Function test_invalid_request

tests/django/test_oauth2/test_password_grant.py:84–132

(factory, server)

def test_invalid_request(factory, server):
    auth_header = create_basic_auth("client-id", "client-secret")

    # case 1
    request = factory.get(
        "/oauth/token?grant_type=password",
        HTTP_AUTHORIZATION=auth_header,
    )
    resp = server.create_token_response(request)
    assert resp.status_code == 400
    data = json.loads(resp.content)
    assert data["error"] == "unsupported_grant_type"

    # case 2
    request = factory.post(
        "/oauth/token",
        data={"grant_type": "password"},
        HTTP_AUTHORIZATION=auth_header,
    )
    resp = server.create_token_response(request)
    assert resp.status_code == 400
    data = json.loads(resp.content)
    assert data["error"] == "invalid_request"

    # case 3
    request = factory.post(
        "/oauth/token",
        data={"grant_type": "password", "username": "foo"},
        HTTP_AUTHORIZATION=auth_header,
    )
    resp = server.create_token_response(request)
    assert resp.status_code == 400
    data = json.loads(resp.content)
    assert data["error"] == "invalid_request"

    # case 4
    request = factory.post(
        "/oauth/token",
        data={
            "grant_type": "password",
            "username": "foo",
            "password": "wrong",
        },
        HTTP_AUTHORIZATION=auth_header,
    )
    resp = server.create_token_response(request)
    assert resp.status_code == 400
    data = json.loads(resp.content)
    assert data["error"] == "invalid_request"


def test_unauthorized_client(factory, server, client):