Method exchangeCode

internal/agent/oauth_scope_picker_test.go:13–38

exchangeCode swaps an authorization code for a token pair via /oauth2/token.

(t *testing.T, code, verifier, redirectURI string)

// exchangeCode swaps an authorization code for a token pair via /oauth2/token.
func (f *consentFixture) exchangeCode(t *testing.T, code, verifier, redirectURI string) (accessToken, refreshToken, scope string) {
	t.Helper()
	form := url.Values{}
	form.Set("grant_type", "authorization_code")
	form.Set("code", code)
	form.Set("client_id", f.clientID)
	form.Set("redirect_uri", redirectURI)
	form.Set("code_verifier", verifier)
	resp, err := http.Post(f.server.URL+"/oauth2/token", "application/x-www-form-urlencoded", strings.NewReader(form.Encode()))
	if err != nil {
		t.Fatal(err)
	}
	defer resp.Body.Close()
	if resp.StatusCode != http.StatusOK {
		t.Fatalf("token exchange status = %d, want 200", resp.StatusCode)
	}
	var body struct {
		AccessToken  string `json:"access_token"`
		RefreshToken string `json:"refresh_token"`
		Scope        string `json:"scope"`
	}
	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
		t.Fatal(err)
	}
	return body.AccessToken, body.RefreshToken, body.Scope
}

// whoami calls GET /v1/account with the bearer and returns (scope, agentAddress).
func (f *consentFixture) whoami(t *testing.T, bearer string) (scope, agentAddress string) {