Function TestOAuth2ErrorResponseStructure

coderd/oauth2_error_compliance_test.go:281–327

TestOAuth2ErrorResponseStructure tests the JSON structure of error responses

(t *testing.T)

// TestOAuth2ErrorResponseStructure tests the JSON structure of error responses
func TestOAuth2ErrorResponseStructure(t *testing.T) {
	t.Parallel()

	t.Run("ErrorFieldsPresent", func(t *testing.T) {
		t.Parallel()

		client := coderdtest.New(t, nil)
		_ = coderdtest.CreateFirstUser(t, client)
		ctx := testutil.Context(t, testutil.WaitLong)

		// Make a request that will generate an error
		req := codersdk.OAuth2ClientRegistrationRequest{
			RedirectURIs: []string{"invalid-uri"},
			ClientName:   fmt.Sprintf("test-client-%d", time.Now().UnixNano()),
		}

		_, err := client.PostOAuth2ClientRegistration(ctx, req)
		require.Error(t, err)

		// Validate that the error contains the expected OAuth2 error structure
		var httpErr *codersdk.Error
		require.ErrorAs(t, err, &httpErr)

		// The error should be a 400 status for invalid client metadata
		require.Equal(t, http.StatusBadRequest, httpErr.StatusCode())

		// Should have error details
		require.NotEmpty(t, httpErr.Message)
	})

	t.Run("RegistrationAccessTokenErrors", func(t *testing.T) {
		t.Parallel()

		client := coderdtest.New(t, nil)
		_ = coderdtest.CreateFirstUser(t, client)
		ctx := testutil.Context(t, testutil.WaitLong)

		// Try to access a client configuration with invalid token - use a valid UUID format
		validUUID := "550e8400-e29b-41d4-a716-446655440000"
		_, err := client.GetOAuth2ClientConfiguration(ctx, validUUID, "invalid-token")
		require.Error(t, err)

		var httpErr *codersdk.Error
		require.ErrorAs(t, err, &httpErr)
		require.Equal(t, http.StatusUnauthorized, httpErr.StatusCode())
	})
}

// TestOAuth2ErrorHTTPHeaders tests that error responses have correct HTTP headers
func TestOAuth2ErrorHTTPHeaders(t *testing.T) {