/spec/dummy/app/views/home/index.html.erb +0 -0
data/spec/dummy/app/views/layouts/application.html.erb +0 -14
data/spec/dummy/config.ru +0 -6
data/spec/dummy/config/application.rb +0 -51
data/spec/dummy/config/boot.rb +0 -7
data/spec/dummy/config/database.yml +0 -15
data/spec/dummy/config/environment.rb +0 -5
data/spec/dummy/config/environments/development.rb +0 -31
data/spec/dummy/config/environments/production.rb +0 -64
data/spec/dummy/config/environments/test.rb +0 -45
data/spec/dummy/config/initializers/backtrace_silencers.rb +0 -9
data/spec/dummy/config/initializers/doorkeeper.rb +0 -166
data/spec/dummy/config/initializers/secret_token.rb +0 -10
data/spec/dummy/config/initializers/session_store.rb +0 -10
data/spec/dummy/config/initializers/wrap_parameters.rb +0 -16
data/spec/dummy/config/locales/doorkeeper.en.yml +0 -5
data/spec/dummy/config/routes.rb +0 -13
data/spec/dummy/db/migrate/20111122132257_create_users.rb +0 -11
data/spec/dummy/db/migrate/20120312140401_add_password_to_users.rb +0 -7
data/spec/dummy/db/migrate/20151223192035_create_doorkeeper_tables.rb +0 -69
data/spec/dummy/db/migrate/20151223200000_add_owner_to_application.rb +0 -9
data/spec/dummy/db/migrate/20160320211015_add_previous_refresh_token_to_access_tokens.rb +0 -13
data/spec/dummy/db/migrate/20170822064514_enable_pkce.rb +0 -8
data/spec/dummy/db/migrate/20180210183654_add_confidential_to_applications.rb +0 -13
data/spec/dummy/db/schema.rb +0 -70
data/spec/dummy/public/404.html +0 -26
data/spec/dummy/public/422.html +0 -26
data/spec/dummy/public/500.html +0 -26
data/spec/dummy/public/favicon.ico +0 -0
data/spec/dummy/script/rails +0 -9
data/spec/factories.rb +0 -30
data/spec/generators/application_owner_generator_spec.rb +0 -28
data/spec/generators/confidential_applications_generator_spec.rb +0 -29
data/spec/generators/enable_polymorphic_resource_owner_generator_spec.rb +0 -47
data/spec/generators/install_generator_spec.rb +0 -36
data/spec/generators/migration_generator_spec.rb +0 -28
data/spec/generators/pkce_generator_spec.rb +0 -28
data/spec/generators/previous_refresh_token_generator_spec.rb +0 -44
data/spec/generators/templates/routes.rb +0 -4
data/spec/generators/views_generator_spec.rb +0 -29
data/spec/grape/grape_integration_spec.rb +0 -137
data/spec/helpers/doorkeeper/dashboard_helper_spec.rb +0 -26
data/spec/lib/config_spec.rb +0 -813
data/spec/lib/doorkeeper_spec.rb +0 -27
data/spec/lib/models/expirable_spec.rb +0 -61
data/spec/lib/models/reusable_spec.rb +0 -40
data/spec/lib/models/revocable_spec.rb +0 -58
data/spec/lib/models/scopes_spec.rb +0 -61
data/spec/lib/models/secret_storable_spec.rb +0 -135
data/spec/lib/oauth/authorization/uri_builder_spec.rb +0 -39
data/spec/lib/oauth/authorization_code_request_spec.rb +0 -180
data/spec/lib/oauth/base_request_spec.rb +0 -210
data/spec/lib/oauth/base_response_spec.rb +0 -45
data/spec/lib/oauth/client/credentials_spec.rb +0 -90
data/spec/lib/oauth/client_credentials/creator_spec.rb +0 -135
data/spec/lib/oauth/client_credentials/issuer_spec.rb +0 -110
data/spec/lib/oauth/client_credentials/validation_spec.rb +0 -57
data/spec/lib/oauth/client_credentials_integration_spec.rb +0 -27
data/spec/lib/oauth/client_credentials_request_spec.rb +0 -108
data/spec/lib/oauth/client_spec.rb +0 -38
data/spec/lib/oauth/code_request_spec.rb +0 -46
