diff --git a/Gemfile b/Gemfile
index 26f479037..eab699b76 100644
--- a/Gemfile
+++ b/Gemfile
@@ -66,7 +66,7 @@ gem 'bcrypt'
 gem 'doorkeeper'
 
 # OAuth clients
-gem 'omniauth', '~> 1.9'
+gem 'omniauth', '~> 2.0'
 gem 'omniauth-identity'
 gem 'omniauth-facebook'
 gem 'omniauth-twitter'
diff --git a/Gemfile.lock b/Gemfile.lock
index f6a1db7be..c2db4b024 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -491,17 +491,18 @@ GEM
       bigdecimal (>= 3.0)
       ostruct (>= 0.2)
     oj_mimic_json (1.0.1)
-    omniauth (1.9.2)
+    omniauth (2.0.0)
       hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
+      rack-protection
     omniauth-facebook (10.0.0)
       bigdecimal
       omniauth-oauth2 (>= 1.2, < 3)
-    omniauth-google-oauth2 (0.8.2)
+    omniauth-google-oauth2 (1.0.1)
       jwt (>= 2.0)
       oauth2 (~> 1.1)
-      omniauth (~> 1.1)
-      omniauth-oauth2 (>= 1.6)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.7.1)
     omniauth-identity (3.0.9)
       bcrypt
       omniauth
@@ -582,6 +583,9 @@ GEM
       rack (< 4)
     rack-cors (2.0.2)
       rack (>= 2.0.0)
+    rack-protection (3.2.0)
+      base64 (>= 0.1.0)
+      rack (~> 2.2, >= 2.2.4)
     rack-session (1.0.2)
       rack (< 3)
     rack-test (2.1.0)
@@ -877,7 +881,7 @@ DEPENDENCIES
   mini_racer
   oj
   oj_mimic_json
-  omniauth (~> 1.9)
+  omniauth (~> 2.0)
   omniauth-facebook
   omniauth-google-oauth2
   omniauth-identity