danschultzer
OAuth 2.0 provider for Elixir and Phoenix
In short
Plug n’ play OAuth 2.0 provider library. Just set up a resource owner schema with Ecto (your user schema), install the dependency and run the install task. That’s it! 
ExOauth2Provider
PhoenixOauth2Provider
Background
This is my first full project in Elixir. The reason for building these hex libraries was that I needed a flexible plug n’ play OAuth 2.0 provider for a Phoenix project I’m working on. The other options I found didn’t cut it for me, and I was looking for something akin to Doorkeeper for Rails. Basically a no brainer library, that I can adjust after getting it up and running.
Use case
I wrote a blog post on how you can create a versioned API using OAuth 2.0 access tokens in minutes using this library: https://dreamconception.com/tech/phoenix-full-fledged-api-in-five-minutes/
I hope this can be useful for some of you. Please feel free to help improve the libraries with suggestions or PR’s!
Most Liked
danschultzer
I’ve made a few updates since I wrote this post. Now there’s added support for UUID (or custom primary key type), and works with Phoenix 1.3. Blog post has been updated too. All feedback is welcome
danschultzer
Just updated the tutorial and demo app too:
https://dreamconception.com/tech/phoenix-full-fledged-api-in-five-minutes/
https://github.com/danschultzer/phoenix_ex_oauth2_provider_demo
Happy coding!
danschultzer
Finally got around to rewriting these libraries. With Pow I got a much better idea how these libraries should work.
It will be much easier to contribute to them moving forward It was a major rewrite so there are probably a lot of things that can be refactored, and I have overlooked. Any help would be much appreciated!
ExOauth2Provider v0.5.0 changes
- Schema modules are now generated (with
mix ex_oauth2_provider.gen.schemas). Now all configuration (e.g. binary id) are done on the individual schema modules. Previously there were issues if e.g. some app environment was not available during compilation, and configuration wasn’t particularly explicit. - Configuration are primarily passed through the method calls with fallback to app environment.
- Ecto 3.0 support.
PhoenixOauth2Provider 0.5.0
- Templates are now built in so you can get started without generating any views/templates!
- Phoenix 1.4 support.
Last Post!
spurgus
Hi, I have an app that uses Pow for authentication, and I have set up ExOauth2Provider - it works great!
I have a security concern, though. The OAuth tokens and refresh tokens are stored as plain text in the database. That seems risky; if the DB gets compromised, then the attacker gets the credentials.
Shouldn’t the tokens and refresh tokens be encrypted at rest? What’s your approach to this?
Maybe using cloak_ecto | Hex would help here, but we’d have to tweak ExOauth2Provider to get the tokens by hash?
Popular in Announcing
Other popular topics
Latest on Elixir Forum
Sponsor Spotlight
Catch errors, track performance, monitor hosts and more.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #websockets
- #supervisor
- #elixirconf-us
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #security
- #hex
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Practical resources that improve the lives of professional developers.
Producing high quality Elixir screencasts since 2017.
Enabling companies to succeed by building software people love.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"