data/spec/lib/oauth/code_response_spec.rb +0 -36
data/spec/lib/oauth/error_response_spec.rb +0 -64
data/spec/lib/oauth/error_spec.rb +0 -21
data/spec/lib/oauth/forbidden_token_response_spec.rb +0 -20
data/spec/lib/oauth/helpers/scope_checker_spec.rb +0 -110
data/spec/lib/oauth/helpers/unique_token_spec.rb +0 -21
data/spec/lib/oauth/helpers/uri_checker_spec.rb +0 -262
data/spec/lib/oauth/invalid_request_response_spec.rb +0 -73
data/spec/lib/oauth/invalid_token_response_spec.rb +0 -53
data/spec/lib/oauth/password_access_token_request_spec.rb +0 -201
data/spec/lib/oauth/pre_authorization_spec.rb +0 -218
data/spec/lib/oauth/refresh_token_request_spec.rb +0 -166
data/spec/lib/oauth/scopes_spec.rb +0 -146
data/spec/lib/oauth/token_request_spec.rb +0 -164
data/spec/lib/oauth/token_response_spec.rb +0 -84
data/spec/lib/oauth/token_spec.rb +0 -156
data/spec/lib/option_spec.rb +0 -51
data/spec/lib/request/strategy_spec.rb +0 -54
data/spec/lib/secret_storing/base_spec.rb +0 -60
data/spec/lib/secret_storing/bcrypt_spec.rb +0 -49
data/spec/lib/secret_storing/plain_spec.rb +0 -44
data/spec/lib/secret_storing/sha256_hash_spec.rb +0 -48
data/spec/lib/server_spec.rb +0 -49
data/spec/lib/stale_records_cleaner_spec.rb +0 -102
data/spec/models/doorkeeper/access_grant_spec.rb +0 -175
data/spec/models/doorkeeper/access_token_spec.rb +0 -650
data/spec/models/doorkeeper/application_spec.rb +0 -442
data/spec/requests/applications/applications_request_spec.rb +0 -259
data/spec/requests/applications/authorized_applications_spec.rb +0 -32
data/spec/requests/endpoints/authorization_spec.rb +0 -91
data/spec/requests/endpoints/token_spec.rb +0 -79
data/spec/requests/flows/authorization_code_errors_spec.rb +0 -82
data/spec/requests/flows/authorization_code_spec.rb +0 -530
data/spec/requests/flows/client_credentials_spec.rb +0 -207
data/spec/requests/flows/implicit_grant_errors_spec.rb +0 -46
data/spec/requests/flows/implicit_grant_spec.rb +0 -91
data/spec/requests/flows/password_spec.rb +0 -316
data/spec/requests/flows/refresh_token_spec.rb +0 -241
data/spec/requests/flows/revoke_token_spec.rb +0 -196
data/spec/requests/flows/skip_authorization_spec.rb +0 -66
data/spec/requests/protected_resources/metal_spec.rb +0 -16
data/spec/requests/protected_resources/private_api_spec.rb +0 -83
data/spec/routing/custom_controller_routes_spec.rb +0 -133
data/spec/routing/default_routes_spec.rb +0 -41
data/spec/routing/scoped_routes_spec.rb +0 -47
data/spec/spec_helper.rb +0 -54
data/spec/spec_helper_integration.rb +0 -4
data/spec/support/dependencies/factory_bot.rb +0 -4
data/spec/support/doorkeeper_rspec.rb +0 -22
data/spec/support/helpers/access_token_request_helper.rb +0 -14
data/spec/support/helpers/authorization_request_helper.rb +0 -43
data/spec/support/helpers/config_helper.rb +0 -11
data/spec/support/helpers/model_helper.rb +0 -78
data/spec/support/helpers/request_spec_helper.rb +0 -110
data/spec/support/helpers/url_helper.rb +0 -62
data/spec/support/orm/active_record.rb +0 -5
data/spec/support/shared/controllers_shared_context.rb +0 -133
data/spec/support/shared/hashing_shared_context.rb +0 -36
data/spec/support/shared/models_shared_examples.rb +0 -56
data/spec/validators/redirect_uri_validator_spec.rb +0 -183
data/spec/version/version_spec.rb +0 -17

