dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Unit test for #2474

Browse Source
This commit is contained in:
Maxime Besson 2021-02-24 11:49:39 +01:00
parent 2d7f9e34a6
commit 09d727410c
1 changed files with 27 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
lemonldap-ng-portal/t/32-OIDC-Token-Security.t
View File

@ -126,8 +126,12 @@ count(1);
my ($code) = expectRedirection( $res, qr#http://rp2\.com/.*code=([^\&]*)# );
# Play code on RP2
$query =
"grant_type=authorization_code&code=$code&redirect_uri=http%3A%2F%2Frp2.com%2F";
$query = buildForm( {
grant_type => 'authorization_code',
code => $code,
redirect_uri => 'http://rp2.com/',
}
);
ok(
$res = $op->_post(
@ -163,9 +167,16 @@ count(1);
($code) = expectRedirection( $res, qr#http://rp\.com/.*code=([^\&]*)# );
# Play code on RP1
$query =
"grant_type=authorization_code&code=$code&redirect_uri=http%3A%2F%2Frp.com%2F";
$query = buildForm( {
grant_type => 'authorization_code',
code => $code,
redirect_uri => 'http://rp.com/',
client_id => 'rpid',
client_secret => 'rpsecret',
}
);
# Authenticated client with two methods at once (#2474)
ok(
$res = $op->_post(
"/oauth2/token",
@ -179,6 +190,18 @@ ok(
"Post auth code on correct RP"
);
count(1);
expectReject( $res, 400, "invalid_request" );
ok(
$res = $op->_post(
"/oauth2/token",
IO::String->new($query),
accept => 'text/html',
length => length($query),
),
"Post auth code on correct RP"
);
count(1);
$res = expectJSON($res);
my $token = $res->{access_token};
ok( $token, 'Access token present' );