🔓 OmniAuth Rocket Chat

This unofficial OmniAuth strategy allows your application's users to authenticate with Rocket Chat as the identity provider (aka social login).

• Ruby >= 3.2.0.
• Rocket Chat <= 7.4.0 (EOL) or >= 8.0.0. See Compatibility below.

Rocket.Chat version 7.4.0 introduced a bug that breaks third-party logins. A partial fix is available starting in version 8.0.0, but PKCE flows remain affected. Until this is fully resolved, set pkce: false in the configurations below.

Excluding EOL versions:

Add this line to your application's Gemfile:

gem 'omniauth-rocketchat'

Then execute bundle install.

To enable third-party login, register your application in Rocket Chat to obtain the Client ID and Client Secret. Add your application's host(s) to whitelist callback redirects by following these steps:

1. Log in to your Rocket Chat instance as an administrator.
2. Navigate to Administration > Third-party login (e.g., https://example.com/admin/third-party-login).
3. Click New Application:
   • Enable the Active checkbox.
   • Enter an Application Name and Redirect URL (e.g., https://example.com/users/auth/rocketchat/callback for Devise).
   • Click Save.
4. Select your new application and copy the Client ID and Client Secret.

Choose one of the following methods to integrate the strategy with your Ruby application.

use OmniAuth::Builder do
  provider(
    :rocketchat, 
    ENV["CLIENT_ID"],
    ENV["CLIENT_SECRET"], 
    pkce: false,
    client_options: {
      site: "https://example.com"
    }
  )
end

If you modified the endpoint URL's in Rocket Chat, set authorize_url and token_url.

use OmniAuth::Builder do
  provider(
    :rocketchat,
    ENV["CLIENT_ID"],
    ENV["CLIENT_SECRET"],
    pkce: false,
    client_options: {
      site: "https://example.com",
      authorize_url: "/custom/oauth/authorize",
      token_url: "/custom/oauth/token"
    }
  )
end

Set the name option to distinguish between multiple Rocket Chat instances. It appears in the OmniAuth auth hash request.env["omniauth.auth"] under the provider key.

use OmniAuth::Build do
  provider(
    :rocketchat,
    ENV["CLIENT_ID"],
    ENV["CLIENT_SECRET"],
    name: :some_other_name,
    pkce: false,           
    client_options: {
      site: "https://example.com"
    }
  )
end

Choose one of the following methods to integrate the strategy with your Ruby on Rails application. The Custom Endpoints and Identifier options apply here as well.

# config/initializers/rocketchat.rb
Rails.application.config.middleware.use OmniAuth::Builder do
  provider(
    :rocketchat,
    ENV["CLIENT_ID"],
    ENV["CLIENT_SECRET"],
    pkce: false,           
    client_options: {
      site: "https://example.com"
    }
  )
end

Use this integration if you use Devise with the :omniauthable module.

# config/initializers/rocketchat.rb
Devise.setup do |config|
  config.omniauth(
    :rocketchat,
    ENV["CLIENT_ID"],
    ENV["CLIENT_SECRET"],
    pkce: false,
    client_options: {
      site: "https://example.com"
    }
  )
end

This strategy returns information about the authenticated user in the Auth Hash Schema 1.0+. The following information is available in the info hash:

• name: The user's full name.
• nickname: The user's Rocket Chat username.
• email: The user's email address. The strategy prioritizes verified email addresses but will fall back to the first available one if no verified address is found.
• email_verified: A boolean indicating whether the email address has been verified on the Rocket Chat instance.
• image: The URL to the user's avatar.

You can find the complete profile information returned by Rocket Chat in extra.raw_info.

Rocket Chat also returns access and refresh tokens along with other information in the credentials hash.

This library aims to adhere to Semantic Versioning 2.0.0. Violations of this scheme should be reported as bugs.

This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the Contributor Covenant code of conduct.

Bug reports and pull requests are welcome on the GitHub project page.

Copyright © 2024-2026 David Uhlig. See LICENSE for details.