sendnrw/misskey
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

reduce any using OAuthErrorResponse

Browse Source
This commit is contained in:
Kagami Sascha Rosylight
2023-04-16 15:51:52 +02:00
parent 94ea15d2d7
commit 92f3ae2d9c
1 changed files with 14 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
packages/backend/test/e2e/oauth.ts
View File

@@ -14,9 +14,9 @@ const host = `http://127.0.0.1:${port}`;
const clientPort = port + 1; const clientPort = port + 1;
const redirect_uri = `http://127.0.0.1:${clientPort}/redirect`; const redirect_uri = `http://127.0.0.1:${clientPort}/redirect`;
interface OAuthError { interface OAuthErrorResponse {
error: string; error: string;
code: string; error_description: string;
} }
function getClient(): AuthorizationCode<'client_id'> { function getClient(): AuthorizationCode<'client_id'> {
@@ -239,7 +239,7 @@ describe('OAuth', () => {
state: 'state', state: 'state',
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
// Pattern 2: Only code_challenge // Pattern 2: Only code_challenge
response = await fetch(client.authorizeURL({ response = await fetch(client.authorizeURL({
@@ -249,7 +249,7 @@ describe('OAuth', () => {
code_challenge: 'code', code_challenge: 'code',
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
// Pattern 2: Only code_challenge_method // Pattern 2: Only code_challenge_method
response = await fetch(client.authorizeURL({ response = await fetch(client.authorizeURL({
@@ -259,7 +259,7 @@ describe('OAuth', () => {
code_challenge_method: 'S256', code_challenge_method: 'S256',
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
// Pattern 3: Unsupported code_challenge_method // Pattern 3: Unsupported code_challenge_method
response = await fetch(client.authorizeURL({ response = await fetch(client.authorizeURL({
@@ -270,7 +270,7 @@ describe('OAuth', () => {
code_challenge_method: 'SSSS', code_challenge_method: 'SSSS',
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
}); });
test('Verify PKCE', async () => { test('Verify PKCE', async () => {
@@ -357,7 +357,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_scope'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_scope');
}); });
test('Empty scope', async () => { test('Empty scope', async () => {
@@ -372,7 +372,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_scope'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_scope');
}); });
test('Unknown scopes', async () => { test('Unknown scopes', async () => {
@@ -387,7 +387,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_scope'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_scope');
}); });
test('Partially known scopes', async () => { test('Partially known scopes', async () => {
@@ -577,7 +577,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
}); });
test('Invalid redirect_uri including the valid one at authorization endpoint', async () => { test('Invalid redirect_uri including the valid one at authorization endpoint', async () => {
@@ -592,7 +592,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
}); });
test('No redirect_uri at authorization endpoint', async () => { test('No redirect_uri at authorization endpoint', async () => {
@@ -606,7 +606,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
}); });
test('Invalid redirect_uri at token endpoint', async () => { test('Invalid redirect_uri at token endpoint', async () => {
@@ -826,7 +826,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
}); });
}); });
@@ -843,7 +843,7 @@ describe('OAuth', () => {
})); }));
assert.strictEqual(response.status, 400); assert.strictEqual(response.status, 400);
assert.strictEqual((await response.json() as any).error, 'invalid_request'); assert.strictEqual((await response.json() as OAuthErrorResponse).error, 'invalid_request');
}); });
test('Missing name', async () => { test('Missing name', async () => {