Integrating SAML SSO

[KevinColemanInc]

Is there any documentation for creating custom grant types?

Basically, I want to be able to issue oAuth tokens if the client provides valid SAML parameters. I am following this draft https://tools.ietf.org/html/draft-ietf-oauth-saml2-bearer-03 and it proposes a saml sso grant type.

[KevinColemanInc]

looking at the code it looks like I need to create my own strategy and it figures out what klass to use for a grant type based on camelized grant_type.

So if the spec wants the grant type to be: 'http://oauth.net/grant_type/assertion/saml/2.0/bearer' I am thinking this code needs to be changed to something with more flexible grant_type options.

[tute]

Is this aa bug in doorkeeper? Is there anything we can do in the main repository for you to more easily implement the SAML strategy you are after? I suggest you ask in StackOverflow too, as someone there might have done something similar to this and might be able to better help.

[KevinColemanInc]

@tute, its not so much a bug in doorkeeper in that, the draft spec wants this string to be the grant type: http://oauth.net/grant_type/assertion/saml/2.0/bearer

But, the way doorkeeper is currently designed, it camelizes and constantizes the grant type into a class name. This works for grant types like 'password' or 'implicit_grant', but it won't work for a grant type that looks like a URI.

I propose that grant types to classes are mapped via a hash instead of inferring the class from the name. This would give more flexibility in the future to support grant types that are not formatted with lowercase_separated_by_underscores.

[tute]

I propose that grant types to classes are mapped via a hash instead of inferring the class from the name. This would give more flexibility in the future to support grant types that are not formatted with lowercase_separated_by_underscores.

Here is an implementation that addresses this issue: #733

[tute]

Also related with: doorkeeper-gem/doorkeeper-grants_assertion#9 (comment)

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.