Method authHandler

rest/oidc_api_test.go:251–291

authHandler mocks the authentication process performed by the OAuth Authorization Server. The behavior of authHandler can be modified through the options map when needed. Clients are redirected to the specified callback URL after successful authentication.

(w http.ResponseWriter, r *http.Request)

// The behavior of authHandler can be modified through the options map when needed.
// Clients are redirected to the specified callback URL after successful authentication.
func (s *mockAuthServer) authHandler(w http.ResponseWriter, r *http.Request) {
	var redirectionURL string
	state := r.URL.Query().Get(requestParamState)
	if s.options.forceError.errorType == invalidStateErr {
		state = "aW52YWxpZCBzdGF0ZQo=" // Invalid state to simulate CSRF
	}
	redirect := r.URL.Query().Get(requestParamRedirectURI)
	if redirect == "" {
		base.ErrorfCtx(r.Context(), "No redirect URL found in auth request")
		w.WriteHeader(http.StatusInternalServerError)
		return
	}
	if s.options.forceError.errorType == callbackErr {
		err := "?error=unsupported_response_type&error_description=response_type%20not%20supported"
		redirectionURL = fmt.Sprintf("%s?error=%s", redirect, err)
		http.Redirect(w, r, redirectionURL, http.StatusTemporaryRedirect)
	}
	code, err := base.GenerateRandomSecret()
	if err != nil {
		base.ErrorfCtx(r.Context(), "%s", err.Error())
		w.WriteHeader(http.StatusInternalServerError)
		return
	}
	if s.options.forceError.errorType == noCodeErr {
		code = ""
	}
	redirectionURL = fmt.Sprintf("%s?code=%s", redirect, code)
	if state != "" {
		redirectionURL = fmt.Sprintf("%s&state=%s", redirectionURL, state)
	}
	if s.options.forceError.errorType == untoldProviderErr {
		uri, err := auth.SetURLQueryParam(redirectionURL, requestParamProvider, "untold")
		if err != nil {
			base.ErrorfCtx(r.Context(), "error setting untold provider in mock callback URL")
			w.WriteHeader(http.StatusInternalServerError)
			return
		}
		redirectionURL = uri
	}
	http.Redirect(w, r, redirectionURL, http.StatusTemporaryRedirect)
}

// tokenHandler handles token handling performed by the OAuth Authorization Server.
// It mocks token response and makes it available as JSON document.