Function authorizationFlow

coderd/oauth2_test.go:899–923

(ctx context.Context, client *codersdk.Client, cfg *oauth2.Config)

}

func authorizationFlow(ctx context.Context, client *codersdk.Client, cfg *oauth2.Config) (code, codeVerifier string, err error) {
	state := uuid.NewString()
	codeVerifier, challenge := generatePKCE()
	authURL := cfg.AuthCodeURL(state,
		oauth2.SetAuthURLParam("code_challenge", challenge),
		oauth2.SetAuthURLParam("code_challenge_method", "S256"),
	)

	// Make a POST request to simulate clicking "Allow" on the authorization page.
	// This bypasses the HTML consent page and directly processes the authorization.
	code, err = oidctest.OAuth2GetCode(
		authURL,
		func(req *http.Request) (*http.Response, error) {
			// Change to POST to simulate the form submission.
			req.Method = http.MethodPost

			// Prevent automatic redirect following.
			client.HTTPClient.CheckRedirect = func(req *http.Request, via []*http.Request) error {
				return http.ErrUseLastResponse
			}
			return client.Request(ctx, req.Method, req.URL.String(), nil)
		},
	)
	return code, codeVerifier, err
}

func must[T any](value T, err error) T {
	if err != nil {