Reputation:
I have an application using Devise. And I want to use OAuth2 in my API for authentication.
Upvotes: 0
Views: 188
Reputation: 11813
Is it possible to implement OAuth2 without using Doorkeeper, OmniAuth etc?
Yes, of course. But you would have to do all the work yourself based on the oAuth 2.0 standard. You can read the specification on what you have to do here.
How could I implement OAuth2 in my app because it must provide 'client_id', 'client_secret', :site?
Read the oAuth 2.0 specs and implement them using standard Rails code. But, it would be much easier to just use existing gems. Also, it is better to use existing well maintained and popular gems, because oAuth2 standard has couple of nuances like setting random "state" while getting a request token. If not considered, that might lead to MiM attacks.
Upvotes: 1