lynndylanhurley/devise_token_auth

View on GitHub

Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.

Stars: 3.6k
Forks: 1.1k
Open beginner issues: 0
Indexed issues: 184

Dominant language: Ruby
License: WTFPL
Last GitHub push: Jul 31, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

184 open issues indexed

Security issue: database_authenticatable is implicitly added by concern, allowing 2FA bypass with devise-two-factor Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1682 · Opened Mar 31, 2026
Running into undefined method 'parse' for class CGI on Ruby 4.0.1 Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1680 · 1 reaction · Opened Mar 9, 2026
`ConfirmationsController` doesn't use `redirect_options` properly Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

lynndylanhurley/devise_token_auth#1679 · Opened Mar 3, 2026
Duration arithmetic mismatch in v1.2.6 causes newly created tokens to be immediately evicted with variable-length lifespans Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

lynndylanhurley/devise_token_auth#1677 · 1 comment · 2 reactions · Opened Mar 2, 2026
Cookie overflow Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

lynndylanhurley/devise_token_auth#1673 · Opened Nov 24, 2025
Clean up unsupported Ruby versions and remove unnecessary files Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

lynndylanhurley/devise_token_auth#1667 · 1 comment · Opened Nov 1, 2025
Security issue disclosure Open

close-in-7-days

Difficulty 5/5 Over a week Newbie friendliness 15/100

lynndylanhurley/devise_token_auth#1663 · 2 comments · Opened Sep 19, 2025
Question/propostal: can we use `SELECT ... FOR UPDATE SKIP LOCKED` if using a "token buffer"? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

lynndylanhurley/devise_token_auth#1660 · 1 reaction · Opened Jul 23, 2025
Previous tokens remain valid indefinitely, bypassing batch window throttle Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

lynndylanhurley/devise_token_auth#1659 · Opened Jul 16, 2025
Omniauth redirect should send access-token not `auth_token` Open

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

lynndylanhurley/devise_token_auth#1656 · Opened Jun 24, 2025
Change logs with more meaningful information Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1653 · 1 comment · Opened Mar 27, 2025
`set_user_token`: Incompatibility between the Authorization header and having a param clashing with the auth header names. Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1648 · Opened Jan 21, 2025
Unable to destroy HttpOnly cookie when token expired in cookie_enabled mode Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1631 · Opened Jun 14, 2024
Anonymous Login Feature Request Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

lynndylanhurley/devise_token_auth#1630 · Opened Jun 10, 2024
dta_find_by on wrong model with set_user_by_token Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1629 · Opened Jun 3, 2024
Possible to use Google oauth2 with devise_token_auth as well as devise? Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1619 · Opened Apr 16, 2024
Question about security. Open

close-in-7-days

Difficulty 2/5 1-3 hours Newbie friendliness 20/100

lynndylanhurley/devise_token_auth#1615 · 1 comment · 1 reaction · Opened Nov 16, 2023
Refactoring : Confirmations controller - useless `if redirect_url` condition Open

Difficulty 2/5 1-3 hours Newbie friendliness 43/100

lynndylanhurley/devise_token_auth#1611 · 1 comment · Opened Sep 29, 2023
Lockable does not work as expected Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

lynndylanhurley/devise_token_auth#1610 · Opened Sep 24, 2023
Sponsored issue: token authentication Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1609 · 1 reaction · Opened Sep 20, 2023
Suggestion: 2FA - New credentials validation method | Warden strategy Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1605 · Opened Aug 4, 2023
question: Is the description of Methods correct? Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

lynndylanhurley/devise_token_auth#1604 · Opened Jun 21, 2023
Add created_at attribute to each token Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

lynndylanhurley/devise_token_auth#1603 · Opened Jun 14, 2023
access-token header is blank when token isn't changed yet. Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1597 · 2 comments · 3 reactions · Opened May 2, 2023
set allow_password_change column in create_table file to null: false Open

Difficulty 1/5 Under an hour Newbie friendliness 55/100

lynndylanhurley/devise_token_auth#1596 · Opened Apr 27, 2023
Why BCrypt? Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

lynndylanhurley/devise_token_auth#1595 · 1 reaction · Opened Apr 25, 2023
with version 1.2.0 @data is not passed to the omniauth_external_window.html.erb Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1591 · 2 comments · Opened Apr 20, 2023
Return `other_uid` in auth headers and encode in bearer token Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

lynndylanhurley/devise_token_auth#1583 · 2 comments · Opened Mar 18, 2023
Support for after_database_authentication callback Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1580 · 2 comments · 3 reactions · Opened Feb 23, 2023
Update docs for devise install Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

lynndylanhurley/devise_token_auth#1579 · 1 comment · 9 reactions · Opened Feb 21, 2023
Access-token was not set in header for some new session. Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1575 · 4 comments · 1 reaction · Opened Jan 31, 2023
Gitbook page missing Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1573 · Opened Dec 29, 2022
React Hook for Token Auth Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

lynndylanhurley/devise_token_auth#1566 · Opened Dec 3, 2022
User-based `token_lifespan` instead Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1562 · Opened Oct 27, 2022
Token of other device is not expired after password changed Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

lynndylanhurley/devise_token_auth#1561 · Opened Oct 26, 2022
Default URL params confirmation_instructions.html.erb conflicts with ones permitted in DeviseTokenAuth::ConfirmationsController Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

lynndylanhurley/devise_token_auth#1558 · Opened Oct 6, 2022
Token should not be created if a user already has a token. Following is the create method of DeviseTokenAuth Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1556 · Opened Sep 12, 2022
DeviseTokenAuth::Concerns::User overrides default ActiveModel dirty behavior Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1546 · 1 comment · Opened Jul 27, 2022
Session times out in about 30 mins despite tweaking settings. Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1545 · Opened Jul 26, 2022
`config.cookie_attributes.expires` is problematic Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

lynndylanhurley/devise_token_auth#1541 · Opened Jun 28, 2022
validate_token changes/encrypts cookie Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1537 · 2 comments · Opened Jun 7, 2022
Unsafe redirect on signup [Rails 7.0] Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1536 · 6 comments · 8 reactions · Opened Jun 1, 2022
Custom error message doesn't reach the front end Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1535 · Opened Apr 27, 2022
Token headers are missing when using multiple models and call both current_* Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

lynndylanhurley/devise_token_auth#1532 · 6 comments · Opened Mar 11, 2022
React on Rails with Devise Token Auth Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1531 · 5 comments · Opened Mar 4, 2022
Reset password flow with_reset_password_token returns nil Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

lynndylanhurley/devise_token_auth#1529 · 1 comment · Opened Mar 1, 2022
devise_token_auth_group breaking change when upgrading from 1.1.3 to 1.1.4 Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

lynndylanhurley/devise_token_auth#1528 · Opened Feb 11, 2022
Pentester criticises: Redirct Urls are not validated before redirect occurs Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

lynndylanhurley/devise_token_auth#1527 · 1 reaction · Opened Feb 3, 2022
Email can't be blank. How to create a user with blank email? Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

lynndylanhurley/devise_token_auth#1516 · 1 comment · Opened Dec 15, 2021
CSRF protect_from_forgery with: :null_session is skipped Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

lynndylanhurley/devise_token_auth#1514 · 1 comment · 1 reaction · Opened Nov 19, 2021

lynndylanhurley/devise_token_auth

Get new issues in your inbox