Method tokenHandler

rest/oidc_api_test.go:295–323

tokenHandler handles token handling performed by the OAuth Authorization Server. It mocks token response and makes it available as JSON document.

(w http.ResponseWriter, r *http.Request)

// tokenHandler handles token handling performed by the OAuth Authorization Server.
// It mocks token response and makes it available as JSON document.
func (s *mockAuthServer) tokenHandler(w http.ResponseWriter, r *http.Request) {
	if (s.options.forceError.errorType == callbackTokenExchangeErr && s.options.grantType == grantTypeAuthCode) ||
		(s.options.forceError.errorType == refreshTokenExchangeErr && s.options.grantType == grantTypeRefreshToken) {
		w.WriteHeader(http.StatusUnauthorized)
		return
	}
	claims := s.options.claims
	if reflect.DeepEqual(s.options.claims, claimSet{}) {
		claims = claimsAuthentic()
	}
	token, err := s.makeToken(claims)
	if err != nil || token == "" {
		w.WriteHeader(http.StatusUnauthorized)
		return
	}
	response := OIDCTokenResponse{
		IDToken:      token,
		AccessToken:  "7d1d234f5fde713a94454f268833adcd39835fe8",
		RefreshToken: "e08c77351221346153d09ff64c123b24fc4c1905",
		TokenType:    BearerToken,
		Expires:      300, // Expires in 5 minutes from when the response was generated.
	}
	if (s.options.grantType == grantTypeAuthCode && s.options.forceError.errorType == callbackNoIDTokenErr) ||
		(s.options.grantType == grantTypeRefreshToken && s.options.forceError.errorType == refreshNoIDTokenErr) {
		response.IDToken = ""
	}
	s.options.tokenResponse = response
	renderJSON(w, r, http.StatusOK, response)
}

// claimSet represents a set of public and private claim values.
type claimSet struct {