func TestClientCredentialFlow(t *testing.T) {
storage := teststorage.New()
storage.Clients["test"] = &osin.DefaultClient{
Id: "test",
Secret: "secret",
RedirectUri: "http://localhost/redirect",
}
oauthServer := New(
NewDefaultServerConfig(),
storage,
AuthorizeHandlerFunc(func(ar *osin.AuthorizeRequest, resp *osin.Response, w http.ResponseWriter) (bool, error) {
ar.Authorized = true
return false, nil
}),
AccessHandlerFunc(func(ar *osin.AccessRequest, w http.ResponseWriter) error {
ar.Authorized = true
ar.GenerateRefresh = false
return nil
}),
NewDefaultErrorHandler(),
)
mux := http.NewServeMux()
oauthServer.Install(mux, "")
server := httptest.NewServer(mux)
config := &oauth2.Config{
ClientID: "test",
ClientSecret: "secret",
Scopes: []string{"a_scope"},
Endpoint: oauth2.Endpoint{
AuthURL: server.URL + "/authorize",
TokenURL: server.URL + "/token",
},
}
token, err := config.PasswordCredentialsToken(oauth2.NoContext, config.ClientID, config.ClientSecret)
if err != nil {
t.Fatalf("unexpected error: %v", err)
}
if !token.Valid() {
t.Fatal("invalid token")
}
if storage.AccessData == nil {
t.Fatalf("unexpected nil access data")
}
}
func TestAuthorizeStartFlow(t *testing.T) {
storage := teststorage.New()
oauthServer := New(
NewDefaultServerConfig(),
storage,
AuthorizeHandlerFunc(func(ar *osin.AuthorizeRequest, resp *osin.Response, w http.ResponseWriter) (bool, error) {
ar.Authorized = true
return false, nil
}),
AccessHandlerFunc(func(ar *osin.AccessRequest, w http.ResponseWriter) error {
ar.Authorized = true
ar.GenerateRefresh = false
return nil
}),
NewDefaultErrorHandler(),
)
mux := http.NewServeMux()
oauthServer.Install(mux, "")
server := httptest.NewServer(mux)
ch := make(chan *osincli.AccessData, 1)
var oaclient *osincli.Client
var authReq *osincli.AuthorizeRequest
assertServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
data, err := authReq.HandleRequest(r)
if err != nil {
t.Fatalf("unexpected error: %v", err)
}
tokenReq := oaclient.NewAccessRequest(osincli.AUTHORIZATION_CODE, data)
token, err := tokenReq.GetToken()
if err != nil {
t.Fatalf("unexpected error: %v", err)
}
ch <- token
}))
storage.Clients["test"] = &osin.DefaultClient{
Id: "test",
Secret: "secret",
RedirectUri: assertServer.URL + "/assert",
}
oaclientConfig := &osincli.ClientConfig{
ClientId: "test",
ClientSecret: "secret",
RedirectUrl: assertServer.URL + "/assert",
AuthorizeUrl: server.URL + "/authorize",
TokenUrl: server.URL + "/token",
}
osinclient, err := osincli.NewClient(oaclientConfig)
if err != nil {
t.Fatalf("unexpected error: %v", err)
}
oaclient = osinclient
authReq = oaclient.NewAuthorizeRequest(osincli.CODE)
config := &oauth2.Config{
ClientID: "test",
ClientSecret: "",
Scopes: []string{"a_scope"},
Endpoint: oauth2.Endpoint{
AuthURL: server.URL + "/authorize",
TokenURL: server.URL + "/token",
},
RedirectURL: assertServer.URL + "/assert",
}
url := config.AuthCodeURL("")
client := http.Client{ /*CheckRedirect: func(req *http.Request, via []*http.Request) error {
t.Logf("redirect (%d): to %s, %#v", len(via), req.URL, req)
return nil
}*/}
if _, err := client.Get(url); err != nil {
t.Fatalf("unexpected error: %v", err)
}
token := <-ch
if token.AccessToken == "" {
t.Errorf("unexpected empty access token: %#v", token)
}
}