35 lines
984 B
Go
35 lines
984 B
Go
|
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
||
|
|
// SPDX-License-Identifier: Apache-2.0
|
||
|
|
|
||
|
|
package fositestorage
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/ory/fosite"
|
||
|
|
"github.com/ory/fosite/handler/openid"
|
||
|
|
|
||
|
|
"go.pinniped.dev/internal/constable"
|
||
|
|
)
|
||
|
|
|
||
|
|
const (
|
||
|
|
ErrInvalidRequestType = constable.Error("requester must be of type fosite.Request")
|
||
|
|
ErrInvalidClientType = constable.Error("requester's client must be of type fosite.DefaultOpenIDConnectClient")
|
||
|
|
ErrInvalidSessionType = constable.Error("requester's session must be of type openid.DefaultSession")
|
||
|
|
)
|
||
|
|
|
||
|
|
func ValidateAndExtractAuthorizeRequest(requester fosite.Requester) (*fosite.Request, error) {
|
||
|
|
request, ok1 := requester.(*fosite.Request)
|
||
|
|
if !ok1 {
|
||
|
|
return nil, ErrInvalidRequestType
|
||
|
|
}
|
||
|
|
_, ok2 := request.Client.(*fosite.DefaultOpenIDConnectClient)
|
||
|
|
if !ok2 {
|
||
|
|
return nil, ErrInvalidClientType
|
||
|
|
}
|
||
|
|
_, ok3 := request.Session.(*openid.DefaultSession)
|
||
|
|
if !ok3 {
|
||
|
|
return nil, ErrInvalidSessionType
|
||
|
|
}
|
||
|
|
|
||
|
|
return request, nil
|
||
|
|
}
|