forked from ory/fosite
-
Notifications
You must be signed in to change notification settings - Fork 0
/
helper_setup_test.go
116 lines (103 loc) · 3.61 KB
/
helper_setup_test.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
// Copyright © 2017 Aeneas Rekkas <aeneas+oss@aeneas.io>
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package integration_test
import (
"net/http/httptest"
"testing"
"time"
"github.com/gorilla/mux"
"github.com/ory/fosite"
"github.com/ory/fosite/handler/oauth2"
"github.com/ory/fosite/handler/openid"
"github.com/ory/fosite/internal"
"github.com/ory/fosite/storage"
"github.com/ory/fosite/token/hmac"
"github.com/ory/fosite/token/jwt"
goauth "golang.org/x/oauth2"
"golang.org/x/oauth2/clientcredentials"
)
var fositeStore = &storage.MemoryStore{
Clients: map[string]*fosite.DefaultClient{
"my-client": {
ID: "my-client",
Secret: []byte(`$2a$10$IxMdI6d.LIRZPpSfEwNoeu4rY3FhDREsxFJXikcgdRRAStxUlsuEO`), // = "foobar"
RedirectURIs: []string{"http://localhost:3846/callback"},
ResponseTypes: []string{"id_token", "code", "token"},
GrantTypes: []string{"implicit", "refresh_token", "authorization_code", "password", "client_credentials"},
Scopes: []string{"fosite", "offline", "openid"},
},
},
Users: map[string]storage.MemoryUserRelation{
"peter": {
Username: "peter",
Password: "secret",
},
},
AuthorizeCodes: map[string]fosite.Requester{},
Implicit: map[string]fosite.Requester{},
AccessTokens: map[string]fosite.Requester{},
RefreshTokens: map[string]fosite.Requester{},
IDSessions: map[string]fosite.Requester{},
AccessTokenRequestIDs: map[string]string{},
RefreshTokenRequestIDs: map[string]string{},
}
type defaultSession struct {
*openid.DefaultSession
}
var accessTokenLifespan = time.Hour
var authCodeLifespan = time.Minute
func newOAuth2Client(ts *httptest.Server) *goauth.Config {
return &goauth.Config{
ClientID: "my-client",
ClientSecret: "foobar",
RedirectURL: ts.URL + "/callback",
Scopes: []string{"fosite"},
Endpoint: goauth.Endpoint{
TokenURL: ts.URL + "/token",
AuthURL: ts.URL + "/auth",
},
}
}
func newOAuth2AppClient(ts *httptest.Server) *clientcredentials.Config {
return &clientcredentials.Config{
ClientID: "my-client",
ClientSecret: "foobar",
Scopes: []string{"fosite"},
TokenURL: ts.URL + "/token",
}
}
var hmacStrategy = &oauth2.HMACSHAStrategy{
Enigma: &hmac.HMACStrategy{
GlobalSecret: []byte("some-super-cool-secret-that-nobody-knows"),
},
AccessTokenLifespan: accessTokenLifespan,
AuthorizeCodeLifespan: authCodeLifespan,
}
var jwtStrategy = &oauth2.RS256JWTStrategy{
RS256JWTStrategy: &jwt.RS256JWTStrategy{
PrivateKey: internal.MustRSAKey(),
},
HMACSHAStrategy: hmacStrategy,
}
func mockServer(t *testing.T, f fosite.OAuth2Provider, session fosite.Session) *httptest.Server {
router := mux.NewRouter()
router.HandleFunc("/auth", authEndpointHandler(t, f, session))
router.HandleFunc("/token", tokenEndpointHandler(t, f))
router.HandleFunc("/callback", authCallbackHandler(t))
router.HandleFunc("/info", tokenInfoHandler(t, f, session))
router.HandleFunc("/introspect", tokenIntrospectionHandler(t, f, session))
router.HandleFunc("/revoke", tokenRevocationHandler(t, f, session))
ts := httptest.NewServer(router)
return ts
}