• Setup Client
• Obtain Access Token
• Access to Protected Resource

• Authorization Endpoint
• Token Endpoint
• Resource Endpoint

Before starting OAuth2 server implementation, read RFC 6749 and RFC 6750.

This gem is designed for those who understand OAuth RFCs.

Using this gem, you need to define these things by yourself.

• Client Management Policy
• API Security Policy
• API Scope Design
• Token Design (lifetime, opaque string or JWT etc.)
• etc.

Call Rack::OAuth2.debug!, then you'll see all HTTP requests after that line in the log.

In Rails, you'll need to set Rack::OAuth2.logger = Rails.logger.

Rack::OAuth2.debug!
Rack::OAuth2.logger = Rails.logger