Function TestValidatePKCECodeChallengeMethod

coderd/oauth2provider/pkce_test.go:79–126

(t *testing.T)

}

func TestValidatePKCECodeChallengeMethod(t *testing.T) {
	t.Parallel()

	tests := []struct {
		name          string
		method        string
		expectError   bool
		errorContains string
	}{
		{
			name:        "EmptyIsValid",
			method:      "",
			expectError: false,
		},
		{
			name:        "S256IsValid",
			method:      string(codersdk.OAuth2PKCECodeChallengeMethodS256),
			expectError: false,
		},
		{
			name:          "PlainIsRejected",
			method:        string(codersdk.OAuth2PKCECodeChallengeMethodPlain),
			expectError:   true,
			errorContains: "plain",
		},
		{
			name:          "UnknownIsRejected",
			method:        "unknown_method",
			expectError:   true,
			errorContains: "unsupported",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			t.Parallel()
			err := codersdk.ValidatePKCECodeChallengeMethod(tt.method)
			if tt.expectError {
				require.Error(t, err)
				if tt.errorContains != "" {
					require.Contains(t, err.Error(), tt.errorContains)
				}
			} else {
				require.NoError(t, err)
			}
		})
	}
}