data/spec/dummy/Rakefile DELETED Viewed

@@ -1,9 +0,0 @@
-#!/usr/bin/env rake
-# frozen_string_literal: true
-# Add your own tasks in files placed in lib/tasks ending in .rake,
-# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
-require File.expand_path("config/application", __dir__)
-Dummy::Application.load_tasks

data/spec/dummy/app/assets/config/manifest.js DELETED Viewed

	@@ -1,2 +0,0 @@
1	- // JS and CSS bundles
2	- //

data/spec/dummy/app/controllers/application_controller.rb DELETED Viewed

@@ -1,5 +0,0 @@
-# frozen_string_literal: true
-class ApplicationController < ActionController::Base
-  protect_from_forgery with: :exception
-end

data/spec/dummy/app/controllers/custom_authorizations_controller.rb DELETED Viewed

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-class CustomAuthorizationsController < ::ApplicationController
-  %w[index show new create edit update destroy].each do |action|
-    define_method action do
-      render nothing: true
-    end
-  end
-end

data/spec/dummy/app/controllers/full_protected_resources_controller.rb DELETED Viewed

@@ -1,14 +0,0 @@
-# frozen_string_literal: true
-class FullProtectedResourcesController < ApplicationController
-  before_action -> { doorkeeper_authorize! :write, :admin }, only: :show
-  before_action :doorkeeper_authorize!, only: :index
-  def index
-    render plain: "index"
-  end
-  def show
-    render plain: "show"
-  end
-end

data/spec/dummy/app/controllers/home_controller.rb DELETED Viewed

@@ -1,18 +0,0 @@
-# frozen_string_literal: true
-class HomeController < ApplicationController
-  def index; end
-  def sign_in
-    session[:user_id] = if Rails.env.development?
-                          User.first || User.create!(name: "Joe", password: "sekret")
-                        else
-                          User.first
-                        end
-    redirect_to "/"
-  end
-  def callback
-    render plain: "ok"
-  end
-end

data/spec/dummy/app/controllers/metal_controller.rb DELETED Viewed

@@ -1,13 +0,0 @@
-# frozen_string_literal: true
-class MetalController < ActionController::Metal
-  include AbstractController::Callbacks
-  include ActionController::Head
-  include Doorkeeper::Rails::Helpers
-  before_action :doorkeeper_authorize!
-  def index
-    self.response_body = { ok: true }.to_json
-  end
-end

data/spec/dummy/app/controllers/semi_protected_resources_controller.rb DELETED Viewed

@@ -1,13 +0,0 @@
-# frozen_string_literal: true
-class SemiProtectedResourcesController < ApplicationController
-  before_action :doorkeeper_authorize!, only: :index
-  def index
-    render plain: "protected index"
-  end
-  def show
-    render plain: "non protected show"
-  end
-end

data/spec/dummy/app/helpers/application_helper.rb DELETED Viewed

@@ -1,7 +0,0 @@
-# frozen_string_literal: true
-module ApplicationHelper
-  def current_user
-    @current_user ||= User.find_by(id: session[:user_id])
-  end
-end

data/spec/dummy/app/models/user.rb DELETED Viewed

@@ -1,11 +0,0 @@
-# frozen_string_literal: true
-class ApplicationRecord < ::ActiveRecord::Base
-  self.abstract_class = true
-end
-class User < ApplicationRecord
-  def self.authenticate!(name, password)
-    User.where(name: name, password: password).first
-  end
-end

data/spec/dummy/app/views/home/index.html.erb DELETED Viewed

File without changes

data/spec/dummy/app/views/layouts/application.html.erb DELETED Viewed

@@ -1,14 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>Dummy</title>
-  <%= csrf_meta_tags %>
-</head>
-<body>
-<%= link_to "Sign in", '/sign_in' %>
-<%= yield %>
-</body>
-</html>

data/spec/dummy/config.ru DELETED Viewed

@@ -1,6 +0,0 @@
-# frozen_string_literal: true
-# This file is used by Rack-based servers to start the application.
-require ::File.expand_path("../config/environment", __FILE__)
-run Dummy::Application

