Issues

• Refreshing with a narrowed resource also narrows the refresh token (RFC 8707)

  doorkeeper-gem/doorkeeper#1955 · Filter by author 55728 opened on Sep 23, 2026

• force_pkce silently does nothing when the PKCE columns are missing

  doorkeeper-gem/doorkeeper#1954 · Filter by author 55728 opened on Sep 23, 2026

• Support for Pushed Authorization Requests?

  feature request
  doorkeeper-gem/doorkeeper#1949 · Filter by author ThisIsMissEm opened on Sep 21, 2026

• Persist per-client token endpoint authentication methods on oauth_applications

  feature requestsecurity
  doorkeeper-gem/doorkeeper#1948 · Filter by author 55728 opened on Sep 20, 2026
  3

  

• Add refresh token chain tracking to support grant-level revocation (RFC 7009 §2.1)

  doorkeeper-gem/doorkeeper#1945 · Filter by author 55728 opened on Sep 19, 2026
  

• Client ID Metadata Documents (CIMDs)

  feature request
  doorkeeper-gem/doorkeeper#1875 · Filter by author ThisIsMissEm opened on Jul 23, 2026
  6

  

• Support OAuth RFC - JWT for Client Authentication and Authorization Grants

  doorkeeper-gem/doorkeeper#1768 · Filter by author hagaivcita opened on Apr 9, 2025
  11

• There is no way to refresh an access token without revoking the previous access token

  doorkeeper-gem/doorkeeper#1730 · Filter by author ransombriggs opened on Sep 10, 2024
  4

  

• Refresh Tokens as-implemented are susceptible to Refresh Token Reuse Attacks

  doorkeeper-gem/doorkeeper#1719 · Filter by author ThisIsMissEm opened on Jul 25, 2024
  3

• Always requiring redirect_uri is not compliant to RFC 6749

  doorkeeper-gem/doorkeeper#1678 · Filter by author westnordost opened on Nov 22, 2023
  6

• Better support for credential rotation

  feature request
  doorkeeper-gem/doorkeeper#1675 · Filter by author sgallag-insta opened on Oct 25, 2023
  2

  

• Support OAuth DPoP

  feature request
  doorkeeper-gem/doorkeeper#1655 · Filter by author hickford opened on Apr 25, 2023
  1

• Is there a way to store Doorkeeper::AccessToken data inside Doorkeeper::JWT (and not use db-backed tokens)?

  feature request
  doorkeeper-gem/doorkeeper#1600 · Filter by author NeilSlater-Clixifix opened on Nov 8, 2022
  11