Function handleAuthorize

packages/core/test-servers/src/worker.ts:141–169

(request: Request)

};

const handleAuthorize = (request: Request) => {
  const url = new URL(request.url);
  const clientId = url.searchParams.get("client_id");
  const redirectUri = url.searchParams.get("redirect_uri");
  const state = url.searchParams.get("state");
  const codeChallenge = url.searchParams.get("code_challenge");
  if (!clientId || !redirectUri || !state || !codeChallenge) {
    return json({ error: "invalid_request" }, { status: 400 });
  }
  const client = clients.get(clientId);
  if (client?.redirectUris.size && !client.redirectUris.has(redirectUri)) {
    return json(
      { error: "invalid_request", error_description: "redirect_uri is not registered" },
      { status: 400 },
    );
  }
  if (!client) {
    clients.set(clientId, { clientSecret: null, redirectUris: new Set([redirectUri]) });
  }
  const transaction = `txn_${crypto.randomUUID()}`;
  transactions.set(transaction, {
    clientId,
    redirectUri,
    state,
    codeChallenge,
    scope: url.searchParams.get("scope"),
  });
  return redirect(`${url.origin}/login?transaction=${encodeURIComponent(transaction)}`);
};

const handleLogin = async (request: Request) => {
  const url = new URL(request.url);