raos 0.0.2

Async Rust implementation of the OAuth 2.1 Authorization Server
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

use crate::{
    common::frontend::{FrontendRequest, FrontendRequestMethod, OAuthValidationError},
    test::mock::request_from_raw_http,
    token::TokenRequest,
};

// The authorization server MUST ignore unrecognized request parameters sent to the token endpoint.
#[test]
fn test_ignore_unrecognised_request_parameters() {
    // The authorization server MUST ignore unrecognized request parameters sent to the authorization endpoint.

    // Arrange
    let request = request_from_raw_http(
        r#"
            POST /token HTTP/1.1
            Content-Type: application/x-www-form-urlencoded

            client_id=1234&grant_type=authorization_code&code=AUTHORIZATION_CODE&code_verifier=CODE_CHALLENGE&unrecognised=parameter
        "#,
    );

    // Act
    let result = TokenRequest::try_from(&request as &dyn FrontendRequest);

    // Assert
    assert!(result.is_ok(), "result is not Ok, result is {:?}", result);
}

#[test]
fn test_token_endpoint_must_use_post() {
    // The client MUST use the HTTP POST method when making requests to the token endpoint.

    // Arrange
    let request = request_from_raw_http(
        r#"
            GET /token?client_id=1234&grant_type=authorization_code&code=AUTHORIZATION_CODE&code_verifier=CODE_CHALLENGE HTTP/1.1
        "#,
    );

    // Act
    let result = TokenRequest::try_from(&request as &dyn FrontendRequest);

    // Assert
    assert!(result.is_err(), "result is not Err, result is {:?}", result);
    assert_eq!(
        OAuthValidationError::InvalidRequestMethod {
            expected: FrontendRequestMethod::POST,
            actual: FrontendRequestMethod::GET,
        },
        result.unwrap_err()
    );
}

#[test]
fn test_endpoint_supports_client_credentials_in_body() {
    // To support clients in possession of a client secret, the authorization server MUST support the client including the client credentials in the request body.

    // Arrange
    let request = request_from_raw_http(
        r#"
            POST /token HTTP/1.1
            Content-Type: application/x-www-form-urlencoded

            client_id=1234&client_secret=5678&grant_type=client_credentials
        "#,
    );

    // Act
    let result = TokenRequest::try_from(&request as &dyn FrontendRequest);

    // Assert
    assert!(result.is_ok(), "result is not Ok, result is {:?}", result);
    let result = result.unwrap();
    assert_eq!("1234", result.client_id);
    assert_eq!(Some("5678".to_string()), result.client_secret);
}

#[test]
fn test_request_with_empty_values_must_be_omitted() {
    // Parameters sent without a value MUST be treated as if they were omitted from the request.

    // Arrange
    let request = request_from_raw_http(
        r#"
            POST /token HTTP/1.1
            Content-Type: application/x-www-form-urlencoded

            client_id=&client_secret=&grant_type=client_credentials
        "#,
    );

    // Act
    let result = TokenRequest::try_from(&request as &dyn FrontendRequest);

    // Assert
    assert!(result.is_err(), "result is not Err, result is {:?}", result);
    assert_eq!(OAuthValidationError::MissingRequiredParameter("client_id"), result.unwrap_err());
}