Method acceptOAuth2ConsentRequest

consent/handler.go:725–772

swagger:route PUT /admin/oauth2/auth/requests/consent/accept oAuth2 acceptOAuth2ConsentRequest # Accept OAuth 2.0 Consent Request When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell Ory now about it. If

(w http.ResponseWriter, r *http.Request)

//	Extensions:
//	  x-ory-ratelimit-bucket: hydra-admin-low
func (h *Handler) acceptOAuth2ConsentRequest(w http.ResponseWriter, r *http.Request) {
	var err error
	ctx, span := h.r.Tracer(r.Context()).Tracer().Start(r.Context(), "consent.acceptOAuth2ConsentRequest")
	defer otelx.End(span, &err)

	challenge := cmp.Or(
		r.URL.Query().Get("consent_challenge"),
		r.URL.Query().Get("challenge"),
	)
	if challenge == "" {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithHint(`Query parameter 'challenge' is not defined but should have been.`)))
		return
	}

	var payload flow.AcceptOAuth2ConsentRequest
	if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
		h.r.Writer().WriteErrorCode(w, r, http.StatusBadRequest, errors.WithStack(err))
		return
	}

	f, err := flow.DecodeFromConsentChallenge(ctx, h.r, challenge)
	if err != nil {
		h.r.Writer().WriteError(w, r, errors.WithStack(err))
		return
	}

	if err := f.HandleConsentRequest(&payload); err != nil {
		h.r.Writer().WriteError(w, r, errors.WithStack(err))
		return
	}

	ru, err := url.Parse(f.RequestURL)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	verifier, err := f.ToConsentVerifier(ctx, h.r)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	events.Trace(ctx, events.ConsentAccepted, events.WithClientID(f.Client.GetID()), events.WithSubject(f.Subject))
	h.r.Writer().Write(w, r, &flow.OAuth2RedirectTo{
		RedirectTo: urlx.SetQuery(ru, url.Values{"consent_verifier": {verifier}}).String(),
	})
}

// Reject OAuth 2.0 Consent Request
//