Function TestAcceptCodeDeviceRequest

consent/handler_test.go:270–464

(t *testing.T)

}

func TestAcceptCodeDeviceRequest(t *testing.T) {
	requestURL := "https://hydra.example.com/" + oauth2.DeviceVerificationPath

	reg := testhelpers.NewRegistryMemory(t)

	cl := &client.Client{ID: "client"}
	require.NoError(t, reg.ClientManager().CreateClient(t.Context(), cl))
	f := &flow.Flow{
		Client:      cl,
		RequestURL:  requestURL,
		RequestedAt: time.Now(),
		State:       flow.DeviceFlowStateUnused,
	}
	f.NID = reg.Networker().NetworkID(t.Context())
	challenge, err := f.ToDeviceChallenge(t.Context(), reg)
	require.NoError(t, err)

	h := NewHandler(reg)
	r := httprouterx.NewTestRouterAdminWithPrefix(t)
	h.SetRoutes(r)
	ts := httptest.NewServer(r)
	t.Cleanup(ts.Close)

	submitCode := func(t *testing.T, reqBody any, challenge string) *http.Response {
		body, err := json.Marshal(reqBody)
		require.NoError(t, err)

		// set the HTTP method, url, and request body
		req, err := http.NewRequest(http.MethodPut, ts.URL+"/admin"+DevicePath+"/accept?device_challenge="+challenge, bytes.NewReader(body))
		require.NoError(t, err)

		resp, err := ts.Client().Do(req)
		require.NoError(t, err)

		return resp
	}

	t.Run("case=successful user_code submission", func(t *testing.T) {
		deviceRequest := fosite.NewDeviceRequest()
		deviceRequest.Client = cl
		deviceRequest.SetSession(oauth2.NewTestSession(t, "test-subject"))

		_, deviceCodeSig, err := reg.DeviceCodeStrategy().GenerateDeviceCode(t.Context())
		require.NoError(t, err)
		userCode, sig, err := reg.UserCodeStrategy().GenerateUserCode(t.Context())
		require.NoError(t, err)
		require.NoError(t, reg.OAuth2Storage().CreateDeviceAuthSession(t.Context(), deviceCodeSig, sig, deviceRequest))

		resp := submitCode(t, &flow.AcceptDeviceUserCodeRequest{UserCode: userCode}, challenge)
		require.EqualValues(t, http.StatusOK, resp.StatusCode)

		var result flow.OAuth2RedirectTo
		require.NoError(t, json.NewDecoder(resp.Body).Decode(&result))
		assert.Contains(t, result.RedirectTo, requestURL)
		assert.Contains(t, result.RedirectTo, "device_verifier")

		t.Run("double submit", func(t *testing.T) {
			resp := submitCode(t, &flow.AcceptDeviceUserCodeRequest{UserCode: userCode}, challenge)