CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/rubygem-doorkeeper-openid_connect 1.10.5

OpenID Connect extension for Doorkeeper

Port info

Maintainer
mfechner@FreeBSD.org
Packages
latest: 1.10.5
Upstream
Higher version available: 2.1.0
Last update
to 1.10.5 · 0fc34f13f9
Quarterly
2026Q4: 1.9.0 2 unaddressed · last MFH 10e480cd59
WWW
https://github.com/doorkeeper-gem/doorkeeper-openid_connect
Links
cgit · VuXML

Install

Package
# pkg install rubygem-doorkeeper-openid_connect
installs 1.10.5 from latest; from quarterly (2026Q4) 1.9.0
Port
# cd /usr/ports/security/rubygem-doorkeeper-openid_connect && make install clean
Size
33 KiB download · 112 KiB installed
Depends on
devel/ruby-gems 4.0.21, devel/rubygem-ostruct 0.6.3, lang/ruby34 3.4.9_2,1, security/rubygem-doorkeeper-rails-gitlab 5.9.0, www/rubygem-jwt 3.3.0
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.10.51.9.0–
FreeBSD 151.10.51.9.0–
FreeBSD 141.10.51.9.01.10.5

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.9.01.9.0–
FreeBSD 141.9.01.9.01.10.5

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.10.5.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-444766.32026-08-25Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's client_id, which is public informatio…
CVE-2026-706654.22026-08-25Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registrat…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (34)

Matthias Fechner (mfechner) · 1.10.5 MFH 2026Q4 ✓
security/rubygem-doorkeeper-openid_connect: update to 1.10.5

Required for gitlab 19.5

Changes:	https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
0fc34f13f9
Matthias Fechner (mfechner) · 1.9.0
security/rubygem-doorkeeper-openid_connect: update to 1.9.0

Required for gitlab 19.0.0

Changes:	https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
9f0d1595fc
Matthias Fechner (mfechner) · 1.8.11_1
www/gitlab: switch to gitlab own railties version

Fixes some conflicts related to rack and rack-session which are pulled
in by railties without any reason.
f64dbcb7d4
Matthias Fechner (mfechner) · 1.8.11
security/rubygem-doorkeeper-openid_connect: update to 1.8.11

Required by gitlab 17.9

Changes:	https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
e0c76645d1
Matthias Fechner (mfechner) · 1.8.10_1
security/rubygem-doorkeeper-openid_connect: update dep to current doorkeeper
2881a5abda
Matthias Fechner (mfechner) · 1.8.10
security/rubygem-doorkeeper-openid_connect: update to 1.8.10

Changes:	https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
f8813d8537
Po-Chuan Hsieh (sunpoet) · 1.8.7_3
security/rubygem-doorkeeper-openid_connect: Change RUN_DEPENDS from rubygem-doorkeeper-rails70 to rubygem-doorkeeper57-rails70

- Bump PORTREVISION for dependency change
987180f3d4
Po-Chuan Hsieh (sunpoet) · 1.8.7_2
security/rubygem-doorkeeper-openid_connect: Allow build with rubygem-doorkeeper-rails70 5.7.0+

- Bump PORTREVISION for package change

Obtained from:	https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/f9a6660bdcad5550c1c965b7f1a071123e98fb52
f81101f847
Matthias Fechner (mfechner) · 1.8.7_1
www/gitlab-ce: switch rubygem ports to use rails 7.0

Required for gitlab-ce 16.3
9a62ad0a91
Matthias Fechner (mfechner) · 1.8.7
security/rubygem-doorkeeper-openid_connect: update to 1.8.7

Required for gitlab-ce 16.1
Changelog:
https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md#v187-2023-05-18
a554e1ffab
Matthias Fechner (mfechner) · 1.8.6
security/rubygem-doorkeeper-openid_connect: update to 1.8.6

Required for gitlab-ce 16.0.0

Changelog:
https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
325a41f19d
Matthias Fechner (mfechner) · 1.8.5
security/rubygem-doorkeeper-openid_connect: update to 1.8.5

Required for gitlab-ce 15.11
Changelog:
https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md#v185-2023-02-02
bd850f16c4
Matthias Fechner (mfechner) · 1.8.3
Revert "security/rubygem-doorkeeper-openid_connect: update to 1.8.5"

