ac83633888
Also switched the token_handler_test.go to use kube storage. Signed-off-by: Aram Price <pricear@vmware.com>
36 lines
1.1 KiB
Go
36 lines
1.1 KiB
Go
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package fositestorage
|
|
|
|
import (
|
|
"github.com/ory/fosite"
|
|
"github.com/ory/fosite/handler/openid"
|
|
|
|
"go.pinniped.dev/internal/constable"
|
|
)
|
|
|
|
const (
|
|
ErrInvalidRequestType = constable.Error("requester must be of type fosite.Request")
|
|
ErrInvalidClientType = constable.Error("requester's client must be of type fosite.DefaultOpenIDConnectClient")
|
|
ErrInvalidSessionType = constable.Error("requester's session must be of type openid.DefaultSession")
|
|
StorageRequestIDLabelName = "storage.pinniped.dev/request-id" //nolint:gosec // this is not a credential
|
|
)
|
|
|
|
func ValidateAndExtractAuthorizeRequest(requester fosite.Requester) (*fosite.Request, error) {
|
|
request, ok1 := requester.(*fosite.Request)
|
|
if !ok1 {
|
|
return nil, ErrInvalidRequestType
|
|
}
|
|
_, ok2 := request.Client.(*fosite.DefaultOpenIDConnectClient)
|
|
if !ok2 {
|
|
return nil, ErrInvalidClientType
|
|
}
|
|
_, ok3 := request.Session.(*openid.DefaultSession)
|
|
if !ok3 {
|
|
return nil, ErrInvalidSessionType
|
|
}
|
|
|
|
return request, nil
|
|
}
|