data/spec/dummy/config/application.rb DELETED Viewed

@@ -1,51 +0,0 @@
-require File.expand_path("boot", __dir__)
-require "rails"
-%w[
-  action_controller/railtie
-  action_view/railtie
-  action_cable/engine
-  sprockets/railtie
-].each do |railtie|
-  begin
-    require railtie
-  rescue LoadError => e
-    puts "Error loading '#{railtie}' (#{e.message})"
-  end
-end
-Bundler.require(*Rails.groups)
-require "yaml"
-orm = if DOORKEEPER_ORM =~ /mongoid/
-        Mongoid.load!(File.join(File.dirname(File.expand_path(__FILE__)), "#{DOORKEEPER_ORM}.yml"))
-        :mongoid
-      else
-        DOORKEEPER_ORM
-      end
-require "#{orm}/railtie"
-module Dummy
-  class Application < Rails::Application
-    if Rails.gem_version < Gem::Version.new("5.1")
-      config.action_controller.per_form_csrf_tokens = true
-      config.action_controller.forgery_protection_origin_check = true
-      ActiveSupport.to_time_preserves_timezone = true
-      if DOORKEEPER_ORM =~ /active_record/
-        config.active_record.belongs_to_required_by_default = true
-      end
-      config.ssl_options = { hsts: { subdomains: true } }
-    else
-      config.load_defaults "#{Rails::VERSION::MAJOR}.#{Rails::VERSION::MINOR}"
-    end
-    # Settings in config/environments/* take precedence over those specified here.
-    # Application configuration should go into files in config/initializers
-    # -- all .rb files in that directory are automatically loaded.
-  end
-end

data/spec/dummy/config/boot.rb DELETED Viewed

@@ -1,7 +0,0 @@
-require "rubygems"
-require "bundler/setup"
-orm = ENV["BUNDLE_GEMFILE"].match(/Gemfile\.(.+)\.rb/)
-DOORKEEPER_ORM = (orm && orm[1]) || :active_record unless defined?(DOORKEEPER_ORM)
-$LOAD_PATH.unshift File.expand_path("../../../lib", __dir__)

data/spec/dummy/config/database.yml DELETED Viewed

@@ -1,15 +0,0 @@
-development:
-  adapter: sqlite3
-  database: db/development.sqlite3
-  pool: 5
-  timeout: 5000
-test:
-  adapter: sqlite3
-  database: ":memory:"
-  timeout: 500
-production:
-  adapter: sqlite3
-  database: ":memory:"
-  timeout: 500

data/spec/dummy/config/environment.rb DELETED Viewed

@@ -1,5 +0,0 @@
-# Load the rails application
-require File.expand_path("application", __dir__)
-# Initialize the rails application
-Rails.application.initialize!

data/spec/dummy/config/environments/development.rb DELETED Viewed

@@ -1,31 +0,0 @@
-# frozen_string_literal: true
-Dummy::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
-  # In the development environment your application's code is reloaded on
-  # every request.  This slows down response time but is perfect for development
-  # since you don't have to restart the web server when you make code changes.
-  config.cache_classes = false
-  # Show full error reports and disable caching
-  config.consider_all_requests_local       = true
-  config.action_controller.perform_caching = false
-  # Don't care if the mailer can't send
-  # config.action_mailer.raise_delivery_errors = false
-  # Print deprecation notices to the Rails logger
-  config.active_support.deprecation = :log
-  # Only use best-standards-support built into browsers
-  config.action_dispatch.best_standards_support = :builtin
-  # Do not compress assets
-  config.assets.compress = false
-  # Expands the lines which load the assets
-  config.assets.debug = true
-  config.eager_load = false
-end

data/spec/dummy/config/environments/production.rb DELETED Viewed

@@ -1,64 +0,0 @@
-# frozen_string_literal: true
-Dummy::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
-  # Code is not reloaded between requests
-  config.cache_classes = true
-  # Full error reports are disabled and caching is turned on
-  config.consider_all_requests_local       = false
-  config.action_controller.perform_caching = true
-  # Disable Rails's static asset server (Apache or nginx will already do this)
-  config.serve_static_assets = false
-  # Compress JavaScripts and CSS
-  config.assets.compress = true
-  # Don't fallback to assets pipeline if a precompiled asset is missed
-  config.assets.compile = false
-  # Generate digests for assets URLs
-  config.assets.digest = true
-  # Defaults to Rails.root.join("public/assets")
-  # config.assets.manifest = YOUR_PATH
-  # Specifies the header that your server uses for sending files
-  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
-  # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
-  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  # config.force_ssl = true
-  # See everything in the log (default is :info)
-  # config.log_level = :debug
-  # Use a different logger for distributed setups
-  # config.logger = SyslogLogger.new
-  # Use a different cache store in production
-  # config.cache_store = :mem_cache_store
-  # Enable serving of images, stylesheets, and JavaScripts from an asset server
-  # config.action_controller.asset_host = "http://assets.example.com"
-  # Precompile additional assets (application.js, application.css, and all non-JS/CSS are already added)
-  # config.assets.precompile += %w( search.js )
-  # Disable delivery errors, bad email addresses will be ignored
-  # config.action_mailer.raise_delivery_errors = false
-  # Enable threaded mode
-  # config.threadsafe!
-  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
-  # the I18n.default_locale when a translation can not be found)
-  config.i18n.fallbacks = true
-  # Send deprecation notices to registered listeners
-  config.active_support.deprecation = :notify
-  config.eager_load = true
-end

