Method updateSessionWithRequest

oauth2/handler.go:1396–1474

updateSessionWithRequest takes a session and a fosite.request as input and returns a new session. If any errors occur, they are logged.

(
	ctx context.Context,
	flow *flow.Flow,
	r *http.Request,
	request fosite.Requester,
	session *Session,
)

// updateSessionWithRequest takes a session and a fosite.request as input and returns a new session.
// If any errors occur, they are logged.
func (h *Handler) updateSessionWithRequest(
	ctx context.Context,
	flow *flow.Flow,
	r *http.Request,
	request fosite.Requester,
	session *Session,
) (*Session, error) {
	for _, scope := range flow.GrantedScope {
		request.GrantScope(scope)
	}

	for _, audience := range flow.GrantedAudience {
		request.GrantAudience(audience)
	}

	openIDKeyID, err := h.r.OpenIDJWTSigner().GetPublicKeyID(ctx)
	if err != nil {
		x.LogError(r, err, h.r.Logger())
		return nil, err
	}

	var accessTokenKeyID string
	if h.c.AccessTokenStrategy(ctx, client.AccessTokenStrategySource(request.GetClient())) == "jwt" {
		accessTokenKeyID, err = h.r.AccessTokenJWTSigner().GetPublicKeyID(ctx)
		if err != nil {
			x.LogError(r, err, h.r.Logger())
			return nil, err
		}
	}

	obfuscatedSubject, err := h.r.ConsentStrategy().ObfuscateSubjectIdentifier(ctx, request.GetClient(), flow.Subject, flow.ForceSubjectIdentifier)
	if err != nil {
		x.LogError(r, err, h.r.Logger())
		return nil, err
	}

	request.SetID(flow.ConsentRequestID.String())
	claims := &jwt.IDTokenClaims{
		Subject:                             obfuscatedSubject,
		Issuer:                              h.c.IssuerURL(ctx).String(),
		AuthTime:                            time.Time(flow.LoginAuthenticatedAt),
		RequestedAt:                         flow.RequestedAt,
		Extra:                               flow.SessionIDToken,
		AuthenticationContextClassReference: flow.ACR,
		AuthenticationMethodsReferences:     flow.AMR,

		// These are required for work around https://github.com/ory/hydra/v2/fosite/issues/530
		Nonce:    request.GetRequestForm().Get("nonce"),
		Audience: []string{request.GetClient().GetID()},
		IssuedAt: time.Now().Truncate(time.Second).UTC(),

		// This is set by the fosite strategy
		// ExpiresAt:   time.Now().Add(h.IDTokenLifespan).UTC(),
	}
	claims.Add("sid", flow.SessionID)

	if session == nil {
		session = &Session{}