Method listOAuth2ConsentSessions

consent/handler.go:197–234

swagger:route GET /admin/oauth2/auth/sessions/consent oAuth2 listOAuth2ConsentSessions # List OAuth 2.0 Consent Sessions of a Subject This endpoint lists all subject's granted consent sessions, including client and granted scope. If the subject is unknown or has not granted any consent sessions ye

(w http.ResponseWriter, r *http.Request)

//	Extensions:
//	  x-ory-ratelimit-bucket: hydra-admin-low
func (h *Handler) listOAuth2ConsentSessions(w http.ResponseWriter, r *http.Request) {
	subject := r.URL.Query().Get("subject")
	if subject == "" {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithHint(`Query parameter 'subject' is not defined but should have been.`)))
		return
	}

	pageKeys := h.r.Config().GetPaginationEncryptionKeys(r.Context())
	pageOpts, err := keysetpagination.ParseQueryParams(pageKeys, r.URL.Query())
	if err != nil {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithWrap(err).WithHintf("Unable to parse pagination parameters: %s", err)))
		return
	}

	var requests []flow.Flow
	var nextPage *keysetpagination.Paginator
	if loginSessionID := r.URL.Query().Get("login_session_id"); len(loginSessionID) == 0 {
		requests, nextPage, err = h.r.ConsentManager().FindSubjectsGrantedConsentRequests(r.Context(), subject, pageOpts...)
	} else {
		requests, nextPage, err = h.r.ConsentManager().FindSubjectsSessionGrantedConsentRequests(r.Context(), subject, loginSessionID, pageOpts...)
	}
	if errors.Is(err, ErrNoPreviousConsentFound) {
		h.r.Writer().Write(w, r, []flow.OAuth2ConsentSession{})
		return
	} else if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	// For legacy reasons, this API returns the format like below. Internally, we keep a different format.
	sessions := make([]*flow.OAuth2ConsentSession, len(requests))
	for i, f := range requests {
		sessions[i] = f.ToListConsentSessionResponse()
	}

	keysetpagination.SetLinkHeader(w, pageKeys, r.URL, nextPage)
	h.r.Writer().Write(w, r, sessions)
}

// Revoke OAuth 2.0 Consent Login Sessions Parameters
//