This reverts commit 53b370b8e23b0802be794d5202cb0c783d1035bb.
631929dc50
Matthias Fechner (mfechner) · 1.8.5
security/rubygem-doorkeeper-openid_connect: update to 1.8.5

v1.8.5 (2023-02-02)

    [#186] Simplify gem configuration reusing Doorkeeper configuration option DSL (thanks to @nbulaj).
    [#182] Drop support for Ruby 2.6 and Rails 5 (thanks to @sato11).
    [#188] Fix dookeeper-jwt compatibility (thanks to @zavan).

v1.8.4 (2023-02-01)

    [#177] Replace json-jwt with ruby-jwt to align with doorkeeper-jwt (thanks to @kristof-mattei).
    [#185] Don't call active_record_options for Doorkeeper >= 5.6.3 (thanks to @zavan).
    [#183] Stop render consent screen when user is not logged-in (thanks to @nov).

Changelog:
https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md

Fixes also a problem with www/gitlab-ce:
rake aborted!
NoMethodError: undefined method `active_record_options' for #<Doorkeeper::Config:0x000000081fb0f0c8 @orm=:active_record, @default_generator_method=:hex, @authenticate_resource_owner=#<Proc:0x000000081fb0ed80 /usr/local/www/gitlab-ce/config/initializers/doorkeeper.rb:13>, @resource_owner_from_credentials=#<Proc:0x000000081fb0ec68 /usr/local/www/gitlab-ce/config/initializers/doorkeeper.rb:25>, @refresh_token_enabled=true, @enforce_configured_scopes=true, @force_ssl_in_redirect_uri=false, @forbid_redirect_uri=#<Proc:0x000000081fb0ea10 /usr/local/www/gitlab-ce/config/initializers/doorkeeper.rb:67>, @enable_application_owner=true, @default_scopes=#<Doorkeeper::OAuth::Scopes:0x000000081fb17e30 @scopes=["api"]>, @optional_scopes=#<Doorkeeper::OAuth::Scopes:0x000000081fb177f0 @scopes=["read_api", "read_user", "read_repository", "write_repository", "sudo", "openid", "profile", "email"]>, @access_token_methods=[:from_access_token_param, :from_bearer_authorization, :from_bearer_param], @token_secret_strategy=Gitlab::DoorkeeperSecretStoring::Token::Pbkdf2Sha512, @token_secret_fallback_strategy=Doorkeeper::SecretStoring::Plain, @application_secret_strategy=Gitlab::DoorkeeperSecretStoring::Secret::Pbkdf2Sha512, @application_secret_fallback_strategy=Doorkeeper::SecretStoring::Plain, @grant_flows=["authorization_code", "password", "client_credentials"], @skip_authorization=#<Proc:0x000000081fb1ce58 /usr/local/www/gitlab-ce/config/initializers/doorkeeper.rb:109>, @base_controller="::Gitlab::BaseDoorkeeperController", @skip_client_authentication_for_password_grant=true, @application_model=Doorkeeper::Application(id: integer, name: string, uid: string, secret: string, redirect_uri: text, scopes: string, created_at: datetime, updated_at: datetime, owner_id: integer, owner_type: string, trusted: boolean, confidential: boolean, expire_access_tokens: boolean), @access_grant_model=Doorkeeper::AccessGrant(id: integer, resource_owner_id: integer, application_id: integer, token: string, expires_in: integer, redirect_uri: text, created_at: datetime, revoked_at: datetime, scopes: string, code_challenge: text, code_challenge_method: text), @access_token_model=Doorkeeper::AccessToken(id: integer, resource_owner_id: integer, application_id: integer, token: string, refresh_token: string, expires_in: integer, revoked_at: datetime, created_at: datetime, scopes: string)>

          if Doorkeeper.configuration.active_record_options[:establish_connection]
                                     ^^^^^^^^^^^^^^^^^^^^^^
/usr/local/www/gitlab-ce/config/environment.rb:7:in `<top (required)>'
Tasks: TOP => db:migrate => db:load_config => environment
(See full trace by running task with --trace)
8755d7109c
Matthias Fechner (mfechner) · 1.8.3
security/rubygem-doorkeeper-openid_connect: update to 1.8.3

Required for gitlab-ce 15.7 update
Changelog:
https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
69a62ce4ea
Yasuhiro Kimura (yasu) · 1.7.5_2
devel/ruby-gems: Update to 3.4.2

ChangeLog:	https://github.com/rubygems/rubygems/releases/tag/v3.4.2
PR:		268578
Approved by:	meta (ruby@, maintainer)
Exp-run by:	antoine
f03ab0f785
Muhammad Moinur Rahman (bofh) · 1.7.5_2
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby

Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk

Notable changes are.

- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
  USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.

This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863

I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.

Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D37925
18c6e18276
Matthias Fechner (mfechner) · 1.7.5_2
www/gitlab-ce: fix build errors cause by dep upgrade

Several dep upgrade of rubgems port broke the gitlab-ce port.
The problem are reported by e.g.
https://beefy16.nyi.freebsd.org/data/131amd64-default/d20a3cf7e848/logs/gitlab-ce-15.3.4_1.log

and also by users.
PR:		266963
f41faa20a8
Stefan Eßer (se) · 1.7.5_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.7.5_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dan Langille (dvl) · 1.7.5_1
devel/ruby-gems: Update to 3.3.7

These are fixes Ruby 3.0

Changes were compiled against all dependencies of devel/ruby-gems and
they all built cleanly.

There are five known build failures, all prexisting:

* devel/rubygem-xdg5: requires Ruby 3.0
* devel/rubygem-xdg: requires Ruby 3.1
* graphics/rubygem-objectdetect: port explicitly marked broken
* mail/rubygem-tmail: port explicitly marked broken
* science/cdcl: marked broken, unfetchable

Plus, science/rubygem-ruby-dcl gets skipped because of science/cdcl

PR:		258108
Approved by:	ruby (zi@)
7b279c9e09
Mathieu Arnold (mat) · 1.7.5_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.7.5_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Matthias Fechner (mfechner) · 1.7.5_1
Fixed dependency definition. This is already fixed upstream but not released yet. The patch can maybe removed again with a newer version. This is required for gitlab-ce 13.9 upgrade.
950bcfe09f
Matthias Fechner (mfechner) · 1.7.5
Update to 1.7.5. Changelog: https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
5178f1848a
Matthias Fechner (mfechner) · 1.7.4
Update to 1.7.4 which is required for gitlab-ce 13.4.
a521ce74e2
Matthias Fechner (mfechner) · 1.6.3
Update to 1.6.3 which is required for gitlab-ce 12.8 update.
558a621742
Matthias Fechner (mfechner) · 1.5.3_1
Upgrade security/rubygem-doorkeeper-openid_connect to 1.5.3. https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md

Reported by:	PORTSCOUT
Approved by:	mentors (implicit)
8b883c46bf
Matthias Fechner (mfechner) · 1.5.0_1
Change dependency to unbreak www/gitlab-ce port which was broken by commit 476092.

Approved by:	mentors (implicit)
1a74434d1a
Matthias Fechner (mfechner) · 1.5.0
Update to 1.5.0 which is required for gitlab 11.1.1. Take maintainer.

Approved by:	mentors (implicit)
91d23490f4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.4.0
Update to 1.4.0

Changes:	https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
e321c4b8b7
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.3.0
Update to 1.3.0

Changes:	https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md
cb8078c43c
Torsten Zuehlsdorff (tz) · 1.2.0
security/rubygem-doorkeeper-openid_connect: Update from 1.1.2 to 1.2.0

Changelog: https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/v1.2.0/CHANGELOG.md

Submitted by: Matthias Fechner <idefix@fechner.net>
37c6ef797b
Torsten Zuehlsdorff (tz) · 1.1.2
New port: security/rubygem-doorkeeper-openid_connect

Implements an OpenID Connect authentication provider for Rails applications on
top of the Doorkeeper OAuth 2.0 framework.

OpenID Connect is a single-sign-on and identity layer with a growing list of
server and client implementations. If you're looking for a client in Ruby check
out omniauth-openid-connect.

WWW: https://github.com/doorkeeper-gem/doorkeeper-openid_connect
38815731ee