Function deviceCodeResponse

test/auth/oauth.test.ts:31–47

* Build a device/code response whose `state` echoes back the value * extracted from the actual request body — so it always matches.

(reqBody: URLSearchParams, overrides: Record<string, unknown> = {})

 * extracted from the actual request body — so it always matches.
 */
function deviceCodeResponse(reqBody: URLSearchParams, overrides: Record<string, unknown> = {}): Response {
  capturedState = reqBody.get('state');
  capturedCodeVerifier = reqBody.get('code_verifier') ?? reqBody.get('code_challenge');
  return {
    status: 200,
    ok: true,
    headers: new Headers({ 'Content-Type': 'application/json' }),
    json: async () => ({
      user_code: 'TEST-CODE',
      verification_uri: 'about:blank',
      expired_in: Date.now() + 120_000,
      interval: 10,
      state: capturedState,
      ...overrides,
    }),
  } as Response;
}

function tokenResponse(overrides: Record<string, unknown> = {}) {
  return {