data/spec/dummy/config/environments/test.rb DELETED Viewed

@@ -1,45 +0,0 @@
-# frozen_string_literal: true
-Dummy::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
-  # The test environment is used exclusively to run your application's
-  # test suite.  You never need to work with it otherwise.  Remember that
-  # your test database is "scratch space" for the test suite and is wiped
-  # and recreated between test runs.  Don't rely on the data there!
-  config.cache_classes = true
-  config.assets.enabled = true
-  config.assets.version = "1.0"
-  config.assets.digest = false
-  # Do not eager load code on boot. This avoids loading your whole application
-  # just for the purpose of running a single test. If you are using a tool that
-  # preloads Rails for running tests, you may have to set it to true.
-  config.eager_load = false
-  # Show full error reports and disable caching
-  config.consider_all_requests_local       = true
-  config.action_controller.perform_caching = false
-  # Raise exceptions instead of rendering exception templates
-  config.action_dispatch.show_exceptions = false
-  # Disable request forgery protection in test environment
-  config.action_controller.allow_forgery_protection = false
-  # Tell Action Mailer not to deliver emails to the real world.
-  # The :test delivery method accumulates sent emails in the
-  # ActionMailer::Base.deliveries array.
-  # config.action_mailer.delivery_method = :test
-  # Use SQL instead of Active Record's schema dumper when creating the test database.
-  # This is necessary if your schema can't be completely dumped by the schema dumper,
-  # like if you have constraints or database-specific column types
-  # config.active_record.schema_format = :sql
-  # Print deprecation notices to the stderr
-  config.active_support.deprecation = :stderr
-  config.eager_load = true
-end

data/spec/dummy/config/initializers/backtrace_silencers.rb DELETED Viewed

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-# Be sure to restart your server when you modify this file.
-# You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
-# Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
-# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
-# Rails.backtrace_cleaner.remove_silencers!

