co.gaiwan.oauth-tester.impl — co.gaiwan/oak 0.5.227-rc

OAuth tester tool implementation

all-checks clj

authorization-endpoint-rejects-implicit-grant clj

(authorization-endpoint-rejects-implicit-grant ctx)

The server rejects requests with response_type=token

authorization-endpoint-rejects-invalid-client-id clj

(authorization-endpoint-rejects-invalid-client-id ctx)

The server rejects requests with invalid client_id parameter

authorization-endpoint-rejects-non-matching-redirect-uri clj

(authorization-endpoint-rejects-non-matching-redirect-uri ctx)

The server rejects requests with non-matching redirect_uri parameter

authorization-endpoint-rejects-redirect-uri-with-suffix clj

(authorization-endpoint-rejects-redirect-uri-with-suffix ctx)

The server rejects requests with redirect_uri that has additional suffix

authorization-endpoint-requires-client-id clj

(authorization-endpoint-requires-client-id ctx)

The server rejects requests with missing client_id parameter

authorization-endpoint-requires-redirect-uri clj

(authorization-endpoint-requires-redirect-uri ctx)

The server rejects requests with missing redirect_uri parameter

fetch clj

(fetch ctx req)

fetch-rfc8414-metadata clj

(fetch-rfc8414-metadata ctx)

Retrieve OAuth server configuration using .well-known endpoint

RFC 8414 - OAuth 2.0 Authorization Server Metadata

run-check clj

(run-check ctx check)

run-full-suite clj

(run-full-suite ctx)

(run-full-suite ctx report-fn)

token-endpoint-supports-client-credentials-grant clj

(token-endpoint-supports-client-credentials-grant ctx)

The server supports client_credentials grant type

validate-bad-client-id-response clj

(validate-bad-client-id-response {:keys [status headers body] :as response})

Helper to validate authorization endpoint error responses for invalid client_id

validate-bad-redirect-uri-response clj

(validate-bad-redirect-uri-response {:keys [status headers body] :as response}
                                    expected-redirect-uri)

Helper to validate authorization endpoint responses for invalid redirect_uri