Contextually is a gem for running Rails controller tests under different user contexts in a convenient way. So you can test your authorization without much effort.

Parse and build Accept, Accept-Language, Accept-Encoding, Authorization, Cache-Control, Content-Type, Cookie, Link, CORS, Forwarded, and Via HTTP headers. Includes content negotiation and security header generation.

Granity is a flexible, caching-friendly authorization engine that provides fine-grained access control for Ruby on Rails applications

Consent permission based authorization

SAML 2.0 is an XML-based protocol that uses security tokens containing assertions to pass information about a principal (usually an end user) between a SAML authority, that is, an identity provider, and a SAML consumer, that is, a service provider. SAML 2.0 enables web-based authentication and a...

Wraps the Rust-backed GitLab Authorization Service (GLAZ) exposed via magnus FFI

Trust is a resource oriented framework for authorization control. It is compatible with Rails 3 and 4. It has a loose coupling from the models, and features a native Ruby implementation language. Support for inheritance and namespaced models as well as nested routes. Even permissions scheme supp...

Thin wrapper around Russian Post package tracking SOAP API. Works on a per-package basis (contrary to the bulk ticket-based API). Use it at your own risk, since the API may appear unstable and require authorization in future.

AuthorizedPersona is a rails implementation of Betterment's Persona Centric Authorization pattern

An authorization library that supports access control models like ACL, RBAC, ABAC in Ruby

Rack middleware for using the Authorization header with token authentication

Simple and easy dynamic restful group/permission based authentication and authorization engine plugin for Rails

courtesy - Wikipedia: Maker-checker (or Maker and Checker, or 4-Eyes) is one of the central principles of authorization in the information systems of financial organizations.The principle of maker and checker means that for each transaction, there must be at least two individuals necessary for it...

Permitters are an object-oriented way of defining what request parameters are permitted. using Strong Parameters. It is to Strong Parameters what ActiveModel::Serializers are to as_json/to_json, but supports CanCan and similar authorization frameworks.

Akamai-EdgeAuth is Akamai Edge Authorization Token for Ruby 2.0+

A Rails engine for providing OpenID Connect authorization.

Rack::LTI provides LTI launch and configuration endpoints to your Rack-based application. It handles configuration, authorization, and routing. For more information about LTI, see http://www.imsglobal.org/toolsinteroperability2.cfm.

A simple gem for authorization and session management in Rails.

Flexible, configurable authorization system for ActiveRecord and an access control DSL for ActionController.

xcflushd is a daemon that connects to a Redis database containing 3scale's XC API Management data and flushes it to the 3scale service for cached reporting and authorizations. Check https://github.com/3scale/apicast-xc for an implementation of a 3scale's XC gateway.