data/spec/dummy/config/initializers/doorkeeper.rb DELETED Viewed

@@ -1,166 +0,0 @@
-# frozen_string_literal: true
-Doorkeeper.configure do
-  # Change the ORM that doorkeeper will use.
-  orm DOORKEEPER_ORM
-  # This block will be called to check whether the resource owner is authenticated or not.
-  resource_owner_authenticator do
-    # Put your resource owner authentication logic here.
-    User.where(id: session[:user_id]).first || redirect_to(root_url, alert: "Needs sign in.")
-  end
-  # If you didn't skip applications controller from Doorkeeper routes in your application routes.rb
-  # file then you need to declare this block in order to restrict access to the web interface for
-  # adding oauth authorized applications. In other case it will return 403 Forbidden response
-  # every time somebody will try to access the admin web interface.
-  #
-  # admin_authenticator do
-  #   # Put your admin authentication logic here.
-  #   # Example implementation:
-  #   Admin.find_by_id(session[:admin_id]) || redirect_to(new_admin_session_url)
-  # end
-  # Authorization Code expiration time (default 10 minutes).
-  # authorization_code_expires_in 10.minutes
-  # Access token expiration time (default 2 hours).
-  # If you want to disable expiration, set this to nil.
-  # access_token_expires_in 2.hours
-  # Reuse access token for the same resource owner within an application (disabled by default)
-  # Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/383
-  # reuse_access_token
-  # Issue access tokens with refresh token (disabled by default)
-  use_refresh_token
-  # Forbids creating/updating applications with arbitrary scopes that are
-  # not in configuration, i.e. `default_scopes` or `optional_scopes`.
-  # (disabled by default)
-  #
-  # enforce_configured_scopes
-  # Provide support for an owner to be assigned to each registered application (disabled by default)
-  # Optional parameter confirmation: true (default false) if you want to enforce ownership of
-  # a registered application
-  # Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support
-  # enable_application_owner confirmation: false
-  # Define access token scopes for your provider
-  # For more information go to
-  # https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
-  default_scopes  :public
-  optional_scopes :write, :update
-  # Change the way client credentials are retrieved from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:client_id` and `:client_secret` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # client_credentials :from_basic, :from_params
-  # Change the way access token is authenticated from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:access_token` or `:bearer_token` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # access_token_methods :from_bearer_authorization, :from_access_token_param, :from_bearer_param
-  # Forces the usage of the HTTPS protocol in non-native redirect uris (enabled
-  # by default in non-development environments). OAuth2 delegates security in
-  # communication to the HTTPS protocol so it is wise to keep this enabled.
-  #
-  # force_ssl_in_redirect_uri !Rails.env.development?
-  # Specify what grant flows are enabled in array of Strings. The valid
-  # strings and the flows they enable are:
-  #
-  # "authorization_code" => Authorization Code Grant Flow
-  # "implicit"           => Implicit Grant Flow
-  # "password"           => Resource Owner Password Credentials Grant Flow
-  # "client_credentials" => Client Credentials Grant Flow
-  #
-  # If not specified, Doorkeeper enables authorization_code and
-  # client_credentials.
-  #
-  # implicit and password grant flows have risks that you should understand
-  # before enabling:
-  #   http://tools.ietf.org/html/rfc6819#section-4.4.2
-  #   http://tools.ietf.org/html/rfc6819#section-4.4.3
-  #
-  # grant_flows %w[authorization_code client_credentials]
-  # Hook into the strategies' request & response life-cycle in case your
-  # application needs advanced customization or logging:
-  #
-  # before_successful_strategy_response do |request|
-  #   puts "BEFORE HOOK FIRED! #{request}"
-  # end
-  #
-  # after_successful_strategy_response do |request, response|
-  #   puts "AFTER HOOK FIRED! #{request}, #{response}"
-  # end
-  # Under some circumstances you might want to have applications auto-approved,
-  # so that the user skips the authorization step.
-  # For example if dealing with a trusted application.
-  # skip_authorization do |resource_owner, client|
-  #   client.superapp? or resource_owner.admin?
-  # end
-  # Configure custom constraints for the Token Introspection request.
-  # By default this configuration option allows to introspect a token by another
-  # token of the same application, OR to introspect the token that belongs to
-  # authorized client (from authenticated client) OR when token doesn't
-  # belong to any client (public token). Otherwise requester has no access to the
-  # introspection and it will return response as stated in the RFC.
-  #
-  # Block arguments:
-  #
-  # @param token [Doorkeeper::AccessToken]
-  #   token to be introspected
-  #
-  # @param authorized_client [Doorkeeper::Application]
-  #   authorized client (if request is authorized using Basic auth with
-  #   Client Credentials for example)
-  #
-  # @param authorized_token [Doorkeeper::AccessToken]
-  #   Bearer token used to authorize the request
-  #
-  # In case the block returns `nil` or `false` introspection responses with 401 status code
-  # when using authorized token to introspect, or you'll get 200 with { "active": false } body
-  # when using authorized client to introspect as stated in the
-  # RFC 7662 section 2.2. Introspection Response.
-  #
-  # Using with caution:
-  # Keep in mind that these three parameters pass to block can be nil as following case:
-  #  `authorized_client` is nil if and only if `authorized_token` is present, and vice versa.
-  #  `token` will be nil if and only if `authorized_token` is present.
-  # So remember to use `&` or check if it is present before calling method on
-  # them to make sure you doesn't get NoMethodError exception.
-  #
-  # You can define your custom check:
-  #
-  # allow_token_introspection do |token, authorized_client, authorized_token|
-  #   if authorized_token
-  #     # customize: require `introspection` scope
-  #     authorized_token.application == token&.application ||
-  #       authorized_token.scopes.include?("introspection")
-  #   elsif token.application
-  #     # `protected_resource` is a new database boolean column, for example
-  #     authorized_client == token.application || authorized_client.protected_resource?
-  #   else
-  #     # public token (when token.application is nil, token doesn't belong to any application)
-  #     true
-  #   end
-  # end
-  #
-  # Or you can completely disable any token introspection:
-  #
-  # allow_token_introspection false
-  #
-  # If you need to block the request at all, then configure your routes.rb or web-server
-  # like nginx to forbid the request.
-  # WWW-Authenticate Realm (default "Doorkeeper").
-  realm "Doorkeeper"
-end