CVE-2018-1000211: Public apps can't revoke tokens in Doorkeeper
TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access »
CVE-2018-1000088: Stored XSS in Doorkeeper
Software Description Doorkeeper is a Ruby gem that makes it easy to introduce OAuth 2 provider functionality to a Rails or Grape application. Depending on how »
Debugging exceptions Rails 5 jbuilder views
There comes a time where regardless of your unit testing you have errors in production. But, alas, the exception isn't in your controller itself but the »
CVE-2015-7225: OTP reuse in Devise-Two-Factor
TL;DR: Once a user successfully provides a valid OTP, that OTP can be replayed for the duration of the timestep. Upgrade to version 2.0. »
CVE-2016-6582: Doorkeeper fails to revoke OAuth 2.0 public client's access token in revocation request
TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access »