Method encodeClaims

coderd/coderdtest/oidctest/idp.go:905–935

encodeClaims is a helper func to convert claims to a valid JWT.

(t testing.TB, claims jwt.MapClaims)

// encodeClaims is a helper func to convert claims to a valid JWT.
func (f *FakeIDP) encodeClaims(t testing.TB, claims jwt.MapClaims) string {
	t.Helper()

	if _, ok := claims["exp"]; !ok {
		claims["exp"] = time.Now().Add(time.Hour).UnixMilli()
	}

	if _, ok := claims["aud"]; !ok {
		claims["aud"] = f.clientID
	}

	if _, ok := claims["iss"]; !ok {
		claims["iss"] = f.locked.Issuer()
	}

	// Default email_verified to true so that tests that do not care
	// about the email_verified flow are not forced to set it.
	// Tests that need a different value can set it explicitly.
	// Use WithOmitEmailVerifiedDefault() to suppress this default
	// for tests that need to exercise the absent-claim path.
	if !f.omitEmailVerifiedDefault {
		if _, ok := claims["email_verified"]; !ok {
			claims["email_verified"] = true
		}
	}

	signed, err := jwt.NewWithClaims(jwt.SigningMethodRS256, claims).SignedString(f.locked.PrivateKey())
	require.NoError(t, err)

	return signed
}

// httpHandler is the IDP http server.
func (f *FakeIDP) httpHandler(t testing.TB) http.Handler {