Method loginPOST

cmd/cmd_perform_authorization_code.go:398–447

(w http.ResponseWriter, r *http.Request)

}

func (rt *router) loginPOST(w http.ResponseWriter, r *http.Request) {
	if err := r.ParseForm(); err != nil {
		http.Error(w, err.Error(), http.StatusBadRequest)
		return
	}
	if r.FormValue("revoke-consents") == "on" {
		res, err := rt.cl.OAuth2API.RevokeOAuth2ConsentSessions(r.Context()).
			Subject(r.FormValue("username")).
			All(true).
			Execute()
		if err != nil {
			_, _ = fmt.Fprintln(rt.cmd.ErrOrStderr(), "Error revoking previous consents:", err)
		} else {
			_, _ = fmt.Fprintln(rt.cmd.ErrOrStderr(), "Revoked all previous consents")
		}
		defer res.Body.Close() //nolint:errcheck
	}
	switch r.FormValue("action") {
	case "accept":

		req, res, err := rt.cl.OAuth2API.AcceptOAuth2LoginRequest(r.Context()).
			LoginChallenge(r.FormValue("ls")).
			AcceptOAuth2LoginRequest(openapi.AcceptOAuth2LoginRequest{
				Subject:     r.FormValue("username"),
				Remember:    new(r.FormValue("remember") == "on"),
				RememberFor: new(int64(3600)),
				Context: map[string]string{
					"context from": "login step",
				},
			}).Execute()
		if err != nil {
			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}
		defer res.Body.Close() //nolint:errcheck
		http.Redirect(w, r, req.RedirectTo, http.StatusFound)

	case "deny":
		req, res, err := rt.cl.OAuth2API.RejectOAuth2LoginRequest(r.Context()).LoginChallenge(r.FormValue("ls")).Execute()
		if err != nil {
			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}
		defer res.Body.Close() //nolint:errcheck
		http.Redirect(w, r, req.RedirectTo, http.StatusFound)

	default:
		http.Error(w, "Invalid action", http.StatusBadRequest)
	}
}

func (rt *router) consentGET(w http.ResponseWriter, r *http.Request) {
	req, raw, err := rt.cl.OAuth2API.GetOAuth2ConsentRequest(r.Context()).