Function TestOAuth2ManagementErrorCodes

coderd/oauth2_error_compliance_test.go:179–278

TestOAuth2ManagementErrorCodes tests all RFC 7592 error codes

(t *testing.T)

// TestOAuth2ManagementErrorCodes tests all RFC 7592 error codes
func TestOAuth2ManagementErrorCodes(t *testing.T) {
	t.Parallel()

	tests := []struct {
		name             string
		useWrongClientID bool
		useWrongToken    bool
		useEmptyToken    bool
		expectedError    string
		expectedCode     int
	}{
		{
			name:          "InvalidToken_WrongToken",
			useWrongToken: true,
			expectedError: "invalid_token",
			expectedCode:  http.StatusUnauthorized,
		},
		{
			name:          "InvalidToken_EmptyToken",
			useEmptyToken: true,
			expectedError: "invalid_token",
			expectedCode:  http.StatusUnauthorized,
		},
		{
			name:             "InvalidClient_WrongClientID",
			useWrongClientID: true,
			expectedError:    "invalid_token",
			expectedCode:     http.StatusUnauthorized,
		},
		// Skip empty client ID test as it causes routing issues
	}

	for _, test := range tests {
		t.Run(test.name, func(t *testing.T) {
			t.Parallel()

			client := coderdtest.New(t, nil)
			_ = coderdtest.CreateFirstUser(t, client)
			ctx := testutil.Context(t, testutil.WaitLong)

			// First register a valid client to use for management tests
			clientName := fmt.Sprintf("test-client-%d", time.Now().UnixNano())
			regReq := codersdk.OAuth2ClientRegistrationRequest{
				RedirectURIs: []string{"https://example.com/callback"},
				ClientName:   clientName,
			}
			regResp, err := client.PostOAuth2ClientRegistration(ctx, regReq)
			require.NoError(t, err)

			// Determine clientID and token based on test configuration
			var clientID, token string
			switch {
			case test.useWrongClientID:
				clientID = "550e8400-e29b-41d4-a716-446655440000" // Valid UUID format but non-existent
				token = regResp.RegistrationAccessToken
			case test.useWrongToken:
				clientID = regResp.ClientID
				token = "invalid-token"