Function TestStrategyDeviceLoginConsent

consent/strategy_oauth_test.go:1126–1344

(t *testing.T)

}

func TestStrategyDeviceLoginConsent(t *testing.T) {
	t.Parallel()

	ctx := context.Background()
	reg := testhelpers.NewRegistryMemory(t)
	reg.Config().MustSet(ctx, config.KeyAccessTokenStrategy, "opaque")
	reg.Config().MustSet(ctx, config.KeyConsentRequestMaxAge, time.Hour)
	reg.Config().MustSet(ctx, config.KeyConsentRequestMaxAge, time.Hour)
	reg.Config().MustSet(ctx, config.KeyScopeStrategy, "exact")
	reg.Config().MustSet(ctx, config.KeySubjectTypesSupported, []string{"pairwise", "public"})
	reg.Config().MustSet(ctx, config.KeySubjectIdentifierAlgorithmSalt, "76d5d2bf-747f-4592-9fbd-d2b895a54b3a")

	publicTS, adminTS := testhelpers.NewOAuth2Server(ctx, t, reg)
	adminClient := hydra.NewAPIClient(hydra.NewConfiguration())
	adminClient.GetConfig().Servers = hydra.ServerConfigurations{{URL: adminTS.URL}}

	oauth2Config := func(t *testing.T, c *client.Client) *oauth2.Config {
		return &oauth2.Config{
			ClientID:     c.GetID(),
			ClientSecret: c.Secret,
			Endpoint: oauth2.Endpoint{
				DeviceAuthURL: publicTS.URL + "/oauth2/device/auth",
				TokenURL:      publicTS.URL + "/oauth2/token",
				AuthStyle:     oauth2.AuthStyleInHeader,
			},
		}
	}

	now := 1723546027 // Unix timestamps must round-trip through Hydra without converting to floats or similar
	acceptDeviceHandler := func(t *testing.T) http.HandlerFunc {
		return checkAndAcceptDeviceHandler(t, adminClient)
	}

	acceptLoginHandler := func(t *testing.T, subject string, payload *hydra.AcceptOAuth2LoginRequest) http.HandlerFunc {
		return checkAndAcceptLoginHandler(t, adminClient, subject, func(*testing.T, *hydra.OAuth2LoginRequest, error) hydra.AcceptOAuth2LoginRequest {
			if payload == nil {
				return hydra.AcceptOAuth2LoginRequest{}
			}
			return *payload
		})
	}

	acceptConsentHandler := func(t *testing.T, payload *hydra.AcceptOAuth2ConsentRequest) http.HandlerFunc {
		return checkAndAcceptConsentHandler(t, adminClient, func(*testing.T, *hydra.OAuth2ConsentRequest, error) hydra.AcceptOAuth2ConsentRequest {
			if payload == nil {
				return hydra.AcceptOAuth2ConsentRequest{}
			}
			return *payload
		})
	}

	createDefaultClient := func(t *testing.T) *client.Client {
		c := &client.Client{GrantTypes: []string{"urn:ietf:params:oauth:grant-type:device_code"}}
		return createClient(t, reg, c)
	}
	t.Run("case=should pass if both login and consent are granted and check remember flows as well as various payloads", func(t *testing.T) {
		subject := "aeneas-rekkas"
		c := createDefaultClient(t)