Function TestAuthCodeWithMockStrategy

oauth2/oauth2_auth_code_test.go:1859–2435

TestAuthCodeWithMockStrategy runs the authorization_code flow against various ConsentStrategy scenarios. For that purpose, the consent strategy is mocked so all scenarios can be applied properly. This test suite checks: - [x] should pass request if strategy passes - [x] should fail because prompt=n

(t *testing.T)

// - [x] should pass with prompt=login when authentication time is recent
// - [x] should fail with prompt=login when authentication time is in the past
func TestAuthCodeWithMockStrategy(t *testing.T) {
	t.Parallel()

	ctx := context.Background()
	for _, strat := range []struct{ d string }{{d: "opaque"}, {d: "jwt"}} {
		t.Run("strategy="+strat.d, func(t *testing.T) {
			reg := testhelpers.NewRegistryMemory(t, driver.WithConfigOptions(configx.WithValues(map[string]any{
				config.KeyAccessTokenLifespan: time.Second * 2,
				config.KeyScopeStrategy:       "DEPRECATED_HIERARCHICAL_SCOPE_STRATEGY",
				config.KeyAccessTokenStrategy: strat.d,
			})))
			testhelpers.MustEnsureRegistryKeys(t, reg, x.OpenIDConnectKeyName)
			testhelpers.MustEnsureRegistryKeys(t, reg, x.OAuth2JWTKeyName)

			consentStrategy := &consentMock{}

			reg.WithConsentStrategy(consentStrategy)
			handler := hydraoauth2.NewHandler(reg)
			var callbackHandler http.HandlerFunc

			var adminTs *httptest.Server
			{
				n := negroni.New()
				n.UseFunc(httprouterx.TrimTrailingSlashNegroni)
				n.UseFunc(httprouterx.NoCacheNegroni)
				n.UseFunc(httprouterx.AddAdminPrefixIfNotPresentNegroni)

				router := httprouterx.NewTestRouterAdminWithPrefix(t)
				handler.SetAdminRoutes(router)
				n.UseHandler(router)

				adminTs = httptest.NewServer(n)
				t.Cleanup(adminTs.Close)
				reg.Config().MustSet(ctx, config.KeyAdminURL, adminTs.URL)
			}
			var publicTs *httptest.Server
			{
				n := negroni.New()
				n.UseFunc(httprouterx.TrimTrailingSlashNegroni)
				n.UseFunc(httprouterx.NoCacheNegroni)

				router := httprouterx.NewTestRouterPublic(t)
				router.GET("/callback", func(w http.ResponseWriter, r *http.Request) {
					callbackHandler(w, r)
				})
				handler.SetPublicRoutes(router, func(h http.Handler) http.Handler { return h })
				n.UseHandler(router)

				publicTs = httptest.NewServer(n)
				t.Cleanup(publicTs.Close)
				reg.Config().MustSet(ctx, config.KeyAdminURL, publicTs.URL)
			}

			require.NoError(t, reg.ClientManager().CreateClient(ctx, &client.Client{
				ID:            "app-client",
				Secret:        "secret",
				RedirectURIs:  []string{publicTs.URL + "/callback"},
				ResponseTypes: []string{"id_token", "code", "token"},