Method CreateAuthCode

idm/oauth/grpc/handler.go:343–459

(ctx context.Context, in *pauth.CreateAuthCodeRequest)

}

func (h *Handler) CreateAuthCode(ctx context.Context, in *pauth.CreateAuthCodeRequest) (*pauth.CreateAuthCodeResponse, error) {
	reg, err := manager.Resolve[oauth.Registry](ctx)
	if err != nil {
		return nil, err
	}

	host, _ := middleware.HttpMetaFromGrpcContext(ctx, keys.HttpMetaHost)

	values := url.Values{}
	values.Set("client_id", in.GetClientID())
	values.Set("redirect_uri", in.GetRedirectURI())
	values.Set("response_type", "code")
	values.Set("consent_verifier", in.GetConsent().GetChallenge())
	values.Set("state", uuid.New())
	if in.GetCodeChallenge() != "" {
		values.Set("code_challenge", in.GetCodeChallenge())
		values.Set("code_challenge_method", in.GetCodeChallengeMethod())
	}

	req, err := http.NewRequestWithContext(ctx, "POST", "http://"+host, strings.NewReader(values.Encode()))
	if err != nil {
		return nil, err
	}

	// Replicate Post values to URL Query
	query := req.URL.Query()
	for k, v := range values {
		query[k] = v
	}
	req.URL.RawQuery = query.Encode()

	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")

	ar, err := reg.OAuth2Provider().NewAuthorizeRequest(ctx, req)
	if err != nil {
		return nil, errors.WithMessage(err, "while trying to create authorize request")
	}

	cookieStore, err := reg.CookieStore(ctx)
	if err != nil {
		return nil, err
	}

	cl := ar.GetClient().(*client.Client)
	clientSpecificCookieNameConsentCSRF := fmt.Sprintf("%s_%s", reg.Config().CookieNameConsentCSRF(ctx), cl.CookieSuffix())

	cookieSession, err := cookieStore.Get(req, clientSpecificCookieNameConsentCSRF)
	if err != nil {
		return nil, err
	}
	cookieSession.Values["csrf"] = in.GetConsent().GetCSRF()

	session, f, err := reg.ConsentStrategy().HandleOAuth2AuthorizationRequest(ctx, http.ResponseWriter(nil), req, ar)
	if errors.Is(err, consent.ErrAbortOAuth2Request) {
		// do nothing
		return &pauth.CreateAuthCodeResponse{}, nil
	} else if err != nil {
		return nil, errors.WithMessage(err, "while trying to authorize request")