Function acceptConsentHandler

oauth2/oauth2_auth_code_test.go:114–155

(t *testing.T, c *client.Client, adminClient *hydra.APIClient, reg *driver.RegistrySQL, subject string, checkRequestPayload func(*hydra.OAuth2ConsentRequest) *hydra.AcceptOAuth2ConsentRequest)

}

func acceptConsentHandler(t *testing.T, c *client.Client, adminClient *hydra.APIClient, reg *driver.RegistrySQL, subject string, checkRequestPayload func(*hydra.OAuth2ConsentRequest) *hydra.AcceptOAuth2ConsentRequest) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {
		challenge := r.URL.Query().Get("consent_challenge")
		rr, _, err := adminClient.OAuth2API.GetOAuth2ConsentRequest(context.Background()).ConsentChallenge(challenge).Execute()
		require.NoError(t, err)
		require.Equal(t, challenge, rr.Challenge)

		assert.EqualValues(t, c.GetID(), pointerx.Deref(rr.Client.ClientId))
		assert.Empty(t, pointerx.Deref(rr.Client.ClientSecret))
		assert.EqualValues(t, c.GrantTypes, rr.Client.GrantTypes)
		assert.EqualValues(t, c.LogoURI, pointerx.Deref(rr.Client.LogoUri))
		assert.EqualValues(t, c.RedirectURIs, rr.Client.RedirectUris)
		assert.EqualValues(t, subject, pointerx.Deref(rr.Subject))
		assert.EqualValues(t, []string{"hydra", "offline", "openid"}, rr.RequestedScope)
		assert.Contains(t, *rr.RequestUrl, reg.Config().OAuth2AuthURL(r.Context()).String())
		assert.Equal(t, map[string]interface{}{"context": "bar"}, rr.Context)

		acceptBody := hydra.AcceptOAuth2ConsentRequest{
			GrantScope:               []string{"hydra", "offline", "openid"},
			GrantAccessTokenAudience: rr.RequestedAccessTokenAudience,
			Remember:                 new(true),
			RememberFor:              new(int64(0)),
			Session: &hydra.AcceptOAuth2ConsentRequestSession{
				AccessToken: map[string]interface{}{"foo": "bar"},
				IdToken:     map[string]interface{}{"bar": "baz", "email": "foo@bar.com"},
			},
		}
		if checkRequestPayload != nil {
			if b := checkRequestPayload(rr); b != nil {
				acceptBody = *b
			}
		}

		v, _, err := adminClient.OAuth2API.AcceptOAuth2ConsentRequest(context.Background()).
			ConsentChallenge(challenge).
			AcceptOAuth2ConsentRequest(acceptBody).
			Execute()
		require.NoError(t, err)
		require.NotEmpty(t, v.RedirectTo)
		http.Redirect(w, r, v.RedirectTo, http.StatusFound)
	}
}

// TestAuthCodeWithDefaultStrategy runs proper integration tests against in-memory and database connectors, specifically
// we test: