Function TestDeviceCodeWithDefaultStrategy

oauth2/oauth2_device_code_test.go:231–839

(t *testing.T)

}

func TestDeviceCodeWithDefaultStrategy(t *testing.T) {
	t.Parallel()

	ctx := t.Context()
	reg := testhelpers.NewRegistryMemory(t, driver.WithConfigOptions(configx.WithValues(map[string]any{
		config.KeyAccessTokenStrategy: "opaque",
		config.KeyRefreshTokenHook:    "",
	})))
	publicTS, adminTS := testhelpers.NewOAuth2Server(ctx, t, reg)

	publicClient := hydra.NewAPIClient(hydra.NewConfiguration())
	publicClient.GetConfig().Servers = hydra.ServerConfigurations{{URL: publicTS.URL}}
	adminClient := hydra.NewAPIClient(hydra.NewConfiguration())
	adminClient.GetConfig().Servers = hydra.ServerConfigurations{{URL: adminTS.URL}}

	getDeviceCode := func(t *testing.T, conf *oauth2.Config, c *http.Client, params ...oauth2.AuthCodeOption) (*oauth2.DeviceAuthResponse, error) {
		return conf.DeviceAuth(ctx, params...)
	}

	acceptUserCode := func(t *testing.T, conf *oauth2.Config, c *http.Client, devResp *oauth2.DeviceAuthResponse) *http.Response {
		if c == nil {
			c = testhelpers.NewEmptyJarClient(t)
		}

		resp, err := c.Get(devResp.VerificationURIComplete)
		require.NoError(t, err)
		require.Contains(t, reg.Config().DeviceDoneURL(ctx).String(), resp.Request.URL.Path, "did not end up in post device URL")
		require.Equal(t, resp.Request.URL.Query().Get("client_id"), conf.ClientID)

		return resp
	}

	acceptDeviceHandler := func(t *testing.T, c *client.Client) http.HandlerFunc {
		return func(w http.ResponseWriter, r *http.Request) {
			userCode := r.URL.Query().Get("user_code")
			payload := hydra.AcceptDeviceUserCodeRequest{
				UserCode: &userCode,
			}

			v, _, err := adminClient.OAuth2API.AcceptUserCodeRequest(context.Background()).
				DeviceChallenge(r.URL.Query().Get("device_challenge")).
				AcceptDeviceUserCodeRequest(payload).
				Execute()
			require.NoError(t, err)
			require.NotEmpty(t, v.RedirectTo)
			http.Redirect(w, r, v.RedirectTo, http.StatusFound)
		}
	}

	acceptLoginHandler := func(t *testing.T, c *client.Client, subject string, scopes []string, checkRequestPayload func(request *hydra.OAuth2LoginRequest) *hydra.AcceptOAuth2LoginRequest) http.HandlerFunc {
		return func(w http.ResponseWriter, r *http.Request) {
			rr, _, err := adminClient.OAuth2API.GetOAuth2LoginRequest(context.Background()).LoginChallenge(r.URL.Query().Get("login_challenge")).Execute()
			require.NoError(t, err)

			assert.EqualValues(t, c.GetID(), pointerx.Deref(rr.Client.ClientId))
			assert.Empty(t, pointerx.Deref(rr.Client.ClientSecret))
			assert.EqualValues(t, c.GrantTypes, rr.Client.GrantTypes)
			assert.EqualValues(t, c.LogoURI, pointerx.Deref(rr.Client.LogoUri))