Function TestHandlerOauthAuthorizationServer

oauth2/handler_test.go:380–422

(t *testing.T)

}

func TestHandlerOauthAuthorizationServer(t *testing.T) {
	t.Parallel()

	reg := testhelpers.NewRegistryMemory(t, driver.WithConfigOptions(configx.WithValues(map[string]any{
		config.KeyScopeStrategy:                 "DEPRECATED_HIERARCHICAL_SCOPE_STRATEGY",
		config.KeyIssuerURL:                     "http://hydra.localhost",
		config.KeySubjectTypesSupported:         []string{"pairwise", "public"},
		config.KeyOIDCDiscoverySupportedClaims:  []string{"sub"},
		config.KeyOAuth2ClientRegistrationURL:   "http://client-register/registration",
		config.KeyOIDCDiscoveryUserinfoEndpoint: "/userinfo",
	})))
	t.Run(fmt.Sprintf("hsm_enabled=%v", reg.Config().HSMEnabled()), func(t *testing.T) {
		testhelpers.MustEnsureRegistryKeys(t, reg, x.OpenIDConnectKeyName)

		h := oauth2.NewHandler(reg)

		r := httprouterx.NewTestRouterAdminWithPrefix(t)
		h.SetPublicRoutes(r.ToPublic(), func(h http.Handler) http.Handler { return h })
		h.SetAdminRoutes(r)
		ts := httptest.NewServer(r)
		defer ts.Close()

		res, err := http.Get(ts.URL + "/.well-known/oauth-authorization-server")
		require.NoError(t, err)
		defer res.Body.Close() //nolint:errcheck

		var wellKnownResp hydra.OidcConfiguration
		err = json.NewDecoder(res.Body).Decode(&wellKnownResp)
		require.NoError(t, err, "problem decoding wellknown json response: %+v", err)
		snapshotOpts := []snapshotx.Opt{}
		if reg.Config().HSMEnabled() {
			// The signing algorithm is not stable in the HSM tests, because the key is kept
			// in the HSM and persists across test runs.
			snapshotOpts = append(snapshotOpts, snapshotx.ExceptPaths(
				"id_token_signed_response_alg",
				"id_token_signing_alg_values_supported",
				"userinfo_signed_response_alg",
				"userinfo_signing_alg_values_supported",
			))
		}
		snapshotx.SnapshotT(t, wellKnownResp, snapshotOpts...)
	})
}