Method acceptUserCodeRequest

consent/handler.go:1048–1133

swagger:route PUT /admin/oauth2/auth/requests/device/accept oAuth2 acceptUserCodeRequest # Accepts a device grant user_code request Accepts a device grant user_code request Consumes: - application/json Produces: - application/json Schemes: http, https Responses: 200: oAuth2RedirectTo

(w http.ResponseWriter, r *http.Request)

//	Extensions:
//	  x-ory-ratelimit-bucket: hydra-admin-low
func (h *Handler) acceptUserCodeRequest(w http.ResponseWriter, r *http.Request) {
	ctx := r.Context()

	challenge := r.URL.Query().Get("device_challenge")
	if challenge == "" {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithHint(`Query parameter 'device_challenge' is not defined but should have been.`)))
		return
	}

	var reqBody flow.AcceptDeviceUserCodeRequest
	if err := json.NewDecoder(r.Body).Decode(&reqBody); err != nil {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithWrap(err).WithHintf("Unable to decode request body: %s", err.Error())))
		return
	}

	if reqBody.UserCode == "" {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithHint("Field 'user_code' must not be empty.")))
		return
	}

	f, err := flow.DecodeFromDeviceChallenge(ctx, h.r, challenge)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	userCodeSignature, err := h.r.UserCodeStrategy().UserCodeSignature(r.Context(), reqBody.UserCode)
	if err != nil {
		h.r.Writer().WriteError(w, r, fosite.ErrServerError.WithWrap(err).WithHint(`The 'user_code' signature could not be computed.`))
		return
	}

	userCodeRequest, err := h.r.OAuth2Storage().GetUserCodeSession(r.Context(), userCodeSignature, nil)
	if err != nil {
		h.r.Writer().WriteError(w, r, fosite.ErrInvalidRequest.WithWrap(err).WithHint(`The 'user_code' session could not be found or has expired or is otherwise malformed.`))
		return
	}

	if err := h.r.UserCodeStrategy().ValidateUserCode(ctx, userCodeRequest, reqBody.UserCode); err != nil {
		h.r.Writer().WriteError(w, r, fosite.ErrInvalidRequest.WithWrap(err).WithHint(`The 'user_code' session could not be found or has expired or is otherwise malformed.`))
		return
	}

	p := flow.HandledDeviceUserAuthRequest{
		Client:              userCodeRequest.GetClient().(*client.Client),
		DeviceCodeRequestID: userCodeRequest.GetID(),
		RequestedScope:      []string(userCodeRequest.GetRequestedScopes()),
		RequestedAudience:   []string(userCodeRequest.GetRequestedAudience()),
	}

	// Append the client_id to the original RequestURL, as it is needed for the login flow
	reqURL, err := url.Parse(f.RequestURL)
	if err != nil {
		h.r.Writer().WriteError(w, r, errors.WithStack(err))
		return
	}

	if reqURL.Query().Get("client_id") == "" {