Method rejectOAuth2LoginRequest

consent/handler.go:549–600

swagger:route PUT /admin/oauth2/auth/requests/login/reject oAuth2 rejectOAuth2LoginRequest # Reject OAuth 2.0 Login Request When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider to authenticate the subject and then tell the Ory OAuth2 Service abou

(w http.ResponseWriter, r *http.Request)

//	Extensions:
//	  x-ory-ratelimit-bucket: hydra-admin-low
func (h *Handler) rejectOAuth2LoginRequest(w http.ResponseWriter, r *http.Request) {
	var err error
	ctx, span := h.r.Tracer(r.Context()).Tracer().Start(r.Context(), "consent.rejectOAuth2LoginRequest")
	defer otelx.End(span, &err)

	challenge := cmp.Or(
		r.URL.Query().Get("login_challenge"),
		r.URL.Query().Get("challenge"),
	)

	if challenge == "" {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithHint(`Query parameter 'challenge' is not defined but should have been.`)))
		return
	}

	var payload flow.RequestDeniedError
	if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
		h.r.Writer().WriteError(w, r, errors.WithStack(fosite.ErrInvalidRequest.WithWrap(err).WithHintf("Unable to decode body because: %s", err)))
		return
	}

	payload.Valid = true
	payload.SetDefaults(flow.LoginRequestDeniedErrorName)
	f, err := flow.DecodeFromLoginChallenge(ctx, h.r, challenge)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	if err := f.HandleLoginError(&payload); err != nil {
		h.r.Writer().WriteError(w, r, errors.WithStack(err))
		return
	}

	verifier, err := f.ToLoginVerifier(ctx, h.r)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	ru, err := url.Parse(f.RequestURL)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	events.Trace(ctx, events.LoginRejected, events.WithClientID(f.Client.GetID()), events.WithSubject(f.Subject))

	h.r.Writer().Write(w, r, &flow.OAuth2RedirectTo{
		RedirectTo: urlx.SetQuery(ru, url.Values{"login_verifier": {verifier}}).String(),
	})
}

// Get OAuth 2.0 Consent Request
//